privacy-policy - The Chestnut Club

Privacy Policy

PRIVACY POLICY

Last Updated: December 16th, 2025

Thank you for visiting https://thechestnutclubsm.com (the “Website”). Your privacy is important to us. This Privacy Policy (the “Policy”) describes the types of information The Chestnut Club (the “Company”, “us”, “we”, or “our”) may collect from you or that you may provide when you visit the Website and the products, features, materials, and services we offer (collectively with the Website, the “Services”). This Policy also describes our policies and procedures for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect on the Website and through your use of the Services generally (including when you register for an account), and through communications between you and the Website (including email, text, and other electronic messages).

This Policy does not apply to information collected by third parties, including any websites, services, and applications that you elect to access through the Services.

Please review this Policy carefully. By accessing or using the Services (or by clicking on “accept” or “agree” to this Policy when prompted), you agree to the terms of this Policy on behalf of yourself or the entity or organization that you represent. If you do not agree to any term in this Policy, you should refrain from further use of our Services.

1. Changes to Our Privacy Policy

This Policy was last revised on the date noted at the top of this page. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and notify you of such changes by means of an email to the email address specified in your account, a message on the Services, or through a notice on the Website home page. Your continued use of the Services after we make changes is deemed to be acceptance of those changes.

2. Information We Collect

We receive several types of information about you from various sources, including (A) information and content that you give us; (B) automatically-collected information; and (C) demographic information or other aggregate information.

A. Information and Content That You Give Us

We collect personal information that you knowingly choose to disclose. This may include:

Personal Information. Your name, address, email address, phone number, username, password, and any other information you directly provide us on or through the Services, including when you register for an account, complete a questionnaire or contest entry form, or make a request for customer service.
Correspondences. Records and copies of your email messages together with your email address and our responses, and records of your phone number, phone calls with us, and voice messages, if you choose to correspond with us.
User Content. Information or content you submit to be published or displayed on public areas of the Services or transmitted to other users of the Services or third parties. Your User Content is posted and transmitted to others at your own risk.
Transaction Information. Information about any purchase or transactions made on the Services, including payment information, account and authentication information, and billing, shipping, and contact details.
Search Queries. Your search queries on the Website.

B. Information We Collect Automatically

We may use a variety of technologies to collect certain information about your equipment, browsing actions, and patterns whenever you interact with the Services, including:

Activity Information. Details of your visits to our Services, including the types of content you view or engage with; the features you use; the actions you take; the time, frequency, and duration of your activities.
Equipment Information. Information about your computer and internet connection, including your computer operating system, IP address, browser type, and browser language.
Location Information. Information about the location of your device, including GPS location, for purposes of enhancing or facilitating the Services.

The technologies we use for this automatic data collection may include:

Cookies. A cookie is a small data file stored on the hard drive of your computer either for only the duration of your visit on a website (session cookies) or for a fixed period (persistent cookies). We may use cookies to provide you with a more personal and interactive experience on the Services.
Web Beacons. Small files embedded in webpages, applications, and emails that allow the Company to track who has visited those webpages or opened an email, and to test the effectiveness of our marketing.
JavaScripts. Code snippets embedded in websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components.
Entity Tags. HTTP code mechanisms that allow portions of websites to be stored or cached within your browser to accelerate website performance.
HTML5 Local Storage. Allows data from websites to be stored or cached within your browser to store and retrieve data in HTML5 pages when the website is revisited.
Resettable Device Identifiers. Also known as advertising identifiers, these are found on many mobile devices and tablets and are used to make online advertising more relevant.

This Policy does not cover the use of tracking technologies by third parties. The Company does not claim nor accept responsibility for any privacy policies, practices, or procedures of any third party. We encourage you to read the privacy statements and terms and conditions of linked or referenced websites you enter.

C. Demographic Information

We may collect demographic, statistical, or other aggregate information that is about you, but individually does not identify you. Examples of such aggregate information include gender, age, race, and household income.

D. Information from Other Sources

We may receive information about you from other sources and add it to our account information. These sources may include online and offline data providers, publicly-available sources such as open government databases or social networks, and service providers who provide us with information based on their relationship with you.

