Privacy Policy

Introduction

Merritt Workspace (“we,” “our,” or “us”) operates a coworking space at 2246 Irving Street, Denver, CO 80211. We are committed to protecting your privacy and to keeping your personal information secure.

This policy describes what we collect, why, who else can see it, and what you can ask us to do about it.

Information we collect

Personal information

• Contact information — name, email address, phone number, business address
• Account information — username, password, membership preferences
• Payment information — card details and billing address, processed securely through Stripe
• Business information — company name, job title, industry, LinkedIn profile
• Emergency contact — name, phone number, relationship
• Identification — photo ID, for building security

Usage information

• Building access logs (entry and exit times)
• Conference room bookings and usage
• Snackshop purchases
• Website usage data (IP address, browser type, pages visited)
• Security camera footage, in common areas only

Communications

When you contact us by email, phone or in person we keep the content of those communications and any attachments.

How we use it

Service delivery

• Process membership applications and manage accounts
• Provide building access and security
• Process conference room bookings and payments
• Fulfil snackshop orders
• Provide member support

Communication

• Send booking confirmations and receipts
• Notify you about service updates or changes
• Send community event invitations, with your consent
• Respond to your enquiries and requests

Business operations

• Maintain building security and safety
• Prevent fraud and unauthorised access
• Comply with legal obligations
• Improve our services and facilities
• Analyse usage patterns and trends

Sharing and disclosure

We do not sell, rent or trade your personal information. We share it only in these circumstances:

• Service providers — Stripe for payments, Google for calendar, Resend for email and Supabase for data storage may access your information in order to provide those services on our behalf.
• Legal requirements — where required by law, court order or a government authority, or to protect our rights, property or safety.
• Business transfers — in a merger, acquisition or sale of assets, your information may transfer to the acquiring entity.
• With your consent — where you have given us explicit permission.

Data security

We use appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure or destruction:

• Encrypted data transmission (SSL/TLS)
• Secure password storage using industry-standard hashing
• Regular security audits and updates
• Access to personal information on a need-to-know basis
• Physical security: access codes, locking offices and security cameras
• PCI-compliant payment processing through Stripe

No method of transmission over the internet or electronic storage is entirely secure. We work hard to protect your information but cannot guarantee absolute security.

Your rights and choices

• Access and correction — request access to your personal information and ask us to correct anything inaccurate.
• Data portability — request a copy in a structured, commonly used format.
• Deletion — request deletion, subject to legal retention requirements.
• Marketing communications — opt out of marketing email by clicking unsubscribe or contacting us.
• Account deactivation — ask us to deactivate your account at any time.

To exercise any of these, write to memberservices@merrittworkspace.net.

Data retention

• Active members — duration of membership plus seven years for financial records
• Booking records — seven years, for tax and accounting
• Security footage — 30 to 90 days, unless needed for an investigation
• Marketing contacts — until you unsubscribe or ask for deletion

Cookies and tracking

• Essential cookies — required for the site to work, such as login and cart
• Analytics cookies — help us understand how visitors use the site
• Preference cookies — remember your settings

You can control cookies in your browser settings, though disabling some will affect how the site works.

Children’s privacy

Our services are not directed at anyone under 18 and we do not knowingly collect information from children. If we learn we have collected information from a child without parental consent, we will delete it promptly.

Changes to this policy

We may update this policy. We will tell you about material changes by:

• Posting the updated policy here with a new “last updated” date
• Emailing active members
• Displaying a notice in the building

Continuing to use our services after changes are posted means you accept the updated policy.

Contact us

Questions, concerns or requests about this policy or our data practices: