This Privacy Policy explains how PLNTD LONDON LTD ("PLNTD", "we", "us") collects, uses and protects your personal data when you use the PLNTD loyalty app. We are the data controller for the information described below.
If you have any questions, contact us at admin@plntdco.com.
1. What we collect
Account details: your email address and the display name you choose when you sign up.
Loyalty activity: the points you earn and redeem, and the date and time of each transaction at the till.
Sign-in data: if you sign in with Google or Apple, we receive your email address and basic profile information from that provider to create your account. We never receive your Google or Apple password.
Technical data: basic information needed to keep you signed in and to operate the app securely.
2. How we use it
To create and manage your account.
To track your loyalty points and let you redeem rewards.
To show you messages and offers from the shop inside the app.
To keep the service secure and prevent fraud or abuse of the rewards scheme.
To respond to you when you contact us for support.
3. Legal basis
We process your data to perform our contract with you (running the loyalty scheme you signed up for), to meet our legitimate interests in operating and securing the app, and, where required, with your consent (for example, optional marketing emails, which you can turn off at any time in Settings).
4. Where your data is stored
Your data is stored securely using Supabase, with servers located in the United Kingdom (London region). Access is protected by row-level security so that you can only ever see your own account and points.
5. Sharing
We do not sell your personal data. We share it only with the service providers that help us run the app (such as our hosting and authentication provider) and only as far as needed to provide the service, or where we are required to by law.
6. Retention
We keep your account and points history for as long as your account is active. If you delete your account (Settings → Delete Account), your account, points and history are permanently removed.
7. Your rights
Under UK data protection law you have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to request a copy of your data. You can update your details or delete your account in the app, or contact us to exercise any of these rights.
To make a request or raise a concern, email admin@plntdco.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Children
The app is not directed at children under 13, and we do not knowingly collect their data.
9. Changes
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted in the app.