SuiteHop Privacy Policy

SuiteHop: Premium Suite & Event Ticket Marketplace

_{Effective Date: May 22, 2026 — Last Updated: May 22, 2026}

I. Scope and Applicability

This Privacy Policy applies to all personal information collected by SuiteHop through its website at suitehop.com, mobile applications, telephone interactions, email and SMS communications, and any other channel through which you interact with SuiteHop. It applies to Buyers, Sellers, and visitors alike.

By using our services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of our services.

II. Personal Information We Collect

2.1 Information You Provide. We collect information you directly provide to us, including: full name; email address; phone number; billing and shipping address; company name and title (for business accounts); payment card information (processed and tokenized by Stripe; SuiteHop does not store full card numbers); communications you send us via chat, email, or telephone; event and seating preferences.

2.2 Transaction Information. When you complete a Transaction, we collect: order details (event, date, venue, Package type); Listed Price and amount paid; delivery information; Transaction confirmation and tracking data; and correspondence related to the Transaction.

2.3 Automatically Collected Information. When you visit the Platform, we automatically collect: IP address and general geographic location; browser type, version, and operating system; device identifiers; pages visited, time spent, and navigation paths; referring URLs; and session recordings of your interactions with the Platform (see Section V regarding PostHog).

2.4 Information from Third Parties. We may receive information from: payment processors (transaction status, fraud signals); analytics and advertising partners (aggregated audience data); marketing databases (contact enrichment where permitted by law); and Sellers (also referred to as Listing Partners, being the party who supplied the inventory for your Transaction).

III. How We Use Your Information

We use personal information for the following purposes:

• Processing and fulfilling Transactions, including coordinating with Sellers and authorized fulfillment partners
• Sending order confirmations, delivery notifications, and event updates
• Providing customer support and resolving disputes
• Sending marketing and promotional communications by email, text message, and phone where you have provided prior express written consent
• Personalizing your experience and improving our Platform and services
• Detecting, investigating, and preventing fraud, abuse, and unauthorized access
• Complying with legal obligations, responding to lawful requests, and enforcing our agreements
• Conducting analytics and research to understand usage patterns and improve offerings
• Managing our business operations, including accounting and vendor relationships

We do not sell or rent your personal information to unaffiliated third parties for their own marketing purposes.

IV. Legal Bases for Processing (GDPR and CCPA)

4.1 Contract Performance. We process information as necessary to perform our contract with you, including processing your Transaction, delivering your Package, and providing customer support.

4.2 Legitimate Interests. We process information for our legitimate business interests, including fraud prevention, platform security, analytics, and marketing to existing customers, where such interests are not overridden by your privacy rights.

4.3 Consent. We process information for marketing and promotional communications by email, text message (SMS/MMS), and phone based on your prior express written consent, which you may withdraw at any time. For text message and phone marketing, consent is obtained in compliance with the Telephone Consumer Protection Act (TCPA). Consent to marketing communications is not a condition of any purchase or account.

4.4 Legal Obligation. We process information as required by applicable law, including tax reporting, responding to lawful government requests, and complying with financial regulations.

V. Third-Party Service Providers

SuiteHop engages third-party service providers who process personal information solely as necessary to provide services on our behalf. All service providers are contractually required to maintain confidentiality, implement appropriate security measures, and use personal information only for the purposes specified. We do not sell or rent personal information to any third party.

5.1 Payment Processing. Payment card transactions are processed by a PCI DSS Level 1 certified payment processor. SuiteHop does not store full payment card numbers, CVCs, or bank account details. For certain transactions processed through third-party ticketing platforms, payment may be processed through that platform’s payment infrastructure under its applicable terms.

5.2 Infrastructure and Hosting. The Platform is hosted on U.S.-based cloud infrastructure maintained by providers with industry-standard security certifications. Data is stored in U.S. data centers.

5.3 Communications, CRM, and Analytics. We use third-party platforms to manage customer communications, relationship management, and Platform analytics. These providers access only the personal information necessary for the services they provide and are prohibited from using it for their own commercial purposes.

5.4 Advertising Platforms. We may use third-party advertising platforms, including Google and Meta (Facebook), to display relevant advertisements based on your interactions with the Platform. These platforms may use cookies or device identifiers to serve personalized content. You may opt out through the settings described in Section IX.

