Privacy Policy

Starboard and Stem Inc. ("we," "us," or "our"), operating as The Private Table, is committed to protecting the privacy and personal information of our members and guests in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

This Privacy Policy describes what personal information we collect, how we use and protect it, and your rights with respect to that information. By becoming a member of The Private Table or interacting with our services, you consent to the practices described in this policy.

We collect personal information that is necessary to administer your membership and deliver our services. This includes:

• Identity information: full name, date of birth, and profile photograph (optional)
• Contact information: email address, phone number, and mailing address
• Account credentials: password (stored in hashed form) and access tokens
• Payment information: credit card details and billing address, processed and stored securely through our payment processor (Stripe). We do not store raw card numbers on our servers.
• Membership information: tier, membership number, onboarding status, and agreement records
• Dining preferences: dietary restrictions, allergies, wine and food preferences, and culinary interests
• Professional information: occupation, employer, and industry (voluntarily provided)
• Event and booking records: events attended, seat bookings, and associated transactions
• Communications: messages sent through our member portal, inquiry forms, and direct correspondence

We collect this information directly from you when you apply for membership, complete your member profile, make a booking, or contact us.

We use your personal information for the following purposes:

• Account management: creating and maintaining your member account, verifying your identity, and managing access to the member portal
• Event booking: processing reservations, coordinating seating, and communicating event details including date, time, venue address, and menu
• Payment processing: securely handling membership fees and event booking payments through Stripe
• Member communications: sending event invitations, newsletters, announcements, and important account notices
• Personalisation: tailoring dining recommendations and event suggestions based on your stated preferences
• Legal and compliance obligations: maintaining accurate records as required by law
• Safety and security: protecting the integrity of our platform and preventing fraud

We will not use your personal information for purposes other than those identified above without your knowledge and consent, except where required or permitted by law.

We do not sell, rent, trade, or otherwise disclose your personal information to third parties for commercial or marketing purposes.

We may share your information in the following limited circumstances:

• Service providers: trusted vendors who assist us in operating our platform, such as our payment processor (Stripe) and email delivery provider (Resend). These parties are contractually required to keep your information confidential and use it only to provide services on our behalf.
• Event chefs and hosts: only the information necessary to prepare for your attendance (e.g., dietary restrictions and first name) may be shared with the chef hosting a specific event.
• Legal requirements: where we are required by law, regulation, or court order to disclose information.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity subject to the same privacy commitments.

We retain your personal information for as long as your membership is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.

Specifically:

• Active member records are retained for the duration of membership.
• Following membership cancellation or expiry, personal data is retained for a maximum of three (3) years unless a shorter period is requested.
• Payment and transaction records are retained for seven (7) years as required by Canadian tax and accounting regulations.
• Event booking records are retained for three (3) years following the event date.

When retention is no longer necessary, we securely delete or anonymise your personal information.

We implement industry-standard technical and organisational safeguards to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS/TLS), hashed password storage, access controls, and secure third-party payment processing.

No method of electronic transmission or storage is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

Under PIPEDA, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that inaccurate or incomplete information be corrected
• Withdrawal of consent: withdraw consent to certain uses of your information (subject to legal or contractual restrictions)
• Deletion: request that your personal information be deleted, subject to our retention obligations

To exercise any of these rights, or to request deletion of your member data, please contact us in writing at:

We will respond to all verified requests within thirty (30) days in accordance with PIPEDA requirements.

Our platform may use session cookies and similar technologies to maintain your login state and improve your experience. We do not use third-party advertising trackers or sell behavioural data. You may disable cookies through your browser settings; however, doing so may affect the functionality of the member portal.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated to active members by email. Continued use of our services following notice of any changes constitutes acceptance of the updated policy.