The Room

Legal

Privacy Policy

Last updated: October 7, 2026

This Privacy Policy explains how [LEGAL ENTITY NAME], operating as The Entrepreneur DNA and The Room (“we”, “us”, “our”), collects, uses, shares and protects your personal information when you visit www.accesstheroom.com (the “Site”), apply for membership, subscribe to our newsletter, or otherwise interact with us. Please read it carefully. By using the Site you agree to the practices described here.

1. Who we are

The Site and The Room membership are operated by [LEGAL ENTITY NAME], trading as The Entrepreneur DNA and The Room. We are the controller responsible for your personal information. If you have any questions about this policy or how we handle your data, contact us at support@accesstheroom.com or at [BUSINESS MAILING ADDRESS].

2. Information we collect

Information you provide

  • Membership application: your name, email address, phone number, location, website or social handle, business name, industry and revenue, together with the answers you give to the application questions (your goals, challenges, business details and what you’re seeking from The Room).
  • Newsletter: your email address and the page you subscribed from.
  • Contact: the contents of any email or message you send us.
  • Payment information: if you join The Room, membership fees are processed by a third-party payment provider. We do not store full card details on the Site; the provider handles that information under its own terms and privacy policy.

Information we collect automatically

  • Technical and usage data: IP address, browser type and device information, pages viewed, referring page, and access times. We record the IP address and browser agent attached to application and newsletter submissions to help prevent abuse.
  • Cookies and similar technologies: see “Cookies and tracking” below.

3. How we use your information

  • To review, process and respond to membership applications.
  • To operate, provide and administer The Room and your membership.
  • To send you the newsletter and other communications you’ve asked for.
  • To respond to your enquiries and provide support.
  • To secure the Site, prevent fraud and abuse, and verify that submissions are human.
  • To analyse and improve the Site and our services.
  • To comply with our legal obligations and enforce our terms.

4. Legal bases for processing

Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract (to administer your membership and application); your consent (for the newsletter and non-essential cookies, which you may withdraw at any time); our legitimate interests (to secure, operate and improve the Site and to communicate with you); and compliance with a legal obligation.

5. Cookies and tracking

We use a small number of cookies and similar technologies:

  • Essential: a secure session cookie is used only for signed-in administrators; it is not set for ordinary visitors.
  • Analytics: where enabled, we use Google Analytics to understand how the Site is used. These cookies are set only with your agreement where required.
  • Security: our application form uses Cloudflare Turnstile to tell humans from bots, which may set a cookie or collect limited device data for that purpose.
  • Embedded content: pages that embed third-party media (for example Spotify) may allow those providers to set their own cookies.

You can control or delete cookies through your browser settings. Blocking some cookies may affect how parts of the Site work.

6. How we share your information

We do not sell your personal information. We share it only as needed to run our business:

  • Service providers who process data on our behalf, including our website hosting provider, email delivery (Resend), workflow automation (Make.com), spreadsheet and analytics services (Google), and bot-protection (Cloudflare). These providers may process your application or newsletter details to deliver notifications and record submissions for us.
  • Legal and safety reasons — where we must comply with the law, enforce our terms, or protect our rights, users or the public.
  • Business transfers — if we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.
  • With your consent — in any other case, with your permission.

7. Third-party links and embeds

The Site links to and embeds third-party services (such as our podcast on Spotify, Apple Podcasts and YouTube, and our community platform). Those services have their own privacy policies, and we are not responsible for their practices. We encourage you to review them.

8. Data retention

We keep personal information for as long as needed for the purposes described in this policy — for example, to administer your membership, maintain a record of applications, and meet legal, accounting or reporting requirements. When it is no longer needed, we delete or anonymise it. You may ask us to delete your information as described below.

9. Data security

We use reasonable technical and organisational measures to protect your information, including encryption in transit, access controls and hashed credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International data transfers

We and our service providers may process your information in countries other than your own, including the United States. Where required, we take steps to ensure your information receives an adequate level of protection when transferred internationally.

11. Your rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion; receive a copy in a portable format; object to or restrict certain processing; and withdraw consent at any time. You can unsubscribe from marketing emails using the link in any such email.

If you are in California, you have the right to know what personal information we collect and how we use and disclose it, to request deletion, and not to be discriminated against for exercising your rights. As noted above, we do not sell personal information.

To exercise any of these rights, email us at support@accesstheroom.com. We will respond within the time required by applicable law. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

12. Children’s privacy

The Site and The Room are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes may be highlighted on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.

14. Contact us

Questions, requests or complaints about this policy or your personal information can be sent to support@accesstheroom.com, or by mail to [BUSINESS MAILING ADDRESS].