Privacy Policy & Confidentiality

1. Overview & Data Protection Commitment

OV XIII Ltd ("the Lounge", "we", "our") is committed to honoring the privacy, discretion, and data rights of our affiliates, members, and invited guests. This Privacy Policy sets out how personal data collected via our website, digital pass portal, member dashboard, and UniFi door access system is managed in full compliance with the Gibraltar General Data Protection Regulation (Gibraltar GDPR) and the Data Protection Act 2004.

2. Information We Collect

We collect and process only the data necessary to verify membership eligibility, manage lounge door access, and fulfill accounting requirements:

• Affiliate Identity & Contact Details: Full name, corporate affiliation, primary email address, mobile number, and Gibraltar or international residence details.
• Digital Door Access Data: NFC card serial numbers, temporary UniFi QR pass tokens, entry timestamps, and door log audit trails for security monitoring.
• Financial & Billing Data: Payment transaction metadata via Stripe or bank transfer references (we do not store full credit card numbers on local servers).
• Guest Entry Passes: Name, email address, and linked event details for guest access passes issued by affiliates.

3. How We Use Your Data

Your personal information is strictly utilized to:

4. Data Discretion & Third-Party Non-Disclosure

We maintain a strict policy of confidentiality. We do not sell, rent, or trade affiliate contact lists or member rosters to commercial third parties. Data is shared exclusively with necessary operational infrastructure providers (e.g. Firebase Auth, Stripe Payments, UniFi Access Controllers) bound by strict confidentiality agreements.

5. Your Rights Under GDPR

Under Gibraltar GDPR, you have the right to request access to your personal data, rectify inaccuracies, request account deletion, or restrict processing. To exercise any of these rights, please contact our Data Protection Officer at: