1. Data Controller

Bartendd Ltd is the Data Controller for the personal data you provide. If you have questions, contact us at privacy@bartendd.com.

2. Information We Collect

Identity data such as your name and contact details.
Login credentials and authentication details.
Membership data: your subscription status and perk redemption activity at participating venues. Card details are processed by Stripe and are never stored by Bartendd.
For venue owners: business contact details, venue information, and Stripe payout account status (bank details are held by Stripe, not us).
Technical data such as device information and IP address.

3. Legal Basis for Processing

We process your data on the following legal bases:

Consent – where you agree to us sending communications.
Contract – to provide you with memberships, perks, and services.
Legitimate interest – to improve and secure our services.
Legal obligation – where required by law or regulators.

4. How We Use Your Data

Provide and manage your Bartendd account.
Run venue memberships: subscriptions, perks, and in-venue redemption.
Process membership payments and venue payouts via Stripe.
Personalise your experience and improve our services.
Communicate service updates, membership changes, and policy changes.
Send venue marketing messages (SMS/email) only where you have opted in; every message includes a way to opt out.

5. Sharing & Transfers

We may share your data with trusted processors and service providers who support our operations, including:

Payment processing and venue payouts (Stripe, including Stripe Connect).
Cloud hosting providers (Vercel for the application; Supabase for databases and storage).
Email delivery partners (e.g., Resend).
SMS verification and delivery partners (e.g., Vonage).
Analytics providers to improve our service.
Other vendors necessary to deliver our platform (e.g., authentication).

Some of these providers may transfer data outside the UK/EEA, including to the United States. Where this occurs, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure protection.

6. Data Retention

We retain your personal data only as long as necessary. Account data is kept while you maintain an account with us and up to 12 months after closure, unless longer retention is required by law.

7. Security Measures

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, restricted access, and regular monitoring of our systems. While no system is 100% secure, we work to keep your information safe.

8. Children's Data

Bartendd is intended for use only by individuals aged 18 and over. We do not knowingly collect or process data relating to children. If you believe we have collected personal data about a child, please contact us so we can delete it.

9. Automated Decision-Making

We do not carry out automated decision-making that has legal or similarly significant effects on you. Perks and redemptions are allocated automatically based on activity, but these do not have adverse effects on your rights.

10. Your Rights

You have rights under UK GDPR, including:

Access your data.
Request correction of inaccurate data.
Request erasure ("right to be forgotten").
Restrict or object to processing.
Request data portability.
Withdraw consent at any time.

To exercise your rights, email us at privacy@bartendd.com.

11. Cookies & Tracking

If we use cookies or tracking technologies, we will provide a cookie notice and request your consent where required.

12. Complaints

If you are unhappy with how we process your data, please contact us first. You also have the right to lodge a complaint with the ICO (www.ico.org.uk).

13. Updates

We may update this Privacy Notice from time to time. The latest version will always be available at bartendd.com/full-policy.