PRIVACY POLICY
Version 1.0 | Published September 27, 2026 | CoLab Work LLC
1. SCOPE
This Privacy Policy describes how CoLab Work LLC, an Illinois limited liability company ("CoLab," "we," "us"), collects, uses, shares, and protects personal information.
It applies to:
- Visitors to our websites, including colabwheaton.com
- Members who license a private office or hold a membership
- Guests who book the conference room
- Anyone who contacts us, subscribes to our email list, or consents to receive text messages from us
By using our website or services, you agree to this Privacy Policy. If you do not agree, do not use the website or services.
Definitions. "Personal information" means information that identifies, relates to, or could reasonably be linked to you. "Services" means the CoLab Work premises, memberships, bookings, website, and communications.
2.1 Information you give us
| Category | Examples | When collected |
|---|---|---|
| Identity | Name, business or entity name, job title | Inquiry, booking, enrollment |
| Contact | Email address, mobile phone number, mailing address | Inquiry, booking, enrollment, SMS opt-in |
| Billing | Payment card details, billing address, billing history | Checkout, recurring billing |
| Membership | Office assignment, access credentials issued, occupancy count, insurance certificate | Enrollment |
| Booking | Date, time, space booked, number of guests | Booking |
| Correspondence | The content of emails, text messages, and form submissions you send us | Any contact |
| Guest verification | Government-issued ID presented at check-in, where required | First-time guest check-in |
We do not collect payment card numbers ourselves. Payment details are collected and processed directly by Stripe, Inc. and are not stored on our systems.
2.2 Information collected automatically
When you visit our website we collect IP address, browser type and version, device type, operating system, referring page, pages viewed, and the dates and times of those visits. We collect this through server logs and, where enabled, analytics tools.
2.3 Information collected on the premises
The premises and the common areas of the building in which they are located may be monitored by video security cameras, some of which are operated by the owner or operator of the building rather than by CoLab. Where CoLab operates a camera, footage is retained for approximately thirty (30) days and is used only for security, safety, and investigation of incidents or policy violations. Footage operated by the building owner is subject to that owner's own retention practices.
Access credential systems record the date and time a credential is used to enter a secured area. We use these records for security, incident investigation, and billing verification only.
We do not collect biometric identifiers or biometric information as defined by the Illinois Biometric Information Privacy Act.
3. HOW WE USE INFORMATION
We use personal information to:
(a) provide, operate, and administer the Services, including memberships, bookings, and access to the premises;
(b) process payments, issue invoices, and collect amounts owed;
(c) send transactional communications, including booking confirmations, schedule changes, billing notices, access instructions, and facility or safety alerts;
(d) respond to inquiries and provide customer support;
(e) send marketing communications about CoLab Work, where you have consented or where permitted by law;
(f) maintain the security of the premises, our systems, and our members;
(g) enforce our Facility Terms and House Rules;
(h) comply with legal obligations and respond to lawful requests; and
(i) analyze and improve the Services.
4. TEXT MESSAGING (SMS AND MMS)
This section summarizes how we handle text messaging. Our full Text Messaging Terms govern the messaging program itself.
4.1 Consent
We send text messages only to individuals who have expressly opted in to receive them. Consent to receive text messages is not a condition of purchasing any product or service from CoLab.
You may opt in by submitting a form on our website that includes an SMS consent checkbox, or by providing your mobile number and consent at enrollment or check-in.
4.2 Types of messages and frequency
Messages may include booking confirmations and reminders, access and credential instructions, billing and account notices, facility and safety alerts, and community or promotional updates.
Message frequency varies. You will receive no more than 10 messages per month.
Message and data rates may apply.
4.3 Opting out and help
You may opt out at any time by replying STOP to any message from us. You will receive a single confirmation message and will receive no further messages, except that we may still contact you by other means where necessary to administer your account.
Reply HELP to any message for assistance, or contact us at sendhelp@colabwheaton.com or (630) 286-9047.
4.4 How we treat your mobile opt-in data
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
All of the categories of information described elsewhere in this Privacy Policy exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.
Information sharing with subcontractors who provide support services on our behalf, such as customer service providers and the messaging platform that transmits our messages, is permitted solely for the purpose of delivering the messaging program. Those subcontractors are contractually prohibited from using the information for any other purpose.
We do not sell, rent, lease, or trade mobile phone numbers or SMS consent data under any circumstances.
4.5 Carrier disclaimer
Mobile carriers are not liable for delayed or undelivered messages.
