What we keep, and why.

Who we are

Sasha's Corner, 23 Commercial Street, Dundee DD1 3DD, is the controller of the personal information described here. That means we decide what is kept and why, and we are who you ask about it.

To ask a question or use any of your rights, ask at the till, use the contact form, or call 07398 433317.

Sasha’s Corner Rewards

When you join the Rewards card, we keep:

• your first name;
• the email address or mobile number you gave us;
• your birthday, day and month only, if you gave it (no year), and when you set it;
• your stamp history: when each stamp was added or taken off, which member of staff and which of our devices did it, and when you had a free drink and which drink it was;
• when you agreed to the card rules, and whether, when and where you agreed to news and offers;
• which of our QR codes you joined from (for example a table or a flyer), and who referred you, if anyone.

We never take or keep payment details for the card. The card doesn't hold money.

Why, and on what basis

• To run your card (count stamps, give free drinks, get the card back to you on a new phone). The basis is the agreement between us when you join: without these details there is no card.
• To stop misuse, such as stamps added that nobody paid for. We record who stamped a card and flag unusual patterns. The basis is our legitimate interest in keeping the scheme fair.
• News and offers, unless you unticked the box when you joined. The basis is your consent, which you can withdraw at any time.
• Your birthday drink, if you gave a birthday. We only use the day and month to put the drink on your card.

Codes for getting your card back are sent by email or text message. If we can't send one, we check it's you at the till instead.

News, offers and lock-screen messages

The box for news and offers is separate from joining. It starts ticked; untick it and we won't send you any. We record when and where you said yes. Every email or text we send you with news or an offer has a link to stop them, and you can switch them off on your card at any time.

A card in Apple Wallet or Google Wallet can show a message on your lock screen. We use that for card updates (a new stamp, a free drink ready, your birthday drink) and for no more than two news or offer messages a month.

Apple Wallet and Google Wallet

Adding the card to a wallet is optional; it works in your browser too. If you add it to Apple Wallet, your phone asks our server for updates. For that we keep an identifier for your device and a push token that Apple issues. We do not see your Apple ID. If you add it to Google Wallet, Google keeps a copy of the card in your Google account: your first name, your stamps and the card's code. Apple and Google handle their side under their own privacy terms.

If you keep the card in your browser, a key that opens it is saved in that browser's storage on your device. It is not a tracking cookie and is not sent anywhere except to show you your card.

How long we keep it

Your Rewards details are kept while you use the card. If a card has no activity for 24 months, we delete your details automatically. After a deletion we keep only an anonymous count of the stamps and free drinks given, with no name or contact details, for our accounts.

Deleting your card

Open your card and choose Delete my card at the bottom. You can also ask at the till or use the contact form. We erase your name, contact details, birthday and marketing choice at once, and the card stops working, including the copy in your wallet.

Bookings and the contact form

Booking a table. We keep your name, email address, phone number if you gave one, the number of people, the date and time, and any note you added. We use them to hold your table and to contact you about the booking. The basis is the arrangement you ask us to make.

The contact form. We keep your name, email address, the topic and your message, so we can reply. The basis is our legitimate interest in answering you.

New bookings and messages are also sent to the café team through Telegram, so someone sees them quickly. We don't use either for marketing.

This website

The website sets no advertising or tracking cookies. To count visits and a few actions, such as joining Rewards, we use Swetrix, a cookieless analytics service that does not identify you or follow you to other sites. To stop abuse of the forms, the server briefly holds your IP address in memory to limit repeated attempts; it isn't stored.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to limit how we use it, to object to how we use it, or to have it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. Ask at the till or through the contact form. We will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113. We would be grateful for the chance to put it right first.