The fine print, served neat.

What lands in our glass

A review submission includes your name, email address, rating, review, consent confirmation, and submission time. An event inquiry includes your name, email address, phone number, event type, event size, permission choices, and may include a preferred date, theme, selected drinks, and message.

The secure inquiry and partner forms send this information directly into Sipposium's private operations database. If you separately opt in through one of those forms—or use the event-updates form—we also keep your email, name, exact consent wording, consent source, policy version, consent time, and subscription status as a consent record.

Why we ask

Review information is used to moderate submissions, discourage abuse, verify a question about a submission, and publish genuine guest experiences. Inquiry information is used to reply, understand what you are planning, prepare a quote or class, and coordinate the experience you asked about. A private booking agreement may also collect the organizer's typed electronic signature, booking details, participant allergy or ingredient restriction disclosures, accessibility requests, and agreement history. Text messages about an inquiry, booking, or requested recipe card are sent only where the recipient has requested them or otherwise given the required permission.

We do not use a review, inquiry, phone number, or permission to reply as automatic permission to send marketing. Event announcements require a separate opt-in checkbox, whether it appears beside an inquiry or on the dedicated event-updates form.

What the room sees

If your review is selected for the guest book, your name, rating, and review may be visible publicly. Your email address and phone number are never displayed with a review.

We do not sell personal information. We disclose it only to the service providers needed to operate Sipposium, when you direct us to do so, or when disclosure is required by law.

Where it lives

Cloudflare hosts this website, protects it from abuse, and stores reviews, inquiries, consent records, invoices, and private operations data in a D1 database running in its Western North America region. Private business documents are stored in a restricted Cloudflare R2 bucket and are available only through authorized Sipposium administration accounts. VoIP.ms will process phone numbers and message contents when the optional Sipposium text-messaging connection is activated. Approved AI tools may process only the Studio project material Kevin or the webmaster deliberately selects; they do not receive contacts, inquiries, invoices, payables, audit records, credentials, or unrelated files. Google provides the Gmail inbox used for Sipposium correspondence. SMTP2GO will deliver inquiry notices and event announcements after its sender account is activated. These providers may process information outside Canada under their own security and privacy programs.

Sipposium does not use advertising trackers or analytics cookies. To understand whether the site is useful, Sipposium keeps daily totals for pages viewed and clicks to Eventbrite, Instagram, or email. Those totals include the page path, referring website host, action type, day, and Cloudflare's approximate city, region, and country for page views. Location is stored only as a daily aggregate; low-volume cities are not displayed. Sipposium does not store an IP address, browser fingerprint, or visitor profile with these totals. Global Privacy Control and browser “Do Not Track” signals disable this counting. Cloudflare may still process technical request information, such as an IP address, to deliver and secure the site.

The private Back Bar records the authorized account email, access level, sign-in time, and important administrative changes. It does not add an IP address to Sipposium's audit log. These records help Kevin and the webmaster account for changes to reviews, events, invoices, documents, recipes, and settings.

How long we keep it

A declined review is deleted when it is declined. A review that has not been moderated is deleted after 90 days. For a published review, the private email address is erased after 90 days while the name, rating, review, consent date, and policy version may remain with the public guest note.

Business correspondence is kept only as long as reasonably needed to answer the inquiry, provide the requested service, maintain ordinary business records, or meet a legal obligation. When it is no longer needed, it is deleted or anonymized where practical.

Express marketing-consent records are retained while Sipposium relies on that consent and afterward as reasonably needed to demonstrate when and how consent was obtained or withdrawn. An unsubscribe request is recorded promptly and the address is excluded from future campaigns.

Signed booking agreements are kept as ordinary business and legal records. Allergy, restriction, and accommodation details are kept only as long as reasonably needed to plan and safely deliver the experience, respond to an incident, or meet a legal obligation, then deleted or restricted where practical.

Your call

You may ask what personal information Sipposium holds about you, request a correction, withdraw consent for future use, or ask to have a review removed. Some information may need to be retained where the law permits or requires it, but we will explain that if it applies.

Send privacy requests to info@sipposium.ca. Please use the same email address connected to the original submission so we can verify the request without turning it into an identity scavenger hunt.