Privacy Policy.
Effective May 2, 2026
Batmandir Theatre ("Batmandir," "we," "us") runs a private members' cinema and villa programme in La Romana, Dominican Republic. This page explains what information we collect when you use our website, mobile app, and member services, and what we do with it. We try to keep this short and human.
What we collect
- Account information. Your name, email, password (stored hashed by Firebase Authentication), and optional profile details (phone, dietary preferences, languages, profile photo).
- Member activity. Reservations you book, food and concierge orders you place, screenings you attend, requests you submit. We use this to deliver the service and to make routing decisions (which villa, which kitchen, which staff member).
- Device tokens. If you grant notification permission, we store a Firebase Cloud Messaging (FCM) token on your member record so we can send order updates, screening reminders, and concierge confirmations. You can revoke this at any time in Settings.
- Standard technical data. Browser type, IP address, and basic analytics needed to operate the service securely. We do not maintain detailed user-tracking analytics.
We do not collect: precise location, contact lists, microphone, camera (beyond your explicitly chosen profile photo), browsing history outside Batmandir, or third-party advertising identifiers.
Where it lives
Your information is stored on Google Cloud / Firebase infrastructure in the United States. Authentication data is handled by Firebase Authentication. Profile, reservation, order, and request records are stored in Firestore. Push notifications are delivered through Firebase Cloud Messaging and (for iOS) Apple Push Notification service.
Who can see it
- You, via your member profile and order/request history.
- Achir Kalra and authorised Batmandir staff, only when their role requires it (a chef sees food orders for their kitchen; housekeeping sees cleaning requests for their villa). Access is enforced by Firestore security rules.
- No one else. We do not sell, rent, or share your information with advertisers, data brokers, or unaffiliated third parties. We may disclose information when legally required (subpoena, court order) or to protect the safety of members and staff.
How long we keep it
Active member records are retained as long as your membership is active. If you delete your account (see below) or your membership lapses, we retain anonymised reservation and order data for up to 24 months for accounting purposes, then purge it. FCM tokens and notification preferences are removed immediately on account deletion.
Your rights
- Access: view your data any time via your profile and order history.
- Correction: edit your profile directly. Email us for anything you can't change in-app.
- Deletion: delete your account in Settings → Delete account. This removes your authentication record, profile, FCM tokens, and personal identifiers from active orders and requests within 7 days.
- Notification opt-out: revoke push permission at the OS level or in Settings.
Children
Batmandir membership is for adults. We do not knowingly collect information from children under 16. If you believe a minor has created an account, contact us and we will remove it.
Changes to this policy
We will post material changes here and update the effective date above. For substantive changes (new categories of data, new disclosures), members will receive notice by email.
Contact
Privacy questions go to achir@usatimes.com. Achir Kalra is the data controller and the person who responds.