Privacy Policy
The Grand UpperRoom LLC. Last updated June 3, 2026.
Effective Date: June 3, 2026
This Privacy Policy is subject to, and incorporated into, our Terms and Conditions. If you do not agree to this Privacy Policy or the Terms and Conditions, you should not use the Site.
1. Introduction
The Grand UpperRoom LLC ("The Grand UpperRoom," "GUR," "we," "our," or "us") operates the website at https://thegrandupperroom.com (the "Site"). We are located at 23161 Morton Ranch Rd, Katy, TX 77449, US. This Privacy Policy explains what information we collect when you visit or interact with the Site, how we use it, who we share it with, the choices you have, and how to contact us.
We are a boutique event rental venue based in Katy, Texas, with two suites, the Eden Suite and the Bethel Suite. Our Site serves engaged couples, families planning milestone celebrations such as quinceañeras and anniversaries, corporate planners, community organizations, churches, vendors, collaborators, and guests exploring our space, services, and public events.
This Privacy Policy applies only to information collected through the Site and Site-connected tools. It does not fully cover information you provide directly at the venue, through a signed venue rental agreement, through a separate vendor agreement, through a ticketing platform such as Eventbrite, through our social media profiles, or through a third-party website linked from our Site. Those interactions may be governed by additional agreements, platform terms, or privacy practices. If you have questions, email us at events@thegrandupperroom.com.
2. Information We Collect
We collect information in three primary ways: information you provide directly, information collected automatically when you visit the Site, and information collected or stored through cookies and similar technologies.
Information you provide directly may include your name, email address, phone number, mailing address, event type, estimated guest count, preferred event date or tour date, selected suite, requested services, budget information, messages, account information, blog post content, promotion submissions, comment details, images, and any other information you choose to provide. Tour and contact forms are powered by WPForms. Our tour-booking calendar and follow-up communications are powered by GoHighLevel. Blog and promotion submissions and comments may require login information and may collect the content, images, category, excerpt, calls to action, dates, and account details you submit.
Phone numbers and text-message consent. If you provide your phone number and consent, we use it to call and text you about your inquiry, tours, and bookings, as described in Section 8 of our Terms and Conditions. You may opt out of text messages at any time by replying STOP.
Payment information may be collected when you make a venue-related payment, ticket purchase, or other transaction. Payment details are processed securely through the applicable payment processor or platform; we may receive transaction details, invoice status, payment confirmation, or billing contact information, but processors may handle your full card or bank details under their own practices. Public event tickets may be sold through Eventbrite; we do not collect ticket-purchase payment information directly through the Site when you purchase on Eventbrite, but we may receive an attendee list from Eventbrite, typically including name, email, ticket type, and check-in or attendance information.
Information collected automatically may include your IP address, browser type and version, device type, operating system, approximate location inferred from IP address, referring website, pages visited, links clicked, dates and times of visits, session duration, form errors, and other diagnostic or usage information. This helps us operate, troubleshoot, secure, measure, and improve the Site.
3. Cookies and Tracking Technologies
We use cookies, pixels, local storage, and similar technologies to operate the Site, remember preferences, support login and form functions, measure performance, and, where permitted by your consent settings, support analytics and marketing features. We manage cookie consent through WPConsent (https://wpconsent.com/privacy-policy/).
Cookies are grouped into categories: strictly necessary cookies required for the Site to function (set without consent where legally permitted); functional cookies that improve usability (set after consent where required); analytics cookies such as Google Analytics or Jetpack statistics (set after consent where required); and marketing or embedded-content cookies that may be set by embedded content or social media features, including Instagram, Facebook, TikTok, YouTube, and Google Maps (set after consent where required). You can change your cookie preferences at any time through the WPConsent settings link in our cookie banner or through your browser settings, though disabling cookies may affect Site functionality.
