BV House

Privacy Policy

How we collect, use and protect your personal data.

1. Who we are

This site and the BV House membership service are operated by BonVivant Membership S.L. (CIF B75677310), with registered office at Calle Nilo 20, Estepona, Málaga 29680, Spain. References to "we", "us" or "BV House" in this policy refer to BonVivant Membership S.L.

We act as the data controller for the personal data we collect through this website, the BV House mobile application and our day-to-day operations at the house. You can reach us at hello@bvhouse.co.

2. What we collect, and why

The personal data we hold falls into a small number of categories:

  • Account & identity: name, email, phone, date of birth, nationality, country, gender (optional), industry — submitted by you on the application form so the membership committee can review your application and to contact you about it.
  • Profile & bio: a headshot, optional bio paragraphs and proposer references — used inside the house so reception and staff can greet you correctly and the committee can vouch for the proposers.
  • Membership records: your tier, joining date, renewal status, credits balance and payment-method tokens — held to operate your membership and process renewals. Card details themselves are never seen by us; they are tokenised by Stripe (see §6).
  • Visit history: check-ins (door scan, hotel reservation), bookings (workpods, classes, restaurant), butler chats and orders — used to deliver the service and to improve it (e.g. which evenings are busiest, which classes fill).
  • Technical data: device type, IP address, browser version, push-notification subscription endpoint — collected when you use the app, used for security and to deliver notifications you have opted into.

3. Lawful bases (GDPR Art. 6)

  • Performance of a contract — almost everything related to operating your membership (bookings, payments, communications about your account).
  • Consent — marketing emails, profile photo upload, push notifications and any optional fields. You may withdraw consent at any time.
  • Legitimate interests — fraud prevention, securing the platform, aggregated analytics about house usage. Balanced against your interests; objection available on request.
  • Legal obligation — keeping accounting records as required by Spanish tax and corporate law (typically 6 years).

4. Who sees your data

Inside the house, your name, photo and bio are visible to BV House staff and admins so they can greet you on arrival. Other members do not see your contact details or application information.

We share data with a small set of processors that help us run the service:

  • Stripe — card tokenisation and payment processing.
  • Mews — hotel reservation system, when you book a room or stay.
  • Resend — transactional email delivery.
  • Vercel — application hosting and CDN.
  • Neon — managed Postgres hosting (data resides in the EU — Frankfurt).
  • Anthropic — the conversational AI behind the in-app butler. Messages you send through the butler are sent to Anthropic to generate replies.

We do not sell or rent personal data. We do not transfer personal data outside the European Economic Area except to processors covered by Standard Contractual Clauses or an adequacy decision (e.g. Anthropic Inc. in the United States).

5. How long we keep it

  • Active members: for the duration of your membership.
  • Former members: contact and membership history retained for 6 years after the membership ends, to meet Spanish accounting / consumer-law obligations.
  • Declined applications: 12 months, then deleted, unless you ask sooner.
  • Visit / butler-chat logs: 24 months on a rolling basis.

6. Payments

We never see or store your card number. When you add a card to your application, it is sent directly to Stripe, which returns an opaque token that we store. All card-on-file actions (annual fee, renewal, in-house spend) are performed via Stripe using that token. You can manage or remove your saved card via the customer portal link inside the app.

7. Your rights

You have the right under the GDPR and Spanish LOPDGDD to:

  • Request a copy of the personal data we hold about you (right of access).
  • Correct inaccurate data (right of rectification).
  • Ask us to delete your data, subject to our legal-retention obligations (right to erasure).
  • Restrict or object to specific processing.
  • Receive your data in a portable format.
  • Withdraw any consent you have given.

To exercise any of these rights, write to hello@bvhouse.co with enough information to verify your identity. We respond within 30 days. You also have the right to complain to the Spanish Data Protection Authority (Agencia Española de Protección de Datos, aepd.es).

8. Cookies & analytics

The marketing site uses minimal first-party cookies and a privacy-preserving analytics layer (Vercel Analytics / Speed Insights) that records page views and performance — not personal identifiers. The app itself uses authentication cookies necessary for sign-in.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active members by email or in-app notice. The current version is dated 2026-05-04.