3. How We Use Your Information

We may use the information we collect about you in a variety of ways, including:

To provide the Services and its content to you;
To respond to comments and questions, and provide customer service;
To fulfill the purpose for which you provide such information, or fulfill any other purpose disclosed by us when you provide the information;
To communicate with you about your order, purchase, account, or subscription;
To inform you about important changes to, or other news about, the Services or any of its features or content;
To operate, maintain, improve, personalize, and analyze the Services;
To monitor and analyze trends, usage, and activities for marketing or advertising purposes;
To detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activity;
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
To maintain appropriate records for internal administrative purposes;
To allow you to participate in interactive features on the Services;
To send promotional communications, such as information about features, newsletters, offers, promotions, contests, and events;
To share information across the Company’s products, services, and devices to provide a more tailored and consistent experience;
To develop, test, troubleshoot, and improve new products, services, and features, including by conducting surveys and research;
In any other way we may describe when you provide the information; and
For any other purpose with your consent.

4. How We Share Your Information

We may disclose aggregated or anonymized information about our users without any restrictions. We will not share your personal information except in the following circumstances:

With subsidiaries and affiliates for business purposes. To our subsidiaries and affiliated companies for purposes of management and analysis, decision-making, and other business purposes.
When we work with service providers. To service providers, professional advisors, contractors, and other third parties that provide us with support services such as payment processing, website hosting, information technology, sales, email and postal delivery, location mapping, product and service delivery, or analytics services.
When we become involved in a sale or transfer of the Company. If we become involved with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets.
When we are required by law. To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
When we enforce our rights. To enforce or apply this Policy, our Terms of Use, and other agreements, including for billing and collection purposes.
To help protect lawful interests. If we believe disclosure will help us protect the rights, property, or safety of the Company, our users, partners, agents, and others.
To fulfill the purpose for that information or with your consent. To fulfill the purpose for which you provide the information, for any other purpose disclosed by us when you provide the information, or with your consent.
When we work with marketing service providers. To marketing service providers to assess, develop, and provide you with promotions and special offers; administer contests, sweepstakes, and events; or for other promotional purposes.
When we work with business partners. To third parties whom we have strategic marketing alliances or partnerships with to provide you information regarding products and services that may interest you.
Third-party platforms and social media networks. If you have enabled features or functionality that link the Services to such a platform or network.

5. Detailed Information on the Personal Data We Collect

Personal Data is collected for the following purposes and using the following services:

Access to Third-Party Accounts

This type of service allows the Website to access Data from your account on a third-party service and perform actions with it. These services are not activated automatically, but require explicit authorization by the User.

Facebook Account Access (Meta Platforms, Inc.)

Permissions asked: Business Management API; Chat; Mobile Messaging on behalf of Page; Page Messaging. Place of processing: United States. Category of personal information collected according to CCPA: internet information.

Advertising

This type of service allows User Data to be utilized for advertising communication purposes displayed in the form of banners and other advertisements on the Website, possibly based on User interests.

Google Ad Manager (Google LLC)

Google Ad Manager is an advertising service provided by Google LLC that allows the Company to run advertising campaigns in conjunction with external advertising networks. This service uses the DoubleClick Cookie, which tracks use of the Website and User behavior concerning ads, products and services offered. Users may disable all DoubleClick Cookies by visiting Google Ad Settings. Personal Data processed: Tracker and Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Facebook Lookalike Audience (Meta Platforms, Inc.)

Facebook Lookalike Audience is an advertising and behavioral targeting service that uses Data collected through Facebook Custom Audience to display ads to Users with similar behavior to existing Custom Audience users. Users can opt out of Facebook’s use of cookies for ads personalization by visiting Facebook’s opt-out page. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Analytics

Google Analytics (Google LLC)

Google Analytics is a web analysis service provided by Google LLC. Google utilizes the Data collected to track and examine the use of the Website, to prepare reports on its activities and share them with other Google services. Personal Data processed: Tracker; Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Google Ads Conversion Tracking (Google LLC)

Ads conversion tracking is an analytics service provided by Google LLC that connects data from the Google Ads advertising network with actions performed on the Website. Personal Data processed: Tracker; Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Facebook Ads Conversion Tracking / Facebook Pixel (Meta Platforms, Inc.)