4. How We Use Information
We use the information we collect to: respond to inquiries, tour requests, questions, and messages; confirm, schedule, reschedule, and follow up on venue tours; provide event information, proposals, invoices, rental agreement materials, package information, and venue rules when requested; communicate with you by email, phone, text (where you have consented), CRM tools, or calendar tools; review and, where appropriate, publish, edit, or promote blog submissions, promotion submissions, comments, testimonials, and images; operate, maintain, secure, troubleshoot, personalize, and improve the Site; measure Site performance, traffic, referral sources, and engagement; send marketing, promotional, event, or update emails only where you have opted in or where applicable law otherwise permits, with a way to unsubscribe; detect, prevent, investigate, or respond to spam, fraud, unauthorized access, policy violations, security incidents, or legal claims; comply with legal obligations; and protect our rights, property, staff, clients, vendors, guests, and the public.
We do not sell your personal information.
5. How We Share Information
We do not sell, trade, or rent users' personal identification information to others. We share information only as needed to operate the Site, provide services, respond to you, manage events, protect our business, and comply with the law. The service providers and platforms we work with, and links to their privacy policies, include:
- GoHighLevel, our booking calendar and CRM (lead management, follow-up, email or SMS): https://www.gohighlevel.com/privacy-policy
- Eventbrite, public event ticketing and attendee information: https://www.eventbrite.com/help/en-us/articles/460838/eventbrite-privacy-policy/
- WPForms, our contact and inquiry form tool (form entries are stored on our own site): https://wpforms.com/privacy-policy/
- Google, for Analytics, Maps, Reviews, Search Console, Workspace, and YouTube: https://policies.google.com/privacy
- Meta, for embedded Facebook and Instagram content: https://www.facebook.com/privacy/policy/
- TikTok, for embedded TikTok content (United States): https://www.tiktok.com/legal/page/us/privacy-policy/en
- Smash Balloon, the plugin that displays our social feeds (it stores feed data within our own site and does not collect your data on our behalf): https://smashballoon.com/privacy-policy/
- WPConsent, our cookie-consent tool: https://wpconsent.com/privacy-policy/
- GoDaddy, our managed WordPress hosting provider: https://www.godaddy.com/legal/agreements/privacy-policy
- Automattic, which provides Jetpack services (privacy center: https://jetpack.com/support/privacy/; Automattic policy: https://automattic.com/privacy/).
We may also share information with payment processors, email service providers, contractors, professional advisors (such as accountants, lawyers, and insurers), and other vendors who help us operate the business. We may disclose information when required by law, subpoena, court order, or lawful government request, during a business transfer or restructuring, or where reasonably necessary to enforce our Terms, collect amounts owed, investigate fraud or security issues, or protect the rights and safety of our team, clients, guests, vendors, or the public.
We do not share personal information with data brokers, and we do not sell personal information for money. If we ever use advertising, analytics, pixels, or retargeting in a way that applicable law treats as a sale, a sharing, or targeted or cross-context behavioral advertising, we will provide the notices and choices required by that law.
6. Third-Party Privacy Practices and Opt-Out Limitations
We do not control the personal information collected directly by the third parties listed above. Their collection and use of your information are governed by their own privacy policies. Any opt-out, cookie preference, unsubscribe, deletion, correction, or other privacy request you make with The Grand UpperRoom LLC applies only to our own records and use of information, and does not automatically apply to Eventbrite, GoHighLevel, Google, Meta, TikTok, WPForms, WPConsent, Smash Balloon, Jetpack, Automattic, GoDaddy, payment processors, or other third parties. To exercise choices with them, please contact them directly or use the privacy tools they provide (linked in Section 5).
7. Your Rights and Choices
Depending on where you live and how you interact with the Site, you may have rights over your personal information, which may include the ability to: request access to or a copy of the personal information we hold about you; ask us to correct inaccurate or incomplete information; ask us to delete information we no longer need, subject to legal, contractual, fraud-prevention, security, accounting, tax, insurance, dispute-resolution, and recordkeeping obligations; withdraw consent where processing is based on consent; opt out of marketing emails using the unsubscribe link or by emailing us; opt out of text messages by replying STOP; and update cookie preferences through the WPConsent banner or your browser settings.
