Privacy policy

1. Scope

This policy explains what personal data the cafealty platform collects, why it is collected, how long it is kept, and what rights you have over it.

It covers two groups: people acting for a business that subscribes to the platform, and customers of a participating venue who take part in loyalty or games.

2. Data we collect from businesses

When a business enquires, starts a trial, or subscribes, we collect the contact details submitted — typically a name, business name, email address, and phone number — together with the venue details needed to set up the account.

We also record operational activity performed through staff accounts, so that actions such as issuing a lobby or confirming a redemption can be attributed to the account that performed them.

3. Data we collect from customers

For a registered customer we hold the identifier used to look up a loyalty balance, which is normally a phone number, along with the loyalty and redemption history attached to it.

A customer may take part as a guest without registering. In that case we hold a generated guest identifier rather than contact details.

We collect gameplay records — plays granted, games played, and points awarded — because these determine loyalty entitlement.

4. Why we use it

To operate the loyalty programme and games, including calculating and recording point balances and redemptions.

To provide, secure, and support the platform, including diagnosing faults and preventing abuse.

To respond to enquiries and administer trials and subscriptions.

To meet legal, accounting, and tax obligations.

5. Cookies and similar technologies

The platform sets cookies necessary for sign-in, session continuity, and security. Details are set out in the Cookie Policy.

6. Sharing

Loyalty and gameplay data for a venue is accessible to that venue's own authorised staff and owner accounts. It is not shared with other participating businesses.

We use service providers for hosting, database, and communications. They process data on our instructions and are not permitted to use it for their own purposes.

We may disclose data where required by law or to protect the rights, safety, or property of users or the platform.

We do not sell personal data.

7. Retention

Loyalty records are kept for as long as the account is active, because a balance is meaningless without the history that produced it.

Enquiry and trial-request details are kept for as long as needed to deal with the enquiry and for a reasonable period afterwards for record-keeping.

Records required for legal, accounting, or tax purposes are kept for the period the law requires.

8. Security

Access to venue data is restricted to that venue's authorised accounts. Staff credentials are stored using one-way hashing, and operational records are append-only so that history cannot be silently rewritten.

No system is completely secure. Please tell us promptly if you believe an account has been compromised.

9. Your rights

Subject to applicable law, you may request access to the personal data we hold about you, ask for it to be corrected, ask for it to be deleted, or object to certain processing.

Where loyalty data was collected by a participating venue, we may need to involve that venue to action a request.

Requests can be made through the contact form on this site or the support address in the footer.

10. Children

The platform is not directed at children. A business must not configure games or rewards aimed at children where doing so would require consents it has not obtained.

11. Changes

We may update this policy. The version and effective date shown on this page identify the text currently in force.