Privacy notice

Template: fill in every highlighted blank before customers use this site. This is a starting point, not legal advice.

Who is responsible

[Business name], [address], decides how your information is used (the controller). Page Lemon hosts this site, runs the sign-in and stores your reservations and stamps for us as our processor. Stripe takes payments for the Bread Club under its own terms.

Who can open an account

Accounts are for adults aged 18 and over.

What we collect

• Your email address, to sign you in.
• Your first name, so staff can greet you when they scan your code.
• Your visits and free coffees: one entry each time we scan your code.
• Sign-in records (when and from which browser), to keep your account safe.

Your code holds no personal details: it is a random code that works once, for about a minute.

[Describe any sign-in cookies or device storage, their purpose and how long they last.]

Why

To run the coffee card you signed up for ([legal basis, for example: our agreement with you]).

Who sees it

You see only your own visits and card. [Who else sees it, for example: the owner and counter staff, who see your first name and counts when they scan your code].

How long we keep it

[For example: while you have an account, and 1 year after your last visit]. When you leave, your visits and rewards are deleted, except records we must keep by law.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, or object. Write to [privacy email]. You can also complain to [your data protection authority, for example the ICO in the UK].

Last updated [date].