Facebook Ads conversion tracking (Facebook pixel) is an analytics service that connects data from the Facebook advertising network with actions performed on the Website. Personal Data processed: Tracker; Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Connecting Data

Zapier (Zapier Inc.)

Zapier is a workflow automation service provided by Zapier, Inc. that automates the movement of Data between third-party services. Personal Data processed: Data communicated while using the service. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Contacting the User

Mailing List / Newsletter (The Chestnut Club)

By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning the Website. Personal Data processed: email address. Category of personal information collected according to CCPA: identifiers.

Handling Payments

Unless otherwise specified, The Chestnut Club processes any payments by credit card, bank transfer, or other means via external payment service providers. The Website is not involved in the collection and processing of such information; instead, it will only receive a notification by the relevant payment service provider as to whether payment has been successfully completed.

Stripe (Stripe Inc.)

Stripe is a payment service provided by Stripe Inc. Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States. Category of personal information collected according to CCPA: internet information.

Managing Contacts and Sending Messages

Mailgun (Mailgun Technologies, Inc.)

Mailgun is an email address management and message sending service provided by Mailgun Technologies, Inc. Personal Data processed: email address. Place of processing: United States. Category of personal information collected according to CCPA: identifiers. This processing constitutes a sale based on the definition under the CCPA.

Twilio (Twilio Inc.)

Twilio is a phone numbers management and communication service provided by Twilio, Inc. Personal Data processed: phone number. Place of processing: United States. Category of personal information collected according to CCPA: identifiers. This processing constitutes a sale based on the definition under the CCPA.

Remarketing and Behavioral Targeting

This type of service allows the Website and its partners to inform, optimize and serve advertising based on past use of the Website by the User. Users may opt out via the Network Advertising Initiative opt-out page or through applicable device settings.

Google Ads Remarketing (Google LLC)

Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC that connects the activity of the Website with the Google Ads advertising network and the DoubleClick Cookie. Users can opt out of Google’s use of cookies for ads personalization by visiting Google’s Ads Settings. Personal Data processed: Tracker and Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Facebook Custom Audience (Meta Platforms, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service that connects the activity of the Website with the Facebook advertising network. Users can opt out of Facebook’s use of cookies for ads personalization by visiting Facebook’s opt-out page. Personal Data processed: email address and Tracker. Place of processing: United States. Category of personal information collected according to CCPA: identifiers; internet information. This processing constitutes a sale based on the definition under the CCPA.

Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service that connects the activity of the Website with the Facebook advertising network. Personal Data processed: Tracker and Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

Tag Management

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC that helps the Company manage the tags or scripts needed on the Website in a centralized fashion. Personal Data processed: Usage Data. Place of processing: United States. Category of personal information collected according to CCPA: internet information. This processing constitutes a sale based on the definition under the CCPA.

6. Your Choices

Mechanisms to Control Your Information

Cookies and Other Tracking Technologies. You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Please note that if you disable or refuse cookies or other tracking technologies, some parts of the Services may become inaccessible or may not function properly.
Promotional Communications. If you do not wish to have your contact information used by The Chestnut Club to promote our own or third-party products or services, you can opt out by (i) informing us of your preference at the time you register for an account; (ii) modifying your user preferences in your account profile; (iii) following the opt-out instructions in the promotional emails we send you; or (iv) sending us an email at marketing@happytoserveyou.com stating your request. Please note that if you opt out of receiving promotional communications, we may still send you transactional communications, including emails about your account or purchases.
Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt out by modifying your user preferences in your account profile. To opt out via industry opt-out pages, visit www.AboutAds.info and www.networkadvertising.org.
Location Information. You may be able to adjust the settings of your device so that information about your physical location is not sent to us or third parties by (a) disabling location services within the device settings; or (b) denying certain websites or applications permission to access location information by changing the relevant preferences and permissions in your device or browser settings.
Voice Transmissions. You may be able to adjust the settings of your device so that your voice transmissions cannot be sent to us or third parties by disabling microphone and speech recognition services within the device settings.

How We Respond to Do Not Track Signals

Do Not Track is a privacy preference you can set in most web browsers. Please note that we currently do not respond to Do Not Track browser settings.