5.1 Transactional email
We send transactional email relating to your account, bookings, billing, access, and facility operations. These messages are necessary to provide the Services and are sent to all members and guests.
5.2 Marketing email
We send marketing email only where you have consented or where permitted by law. Every marketing email includes a clearly visible unsubscribe link and our physical mailing address, and supports one-click unsubscribe in supporting email clients.
You may unsubscribe at any time using the link in any marketing message or by contacting sendhelp@colabwheaton.com. We honor unsubscribe requests promptly and in all cases within ten (10) business days, as required by the CAN-SPAM Act.
Unsubscribing from marketing email does not stop transactional email relating to an active membership, booking, or balance owed.
6. HOW WE SHARE INFORMATION
We do not sell your personal information. We do not share it with third parties for their own marketing purposes.
We share personal information only as follows:
6.1 Service providers
We use third-party service providers to operate the Services. Each is bound to use the information only to perform services for us:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing | Name, email, billing address, payment details |
| Twilio Inc. | Text message delivery | Mobile number, message content |
| Resend (Plus Five Five, Inc.) | Email delivery | Name, email address, message content |
| Supabase, Inc. | Database and authentication | Account and booking records |
| Cloudflare, Inc. | Website hosting, security, content delivery | IP address, request logs |
6.2 Building owner and operator
Where required for access, security, or emergency response, we may share the names of members and guests with the owner or operator of the building in which the premises are located.
6.3 Legal and safety
We may disclose personal information where we reasonably believe disclosure is required by law, subpoena, or court order, or is necessary to investigate a violation of our terms, protect the safety of any person, or establish or defend a legal claim.
6.4 Business transfer
If CoLab is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. Any acquirer will remain bound by the commitments in Section 4.4.
7. COOKIES AND TRACKING
Our website uses cookies and similar technologies that are strictly necessary to operate the site, remember your preferences, and measure aggregate usage.
You can set your browser to refuse cookies. Some features of the website may not function correctly if you do.
We do not respond to browser Do Not Track signals, as no common standard for interpreting them has been adopted.
8. DATA SECURITY
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and use of established third-party processors for payment and communication.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk.
Shared network access provided on the premises is offered on a best-effort basis and is not a secure or private network. You are solely responsible for the security of your own devices and data, as set out in the Facility Terms.
9. DATA RETENTION
We retain personal information for as long as needed to provide the Services and thereafter as follows:
- Account, membership, and booking records: seven (7) years after the relationship ends, for tax, accounting, and legal purposes
- Billing and payment records: seven (7) years
- SMS consent records, including the date, time, and method of opt-in and any opt-out: four (4) years after opt-out, so that we can demonstrate that consent was given. Four years corresponds to the federal statute of limitations applicable to claims under the Telephone Consumer Protection Act
- Marketing contact records: until you unsubscribe, plus a suppression record retained indefinitely so we do not contact you again
- Website server logs: thirty (30) days
- Video security footage operated by CoLab: approximately thirty (30) days
10. YOUR CHOICES AND RIGHTS
You may:
(a) request access to the personal information we hold about you;
(b) request correction of inaccurate information;
(c) request deletion of your information, subject to our retention obligations above and to records we must keep to demonstrate consent or comply with law;
(d) unsubscribe from marketing email at any time;
(e) opt out of text messages at any time by replying STOP;
(f) ask us to stop using your information for marketing purposes.
To exercise any of these, contact sendhelp@colabwheaton.com. We will verify your identity before acting on a request and will respond within thirty (30) days.
Residents of states with comprehensive consumer privacy laws may have additional rights under those laws. We extend the rights described above to all individuals regardless of residence.
11. CHILDREN
The Services are intended for adults. We do not knowingly collect personal information from anyone under sixteen (16) years of age. If you believe a minor has provided us with personal information, contact sendhelp@colabwheaton.com and we will delete it.
12. THIRD-PARTY LINKS
Our website may link to third-party sites. We are not responsible for the privacy practices or content of those sites. Review their privacy policies before providing information to them.
13. CHANGES TO THIS POLICY
We may publish a new version of this Privacy Policy. The version in effect at the time of your interaction governs that interaction. Material changes will be posted on this page with a new version number and published date, and where required by law we will provide notice before the change takes effect.
Prior versions remain permanently available at their versioned URLs.
14. CONTACT
CoLab Work LLC
285 W Loop Road, Wheaton, Illinois 60189
sendhelp@colabwheaton.com | (630) 286-9047
Privacy Policy Version 1.0 | Published September 27, 2026