Privacy Notice

1. Data Controller

Bartendd Ltd is the Data Controller for the personal data you provide. If you have questions, contact us at privacy@bartendd.com.

2. Information We Collect

• Identity data such as your name and contact details.
• Login credentials and authentication details.
• Check-in activity at participating venues.
• Technical data such as device information and IP address.

3. Legal Basis for Processing

We process your data on the following legal bases:

• Consent – where you agree to us sending communications.
• Contract – to provide you with loyalty rewards and services.
• Legitimate interest – to improve and secure our services.
• Legal obligation – where required by law or regulators.

4. How We Use Your Data

• Provide and manage your Bartendd account.
• Enable venue check-ins and rewards redemption.
• Personalise your experience and improve our services.
• Communicate service updates, rewards, and policy changes.

5. Sharing & Transfers

We may share your data with trusted processors and service providers who support our operations, including:

• Cloud hosting providers (e.g., Supabase for databases and storage).
• SMS verification partners (e.g., Vonage).
• Analytics providers to improve our service.
• Other vendors necessary to deliver our platform (e.g., email delivery, authentication).

Some of these providers may transfer data outside the UK/EEA, including to the United States. Where this occurs, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure protection.

6. Data Retention

We retain your personal data only as long as necessary. Account data is kept while you maintain an account with us and up to 12 months after closure, unless longer retention is required by law.

7. Security Measures

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, restricted access, and regular monitoring of our systems. While no system is 100% secure, we work to keep your information safe.

8. Children's Data

Bartendd is intended for use only by individuals aged 18 and over. We do not knowingly collect or process data relating to children. If you believe we have collected personal data about a child, please contact us so we can delete it.

9. Automated Decision-Making

We do not carry out automated decision-making that has legal or similarly significant effects on you. Rewards and check-ins are allocated automatically based on activity, but these do not have adverse effects on your rights.

10. Your Rights

You have rights under UK GDPR, including:

• Access your data.
• Request correction of inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time.

To exercise your rights, email us at privacy@bartendd.com.

11. Cookies & Tracking

If we use cookies or tracking technologies, we will provide a cookie notice and request your consent where required.

12. Complaints

If you are unhappy with how we process your data, please contact us first. You also have the right to lodge a complaint with the ICO (www.ico.org.uk).