5.5 Fulfillment Partners. When you complete a Transaction involving inventory sourced through an authorized fulfillment partner, we share Fulfillment Data with that fulfillment partner solely for the purpose of processing and delivering your Package. Fulfillment Data consists of your name, email address, order confirmation number, event details, and technical information required for ticket delivery. Fulfillment partners are contractually prohibited from using Fulfillment Data for independent marketing, audience profiling, or any purpose other than fulfillment. This disclosure constitutes a service provider disclosure and does not constitute a sale of personal information under applicable law.

5.6 Mobile Information and SMS Opt-In Data. No mobile information — including mobile phone numbers, SMS opt-in status, and consent records — will be shared with third parties or affiliates for marketing or promotional purposes. Mobile information collected through SMS opt-in is used solely to send the transactional messages described in this Policy and the Buyer Services Agreement, and to provide order support. This information is excluded from any data sharing with advertising platforms, marketing partners, or data brokers.

VI. Fulfillment Data — Detailed Terms

6.1 What Is Shared. Fulfillment Data shared with fulfillment partners is limited to: Buyer’s name; Buyer’s email address; order confirmation number and event details; and such technical information as is required by the fulfillment partner’s delivery system. No payment card information is shared with fulfillment partners.

6.2 How It Is Protected. SuiteHop requires all fulfillment partners to execute data processing agreements that: (a) limit use to order fulfillment; (b) prohibit marketing or profiling use; (c) prohibit combining Fulfillment Data with the fulfillment partner’s own customer database; (d) require deletion upon fulfillment completion; and (e) require prompt breach notification.

6.3 Not a Sale. Sharing of Fulfillment Data is a service provider disclosure under the CCPA/CPRA and does not constitute a sale or sharing of personal information.

6.4 Your Rights. You may contact privacy@suitehop.com to inquire about any Fulfillment Data sharing in connection with your Transaction. SuiteHop does not share Buyer identity with Listing Partners who supplied inventory through its seller platform; Fulfillment Data is shared only with fulfillment partners whose systems are required to complete ticket delivery.

VII. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Transaction records (including name, contact, Package, and payment confirmation): 7 years, to comply with accounting and tax obligations
• Customer account information: duration of account plus 3 years following account closure
• Marketing and communication consent records: 4 years from last interaction, opt-out, or withdrawal of consent, to comply with applicable law, including the Telephone Consumer Protection Act (TCPA)
• Session recordings and analytics data: 12 months from collection
• Dispute and legal hold records: duration of dispute or legal proceeding plus 5 years

Upon expiration of the applicable retention period, we securely delete or anonymize personal information. Anonymized data (which cannot reasonably identify you) may be retained for longer periods for research and analytics purposes.

VIII. Security

8.1 Technical Safeguards. SuiteHop implements industry-standard security measures including TLS encryption for data in transit, encryption at rest for sensitive data, multi-factor authentication for personnel access, and regular security assessments.

8.2 Payment Security. All payment transactions are processed through Stripe’s PCI DSS Level 1 infrastructure. SuiteHop does not handle raw payment card data.

8.3 Access Controls. Access to personal information is limited to authorized personnel with a legitimate business need. Access is logged and reviewed periodically.

8.4 Breach Notification. In the event of a security breach affecting your personal information, SuiteHop will notify you and applicable regulators as required by applicable law.

8.5 No Absolute Guarantee. While we implement robust safeguards, no online system is completely secure. You transmit data at your own risk and are responsible for maintaining the security of your account credentials.

IX. Cookies and Tracking Technologies

9.1 Types of Cookies. We use: (a) essential cookies necessary for Platform functionality; (b) analytics cookies to understand Platform usage; and (c) advertising cookies to deliver relevant marketing.

9.2 Your Choices. You may manage cookies through your browser settings. Disabling certain cookies may affect Platform functionality. For analytics opt-out, visit PostHog’s opt-out page. For advertising opt-out: Google Ad Settings (google.com/settings/ads); Meta Ad Preferences (facebook.com/settings/?tab=ads); Digital Advertising Alliance opt-out (optout.aboutads.info).

9.3 Do Not Track. SuiteHop does not currently respond to Do Not Track browser signals but will update this Policy if we implement such a response.

X. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. To exercise any right, contact privacy@suitehop.com. We will verify your identity and respond within the timeframe required by applicable law (generally 45 days, extendable by an additional 45 days with notice).