To exercise a request, email events@thegrandupperroom.com. We may need to verify your identity before acting on a request and will respond within a reasonable time and any timeframe required by law. Requests submitted to us apply only to information controlled by The Grand UpperRoom LLC, not to the third-party platforms listed in Section 5.
Texas residents. The Grand UpperRoom LLC is located in Texas. To the extent it applies to us, the Texas Data Privacy and Security Act may give Texas residents rights to confirm processing, access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. Note that small businesses, as defined by the U.S. Small Business Administration, are generally exempt from the Act except for the sale of sensitive data. The Texas Attorney General publishes information at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act.
California residents. To the extent the California Consumer Privacy Act applies, you may have rights to know, access, correct, delete, and opt out of the sale or sharing of personal information, and to limit certain uses of sensitive personal information. We do not sell personal information for money or share it for cross-context behavioral advertising as those terms are used under that law. California's official CCPA information is available at https://oag.ca.gov/privacy/ccpa.
Other US state residents. Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, obtain a copy of, or opt out of certain uses of personal information, where those laws apply. You can exercise available rights by emailing events@thegrandupperroom.com.
EU, UK, and other international visitors. If you visit from the European Union, the United Kingdom, or another region with data protection laws, you may have rights under the GDPR, UK GDPR, or comparable laws, including rights to access, rectify, erase, restrict, port, or object to certain processing. Our legal bases may include your consent, steps you ask us to take before entering a rental agreement, our legitimate interests in operating and improving the Site, and compliance with legal obligations. The European Commission publishes data protection information at https://commission.europa.eu/law/law-topic/data-protection_en.
8. Children's Privacy
The Site is intended for adults and is not directed to children. The Grand UpperRoom does not knowingly do business with, or knowingly collect personal information through the Site from, anyone under the age of 18. Consistent with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information online from children under 13. Events for minors, such as birthdays, quinceañeras, graduations, or youth celebrations, must be planned and contracted by a parent, guardian, or other adult with legal authority. If you believe a minor has provided personal information through the Site, please email events@thegrandupperroom.com and we will take reasonable steps to delete it, subject to applicable law. FTC information about COPPA is available at https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa.
9. Data Retention
We retain personal information only as long as reasonably needed for the purposes described in this Policy, unless a longer period is required or permitted by law, contract, tax, accounting, insurance, security, fraud-prevention, dispute-resolution, or recordkeeping obligations. Tour inquiries, contact form submissions, CRM notes, and related correspondence are generally retained while a booking decision is active and for a reasonable period afterward. Event and rental-related records may be retained longer for contract, accounting, insurance, legal, or operational purposes. Account information for blog contributors and promotion submitters is retained while the account is active and for a reasonable period afterward. Analytics data is retained according to the provider's settings and our business needs. You may request deletion by emailing events@thegrandupperroom.com, subject to obligations we must honor.
10. Data Security
We take reasonable steps designed to protect information collected through the Site, including using managed WordPress hosting, reputable third-party providers, access restrictions, account controls, and administrative safeguards. No website, system, platform, or transmission method is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident that materially affects your information, we will notify affected users or authorities as required by applicable law.
11. International Visitors
The Site is operated from the United States. If you visit from outside the United States, your information may be transferred to, stored in, and processed in the United States or in other locations where our service providers operate, where data protection laws may differ from those in your country. By using the Site or submitting information to us, you understand that your information may be processed in the United States and other applicable jurisdictions.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above. If we make material changes, we may provide additional notice, such as a banner on the Site or an email to users who have asked to hear from us. Your continued use of the Site after changes are posted means you accept the updated Policy.
13. Contact Us
If you have questions, concerns, or requests about this Privacy Policy or your information, please contact us: The Grand UpperRoom LLC, 23161 Morton Ranch Rd, Katy, TX 77449, US, Phone: (346) 489-8100, Email: events@thegrandupperroom.com, Website: https://thegrandupperroom.com.
This Privacy Policy is subject to our Terms and Conditions, which govern your use of the Site.
