← Back

Privacy Policy

Version v1.5-2026-08-13 · Effective August 13, 2026

1. Who We Are

That Turkey Sandwich operates this website and its controlled-access services (collectively, “we,” “us,” or “our”). The site supports a private, invitation-only event process and is not a public ticketing or admission-purchase service.

2. Information We Collect

We collect information that you provide directly, information created through your use of controlled features, and limited technical information needed to operate and protect the site. Depending on the feature you use, this may include:

• Identity and age-verification information: for an approved Continuing Guest, full legal name and full date of birth personally entered during Agreement acceptance; for an Event-Only Guest, full legal name and mobile phone number collected during event-specific acceptance.
• Contact and screening information: the name you normally use, email address, phone number, referral or vouching information, screening responses, optional introduction material, and messages you send us.
• Optional public online-profile information: a social-media handle or public profile link you voluntarily provide, which may be manually reviewed for screening and invitation consideration. We do not request passwords or private-account access, connect or authorize accounts, import followers or contacts, or use automated social scoring or approval.
• Controlled-access and waiver information: guest status; shared-word and individual-passcode authentication and access status; successful and unsuccessful access attempts; lockout status; waiver version and acceptance record; required checkbox states; date/time of acceptance; and identity-verification/check-in status.
• Event-Only history and repeat-use information: the mobile phone number supplied during event-specific acceptance; completed Event-Only acceptance records matched to that number across events; the associated acceptance count; and any third-or-later-use review flag or related administrative decision.
• Security, technical, and activity information: IP address, browser or device information, user-agent information, request data, session or account identifiers, security and rate-limit events, server logs, and activity/audit records. Activity/audit records may include access attempts, pages or features used, administrative actions, status changes, prior and new statuses, and timestamps needed to operate, secure, troubleshoot, and investigate use of the site.
• Event-related information you choose to provide, including event-interest form submissions, events or event types you select, attendance confirmations, preferences, responses, and communications.

3. Why We Use Information

We use personal information only as reasonably necessary to operate the site and private-event process, including to:

• screen requests, consider referral or vouching information, review event-interest submissions, manage the approved-guest pool, and consider invitations;
• verify identity and confirm that a participant is at least 21 years old; consider eligibility or fit for particular adult event age ranges; and personally acknowledge birthdays through greetings, notes, or occasional gifts;
• administer shared-word/passcode authentication, guest access, check-in, and lockouts; and maintain waiver, acceptance, and activity/audit records, including the version accepted and administrative status changes;
• use the mobile phone number provided by an Event-Only Guest to match event-specific acceptance records across events, count completed Event-Only acceptances, flag a third or later acceptance for administrative review, and decide whether the person must complete the regular screening and Continuing Guest process before being considered for future Event-Only permission;
• communicate about access, invitations, safety, or site requests;
• protect the site, records, guests, and premises; prevent abuse or unauthorized access; and enforce venue rules;
• comply with applicable legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

4. Full Date of Birth and ID Verification

The initial public screening form does not request a full legal name or full date of birth. For a person approved to continue, full legal name and full date of birth must be personally entered during the Agreement-acceptance process, when their identity is associated with the electronic signature and approved-guest record. We use date of birth to confirm 21+ eligibility, consider eligibility or fit for particular adult event age ranges, maintain accurate guest records, and personally acknowledge birthdays through greetings, notes, or occasional gifts. We do not use date of birth for third-party or targeted advertising and do not sell it. We do not require or retain an image of an ID, license number, barcode scan, or Social Security number for these purposes.

An Event-Only Guest is not asked to provide a full date of birth through the event-specific acceptance process. Access to full dates of birth for Continuing Guests is restricted to authorized administrators with a legitimate need to perform verification, administer age-range or birthday-related guest activities, or manage records. Full dates of birth are not displayed in normal guest-facing areas or ordinary guest lists, and they are excluded from ordinary exports unless a restricted, necessary administrative use requires access. A personalized waiver copy provided to a Continuing Guest may display that guest’s own full legal name and full date of birth.

5. How Information Is Stored and Protected

Sensitive event, waiver, guest, access, and activity/audit information is stored in a server-side system and is not intentionally placed in public page source, public URLs, or ordinary browser storage. We use reasonable administrative, technical, and organizational safeguards designed to limit access, authenticate administrators, protect information in transit, restrict administrative functions, and monitor for misuse. No method of electronic storage or transmission is completely secure, and we cannot promise absolute security.

6. When We Share Information

We do not sell personal information. We do not share full legal name or date of birth for targeted advertising. We may disclose information only as reasonably necessary to:

• operate the website and its hosting, storage, security, or communications services under appropriate access controls;
• verify access, enforce venue rules, or address an emergency or safety issue;
• comply with law, a lawful subpoena, court order, or government request; or
• protect the rights, safety, property, or security of guests, the Premises, the website, or others.

7. Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including maintaining waiver, verification, access, and activity/audit records; managing the approved-guest and event-interest processes; resolving disputes; enforcing agreements; and meeting legal or safety obligations. We will review and securely delete or de-identify information when it is no longer needed, subject to legitimate recordkeeping, legal, safety, fraud-prevention, and dispute-resolution needs. A request for deletion may not require us to erase a waiver acceptance or other record we reasonably need to retain.

Event-Only acceptance history currently has no automatic expiration. We may retain and use the mobile phone number, cross-event acceptance count, third-or-later review status, and related waiver records for as long as reasonably necessary to administer the repeat-use rule, document acceptance, resolve disputes, enforce agreements, and address legal or safety needs.

8. Your Choices and Requests

You may contact us to request access to, correction of, or deletion of personal information we hold about you, or to ask questions about this policy. We may need to verify your identity before acting on a request. We will evaluate requests under applicable law and may retain or limit disclosure of information where permitted or required for safety, security, legal compliance, waiver recordkeeping, or protection of rights.

9. Cookies, Analytics, and Do Not Track

The site is designed not to use persistent browser storage for controlled-access session tokens. It may use strictly necessary technical mechanisms, first-party activity/audit logs, and limited service-provider logs to operate, secure, and troubleshoot the site. We do not knowingly sell personal information or use it for cross-context behavioral advertising. If this changes, this policy will be updated before the change takes effect.

10. Children

This site and the private-event process are intended only for people age 21 or older. We do not knowingly solicit personal information from anyone under 21. If you believe a person under 21 has submitted information, contact us so we can review and address the record.

11. Links and Other Services

This site may link to third-party services or payment/contribution platforms. Their privacy practices are governed by their own policies. A voluntary contribution option, if present at an Event, is not required for admission and does not guarantee access or entry.

12. Changes to This Policy

We may update this policy as the site or event process changes. The version and effective date at the top identify the current policy. Material changes to how we collect, use, or share sensitive information will be posted before they apply, and additional notice or consent will be provided when required.

13. Contact Us

For privacy questions or requests, use the Contact page at https://thatturkeysandwich.com/contact.html and identify the request as privacy-related. We may need to verify your identity before disclosing, correcting, or deleting information.