Privacy notice
Template: fill in every highlighted blank before customers use this site. This is a starting point, not legal advice.
Who is responsible
[Business name], [address], decides how your information is used (the controller). Page Lemon hosts this site, runs the sign-in and stores orders and stamps for us as our processor. Stripe takes payments for the Coffee pass under its own terms.
Who can open an account
Ordering accounts are for adults aged 18 and over.
What we collect
- Your email address, to sign you in and send nothing else unless you ask.
- Your first name, for your cup and so staff can greet you when they scan your code.
- Your orders: the drink, size, milk, any extras or changes, the pickup time you chose and the name for your cup.
- Your stamps: one for each order collected at the counter, and any free drink you have redeemed.
- Your plan (Regular or Coffee pass) and when it started or stopped. Payments for the Coffee pass go through Stripe; we never see your card details.
- Sign-in records (when and from which browser), to keep your account safe.
Why
To make the orders you place, keep your stamps and plan, and make the drinks you ask for ([legal basis, for example: our contract with you]).
Who sees it
You see your own orders and stamps. When staff scan your code they see your first name and your stamps, not your email. Baristas see your orders in the Page Lemon Dashboard, where the Site Owner also sees them. [Who else sees them, for example: nobody outside the counter team].
How long we keep it
[For example: orders for 12 months after collection; payment records for 6 years, as UK tax rules require]. When you leave, your orders and stamps are deleted, except records we must keep by law.
Your rights
You can ask for a copy of your information, ask us to correct or delete it, or object. Write to [privacy email]. You can also complain to [your data protection authority, for example the ICO in the UK].
Last updated [date].