7. Accessing and Correcting Your Information

You may send us an email at marketing@happytoserveyou.com to request access to, correct, or remove any personal information that you have provided to us. You may also access, correct, or remove your personal information by logging into the Website and visiting your account profile page. We cannot delete your personal information except by also deleting your account.

We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

8. California Privacy Rights (CCPA/CPRA)

The provisions contained in this section apply to all Users who are consumers residing in the State of California, United States of America, according to the “California Consumer Privacy Act of 2018” (the “CCPA”), as updated by the “California Privacy Rights Act” (the “CPRA”) and subsequent regulations. For such consumers, these provisions supersede any other possibly divergent or conflicting provisions contained in this Policy.

Categories of Personal Information Collected, Used, Sold, or Shared

We have collected the following categories of personal information about you: identifiers, commercial information and internet information. We do not collect sensitive personal information. We will not collect additional categories of personal information without notifying you.

Your California Privacy Rights

The right to know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which the personal information is collected, the purposes for which we use your information, and to whom we disclose such information.
The right to deletion. You have the right to request that we delete any of your personal information, subject to exceptions set forth by the law.
The right to correct inaccurate personal information. You have the right to request that we correct any inaccurate personal information we maintain about you.
The right to opt out of sale or sharing. You have the right to opt out of the sale or sharing of your personal information. You also have the right to request that we limit our use or disclosure of your sensitive personal information.
The right to non-discrimination. We will not discriminate against you for exercising your rights under the CPRA/CCPA.

How to Exercise Your California Rights

To exercise the rights described above, you need to submit your verifiable request to us by contacting us via the details provided in this document. You can submit a maximum of 2 requests over a period of 12 months. We will confirm receipt of your verifiable request within 10 days and will respond to your request within 45 days of its receipt, and may take up to 90 days to fulfill your request. We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive.

9. Virginia Privacy Rights (VCDPA)

The provisions contained in this section apply to all Users who are consumers residing in the Commonwealth of Virginia, according to the “Virginia Consumer Data Protection Act” (the “VCDPA”). For such consumers, these provisions supersede any other possibly divergent or conflicting provisions contained in this Policy.

Categories of Personal Data Collected

We have collected the following categories of personal data: identifiers, commercial information and internet information. We do not collect sensitive data. We will not collect additional categories of personal data without notifying you.

Your Virginia Privacy Rights

The right to access personal data. You have the right to request that we confirm whether or not we are processing your personal data, and to access such personal data.
The right to correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you.
The right to deletion. You have the right to request that we delete any of your personal data.
The right to data portability. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity, provided that this is technically feasible.
The right to opt out of targeted advertising. You have the right to opt out of the processing of your personal data for targeted advertising purposes.

How to Exercise Your Virginia Rights

To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document. We will respond to your request within 45 days of its receipt, and may take up to 90 days to fulfill your request. Should we deny your request, you have the right to appeal such decision by submitting a request to us. Within 60 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal. If the appeal is denied you may contact the Virginia Attorney General to submit a complaint. We do not charge a fee to respond to your request for up to two requests per year.

10. How We Protect Your Information

We take reasonable precautions to secure your personal information. We have implemented technical, physical, and administrative security measures designed to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information. All information you provide to us is stored on secure servers behind firewalls. When you transmit highly sensitive information (such as a credit card number) through the Services, we encrypt the transmission of that information using Secure Sockets Layer (SSL) technology.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. While we have employed security technologies and procedures to assist in safeguarding your personal information, no system or network can be guaranteed to be 100% secure. Any transmission of personal information is at your own risk.

SMS / Text Messaging Data:

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

11. Terms of Use

If you choose to visit the Services, your visit and any dispute over privacy are subject to this Policy and our Terms of Use (https://thechestnutclubsm.com/terms-of-use), including limitations on damages, resolution of disputes, and application of the law of the State of California.

12. Cookie Policy

The Chestnut Club uses Trackers. To learn more, please consult the Cookie Policy at https://thechestnutclubsm.com/cookie-policy.

13. Contact Us

We welcome your questions, comments, and concerns about privacy. You can contact us at:

The Chestnut Club

1348 14th St., Santa Monica, CA 90404

Phone: (310) 393-1348

Email: marketing@happytoserveyou.com

Website: https://thechestnutclubsm.com