Privacy Policy

1. Introduction

69Rooms, operated by UNDRMSK ("we," "us," "our"), provides a curated lifestyle platform at www.69rooms.com. This Privacy Policy describes how we collect, use, and protect your personal information when you use our website.

This policy complies with the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and where applicable, the General Data Protection Regulation (GDPR).

2. Information We Collect

Information You Provide:

• Account information: name, email, phone number, date of birth, password
• Profile details: gender, preferences, photos
• Application responses and communications with our team
• Payment information (processed by Stripe; we do not store card numbers)

Automatically Collected:

• Usage data: pages visited, features used, time on site
• Device information: IP address, browser type, operating system
• Cookies: session cookies for authentication and preferences
• Analytics data: We use Google Analytics and Meta Pixel to track website usage, conversions, and advertising effectiveness
• Third-party cookies: Google and Meta may set cookies to track your activity across websites

3. How We Use Your Information

• Process applications and manage memberships
• Send event notifications and account updates
• Process payments and subscriptions
• Provide customer support
• Improve website functionality and user experience
• Analytics and advertising: Track conversions, measure ad performance, and optimize marketing campaigns via Google Analytics and Meta Pixel
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share information only with:

• Service Providers: Stripe (payments), Resend (emails), Vercel/Neon (hosting)
• Analytics & Advertising: Google LLC (Google Analytics - Measurement ID: G-CWYJEYL74P), Meta Platforms Inc. (Meta Pixel - ID: 1603004337327895) for tracking, analytics, and advertising optimization
• Legal Compliance: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

5. Data Security

We use industry-standard security measures including SSL/TLS encryption, password hashing (bcrypt), and secure database storage. Payment data is handled by PCI-DSS compliant Stripe. While we implement strong security, no method is 100% secure.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Opt-out of marketing emails
• California residents: Additional rights under CCPA/CPRA
• EU residents: Additional rights under GDPR

To exercise these rights, contact legal@undrmsk.com

7. Data Retention

We retain your data while your account is active or as needed to provide services. Deleted accounts are purged within 30 days (some transaction records kept for 7 years for legal/tax compliance).

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze site usage. By using our website, you consent to our use of cookies as described below.

Types of Cookies We Use:

• Essential Cookies: Required for authentication, session management, and core website functionality. These cannot be disabled without breaking the site.
• Analytics Cookies (Google Analytics): Track page views, user behavior, and site performance to help us improve your experience. Google Analytics collects IP addresses, browser information, and usage patterns.
• Advertising Cookies (Meta Pixel): Track conversions, measure ad effectiveness, and enable retargeting on Facebook and Instagram. Meta Pixel collects browsing behavior and event data (e.g., account creation, payment completion).

Your Cookie Choices:

• Browser Settings: You can disable cookies in your browser settings, though this may limit functionality
• Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on
• Meta Pixel Opt-Out: Adjust your Facebook Ad Preferences
• California Residents (CCPA/CPRA): You have the right to opt-out of the "sale" of personal information. While we don't sell data, analytics sharing may qualify under CCPA. Contact us to opt-out.
• EU Residents (GDPR): You can withdraw consent for non-essential cookies at any time by contacting us

9. Children's Privacy

Our website is not intended for individuals under 21. We do not knowingly collect information from anyone under 21.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on our website with an updated effective date.

11. Contact Us