SAINTCHA

Draft policy — review with counsel before launch

Privacy

This describes what the SAINTCHA member programme collects and why. It is written to be read, not to be skimmed past.

What we collect

When you join we ask for your first name, last name, mobile number and email. These four are required: the name goes on your card, and the phone and email are how we make sure one person has one card, and how you sign back in.

Street address, city and ZIP are optional. We ask because it helps us decide which neighbourhoods to pour in next. Leaving them blank has no effect on your points.

We also record your loyalty activity: how many drinks were rung up against your card, at which pop-up, when, and which rewards you redeemed.

What we do not collect

We do not take payment through this system — checkout runs on Square, separately. We store no card numbers. We do not track your location. We do not buy data about you from anyone else, and we do not sell or rent your details.

Marketing is separate, and optional

Agreeing to the loyalty terms is required to hold a card. Agreeing to marketing texts or emails is not, and those boxes are never pre-ticked. We record each consent separately, with the date, the wording you agreed to, and where you agreed to it.

You can turn messages off any time from your member profile, by replying STOP to a text, or by asking staff. Turning marketing off never affects your points.

Your QR code

Your member QR contains a random string and nothing else. No name, phone, email or address is encoded in it. If someone photographs your card they get a meaningless token, and we can revoke and reissue it on request.

Who can see your record

SAINTCHA staff working a pop-up can see your name, card, point balance and visit history in order to add points and apply rewards. Every one of those actions is logged against the staff member who performed it. Other members can never see your record.

Keeping and deleting

We keep your record while your card is active. Ask us for a copy of your data, a correction, or deletion and we will action it. Deleting your record removes your personal details; anonymised counts of drinks poured at an event remain in our totals.

Requests go to the address on the SAINTCHA site, or to any staff member at a pop-up.

Changes

If this policy changes we stamp a new consent version and ask again where the change is material. The version you agreed to is stored with your record.