10.1 Access. You may request a copy of the personal information we hold about you.

10.2 Correction. You may request correction of inaccurate or incomplete personal information.

10.3 Deletion. You may request deletion of your personal information, subject to exceptions for legal compliance, fraud prevention, and dispute resolution.

10.4 Withdraw Marketing Consent. SuiteHop sends marketing communications only to users who have affirmatively opted in. You may withdraw your marketing consent at any time without affecting the lawfulness of prior processing or your ability to use the Platform. To opt out: email preferences@suitehop.com; reply STOP to any SuiteHop text message; or use the unsubscribe link in any SuiteHop marketing email. Phone marketing opt-out: contact preferences@suitehop.com.

10.5 Data Portability. Where required by law, you may request a copy of your personal information in a structured, machine-readable format.

10.6 Opt-Out of Sale/Sharing (California). SuiteHop does not sell personal information as defined under the CCPA/CPRA. If this practice changes, we will provide notice and an opt-out mechanism.

10.7 Limit Use of Sensitive Information (California). You may request that SuiteHop limit use of sensitive personal information (as defined under CPRA) to purposes necessary for providing services.

10.8 Non-Discrimination. SuiteHop will not discriminate against you for exercising your privacy rights.

XI. California, Colorado, and Other State Privacy Laws

11.1 California (CCPA/CPRA). California residents have all rights described in Section X. SuiteHop does not sell personal information. For the twelve months preceding the effective date of this Policy, SuiteHop has disclosed the following categories of personal information to service providers for business purposes: identifiers (name, email, phone, IP address); commercial information (Transaction history); internet activity (browsing and session data); and geolocation (approximate location from IP address). SuiteHop obtains prior express written consent for telephone and text marketing in compliance with the Telephone Consumer Protection Act (TCPA).

11.2 Colorado (CPA). Colorado residents have rights to access, correct, delete, data portability, and opt out of targeted advertising and profiling. To exercise rights, contact privacy@suitehop.com.

11.3 Virginia, Connecticut, Texas, and Other States. Residents of states with enacted comprehensive privacy laws have rights substantially similar to those described in Section X. SuiteHop will honor applicable rights regardless of state of residence.

11.4 Authorized Agents. You may designate an authorized agent to submit privacy requests on your behalf. We will require written authorization and identity verification.

XII. International Users (GDPR)

12.1 EEA, UK, and Switzerland. If you reside in the European Economic Area, United Kingdom, or Switzerland, you have rights under the GDPR or applicable equivalent, including access, rectification, erasure, restriction, portability, and objection. You also have the right to lodge a complaint with your local supervisory authority.

12.2 Data Transfers. Your information is processed and stored in the United States. Transfers of personal information from the EEA/UK to the U.S. are made pursuant to appropriate safeguards, including Standard Contractual Clauses.

12.3 Legal Bases. We process EEA/UK personal information under the legal bases described in Section IV.

XIII. Children’s Privacy

SuiteHop’s services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to SuiteHop, please contact privacy@suitehop.com and we will promptly delete such information.

XIV. Changes to This Policy

SuiteHop may update this Privacy Policy periodically. The type of change determines how we notify you.

14.1 Material Changes. A material change is one that meaningfully affects your rights or our data practices, including changes to: categories of personal information collected; purposes for which information is used; categories of third parties with whom information is shared; data retention periods; or your privacy rights. We will notify you of material changes by email to the address associated with your account at least fourteen (14) days before the effective date. If you do not wish to accept a material change, you may close your account before the effective date.

14.2 Non-Material Changes. Changes that clarify existing practices, correct errors, update contact information, improve readability, or reflect operational changes that do not affect your rights do not require advance notice. We will post the updated Policy on the Platform with a revised effective date. Continued use of the Platform after posting constitutes acceptance.

14.3 Version History. The effective date at the top of this Policy reflects the date of the most recent update. Prior versions are available upon request by contacting privacy@suitehop.com.

XV. Contact

Privacy Contact

Privacy Officer: privacy@suitehop.com
Phone: +1-844-784-8346⁠
Mail: SuiteHop Privacy Officer, 1500 N Grant St #4687, Denver, CO 80203

For GDPR/UK inquiries: privacy@suitehop.com (indicate “GDPR Request” in the subject line)
For CCPA requests: privacy@suitehop.com (indicate “CCPA Request” in the subject line)