Privacy Policy

What we collect from cafe owners

Your name, cafe name, email address, mobile number, and outlet details. We use these to run your account, send service messages, and bill you.

What we collect from customers

A mobile number, and a name if the customer chooses to give one. We also record each punch and each reward: which cafe, which outlet, when, and how many items. That record is what makes the card work.

We do not collect payment details from customers. We do not track customers across other websites.

How we use it

To show a customer their card, to let staff add punches, to unlock and redeem rewards, and to show the cafe how its loyalty program is doing. Cafes can see the customers who hold their card and how often they visit.

Messages

We may send a one time code by SMS to confirm a mobile number. Cafes may later send offers to their own customers. Any such message will say which cafe it is from, and customers can stop them at any time.

Who else sees the data

Only the cafe whose card the customer holds, and the services we use to run PunchCard: our hosting and database providers, and our SMS provider. We do not sell personal data to anyone.

Where it is stored

On managed servers operated by our hosting and database providers. Access is limited to the PunchCard team members who need it to run the service.

How long we keep it

While the account is active, and for a reasonable period afterwards for our records. A customer can ask us to delete their data at any time. A cafe can export and then delete its customer list.

Your choices

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@punchmycard.com and we will act on it.

Cookies

We use one small identifier stored in the browser so a customer returning to their card is recognised without signing in again. We do not use advertising cookies.

Changes

If we change this policy we will update the date at the top and, for anything important, tell you by email.