Privacy

To join, we require a first name and email address. Your first name appears on your member experience and your email is used to send the secure sign-in link. We also use a normalised form of the email to prevent accidental duplicate cards.

From your profile, you may optionally add a last name, verified mobile number, city and ZIP code. A mobile number supports contact verification and optional order or marketing messages you choose. City and ZIP are used to decide which neighbourhoods to pour in next and which pop-ups may be relevant to you. Order Ahead pickup does not require a street address. If an older profile already contains one, you may ask us to remove it.

We also record your loyalty activity: how many drinks were rung up against your card, at which pop-up, when, and which rewards you redeemed.

If you choose to answer taste questions, we keep the options you select so future menus and pop-ups can be planned around what members actually want. Every question is optional, “rather not” is remembered, and we keep declared preferences separate from patterns observed in completed orders.

After an Order Ahead pickup, you may optionally rate the experience and choose a fixed improvement topic. We do not ask for a written comment. Owners see pop-up-level totals and issue counts, not a public review attached to your name. Feedback does not change your points, rewards, service or message preferences.

SAINTCHA OS records limited first-party usage events such as whether signup, redemption or an optional survey step worked. These events contain a screen, action outcome, timing or count. The durable event stream strips the member identifier and does not include names, email addresses, phone numbers, postal codes, order identifiers, payment details or written message content. A random first-party session code may group steps from the same short visit and expires after one day.

We use these aggregate signals to find broken steps, reduce waiting and decide which product changes are useful. We do not use third-party advertising trackers and do not sell this activity.

Order Ahead payments are processed securely by Square. Card details are entered in Square's protected payment form and are never stored by SAINTCHA OS. We retain the payment reference, amount, status, and refund status needed to operate and support your order. We do not track your location. We do not buy data about you from anyone else, and we do not sell or rent your details.

Agreeing to the loyalty terms is required to hold a card. Agreeing to marketing texts or emails is not, and those boxes are never pre-ticked. We record each consent separately, with the date, the wording you agreed to, and where you agreed to it.

You can turn messages off any time from your member profile, by replying STOP to a text, or by asking staff. Turning marketing off never affects your points.

The “nearby pop-up texts” control is the SMS marketing permission. Turning it on may allow SAINTCHA marketing texts, with nearby pop-up dates as the current use. It is not the same as requesting the single transactional ready text for an order.

After placing an Order Ahead order, you may ask for one text when that specific order is ready. This is a transactional update for that order, not marketing consent, and the option is off by default.

We send it only to the verified mobile number shown before you opt in. We record your choice and the delivery status needed to show whether the message was queued, accepted, delivered, failed, or suppressed. A ready order remains visible in your member account even when a text cannot be sent.

Your member QR contains a random bearer token, not your name, phone, email or address. Opening its link can show the live card, including your first name and member code, so treat it like a physical membership card. It does not open your full account, contact details, points or order history. We can revoke and reissue the token on request, and the card page is not stored in shared caches or sent as a referrer.

Authorised SAINTCHA staff and owners can access the membership details needed to operate the programme, support orders, add points, apply rewards and resolve account issues. Depending on their role, that may include your contact details, profile preferences, visits and order history. Sensitive actions are logged against the signed-in staff member. Other members can never see your record.

We keep your record while your card is active. Ask us for a copy of your data, a correction, or deletion and we will action it. Deleting your record removes your personal details; anonymised counts of drinks poured at an event remain in our totals.

Requests go to the address on the SAINTCHA site, or to any staff member at a pop-up.

If this policy changes we stamp a new consent version and ask again where the change is material. The version you agreed to is stored with your record.