Privacy notice

Draft placeholder — not yet written. Required before any real customer enrols, because visit histories are profiling.

What Tenth actually stores today

Worth stating plainly, because it is less than people expect.

• Customers: a card serial number and a timestamped list of visits. No name, no phone number. An email address only if the customer chooses to add one — it is never required, and a card works forever without it.
• Shops: the registering person’s email address, and the shop’s name, branding and location.

What still needs writing

• Lawful basis for profiling visit habits, and how a customer objects.
• Retention periods for the visit log.
• Controller and processor roles, mirroring the terms of service.
• How a customer deletes their card and its history.