Privacy policy

Pointa operates the platform and is who collects the data described below. To reach us about your data, use the channels on the contact page.

And when a customer registers a loyalty card at a subscribing cafe, that cafe is the party they have the relationship with, and Pointa processes the data to run that cafe's loyalty program.

From a cafe's customer: name and phone number when the card is issued, both mandatory — without them no loyalty card can be created and no cashier can recognise its holder at a scan. Then the visit history and its dates, the rewards, gifts and coupons used, and the state of a subscription card. And for a pickup order only, at the customer's choice: either their live location or a description and colour of their car, so the order reaches them — never asked unless the customer places an order. All of it is in the record at the top of this page, each with how long it is kept.

We ask for no email, no address, no date of birth and no ID.

From a cafe owner and a cashier: name and phone number, and a password stored one-way hashed and never recoverable.

From the browser: a session cookie, and one for the light or dark band preference. We use no advertising trackers and set no third-party cookies.

The purpose: running the loyalty program of the cafe the customer registered at — issuing the card, counting one visit a day, granting the reward, showing today's message and the gift chance, and fulfilling pickup orders.

The basis: performing the relationship the customer started themselves when they asked for the card, and the cafe's legitimate interest in running its loyalty program. And the phone number is a necessary basis because it IS the customer's identity in this system — there are no customer accounts and no customer passwords.

We do not use customers' data for any marketing outside the cafe they registered at, do not sell it, and do not share it with advertisers.

Collection: from the signup form the customer opens themselves by scanning the cafe's QR, and from the cashier scanning the customer's card.

Processing and storage: in a database isolated per business at the database's own level, over encrypted connections. And logos and public images are stored in a separate object store.

Destruction: automatic on the fixed schedules set out under retention below, and by hand as soon as an erasure is requested.

Data is processed and stored on servers outside the Kingdom of Saudi Arabia, in the European Union. And these are the service providers our data passes through, each within its own task:

And we disclose your data to nobody else except under a legal order.

Without a name and a phone number no loyalty card can be issued, and the cashier cannot recognise the customer or count their visits. And there is no other consequence: anybody can browse a cafe's menu, prices and hours with no data at all.

And without a location or a car description on a pickup order, the order cannot be accepted — because those are what deliver it. And registering a visit remains possible without either.

Write to us on the channels on the contact page from the same number registered on the card, or ask your cafe to pass your request to us. And we answer within 30 days.

And when we carry out an erasure we remove the name, the phone number and everything identifying the card's holder, stop the card in their phone from carrying their name, and record the erasure itself without keeping the number.

Operational cookies only. And we use no advertising trackers and do not measure your behaviour outside this site.