Privacy Policy

1. Who We Are

Lemon Crepe & Coffee Co. ("we", "us", "our") operates a customer loyalty programme. We are the data controller for the personal data collected through this programme.

Contact: south_williamstreet@lemonco.com

2. What Data We Collect

We collect the minimum data necessary to operate the loyalty programme:

Data	Purpose	Legal Basis
Name	Identify you on your loyalty card	Contract (performance of loyalty programme)
Email address	Account identification; send reward notifications	Contract; Legitimate interest
Phone number (optional)	Contact you about rewards if needed	Consent
Points balance & transaction history	Track and manage your loyalty rewards	Contract
Visit history (date/time)	Record visits for points allocation	Contract
Device token (Apple/Google Wallet)	Update your loyalty card on your phone	Contract

3. Location Data

Your digital loyalty card includes our business location coordinates. This allows your phone's wallet app (Apple Wallet or Google Wallet) to display your loyalty card on your lock screen when you are near our premises.

This location check is performed entirely by your phone's operating system -- we do not receive, track, or store your location at any time.

You can disable this feature in your phone's wallet app settings or by removing the pass from your wallet.

4. How We Use Your Data

Your data is used solely to operate the loyalty programme. Specifically, we use it to:

• Issue and manage your digital loyalty card
• Record points when you visit
• Enable you to redeem rewards
• Update your wallet card with your current balance
• Contact you about your rewards (only if you provided a phone number)

We do not use your data for marketing, advertising, profiling, or any purpose other than operating the loyalty programme.

5. Who We Share Your Data With

We do not sell, rent, or share your personal data with any third parties for marketing purposes. Your data may be processed by:

• Our hosting provider -- who stores the data on secure servers within the EU/EEA.
• Apple Inc. / Google LLC -- solely to deliver wallet pass updates to your device. These companies process device tokens only and do not receive your personal details.

6. Data Retention

We retain your loyalty data for as long as your account is active. If you request deletion or have had no activity for 24 months, we will delete your personal data. Transaction records may be retained in anonymised form for business reporting.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access -- request a copy of the data we hold about you.
• Rectification -- ask us to correct inaccurate data.
• Erasure -- ask us to delete your data ("right to be forgotten").
• Data portability -- receive your data in a machine-readable format.
• Withdraw consent -- withdraw consent at any time (for optional data like phone number).
• Complain -- lodge a complaint with the Data Protection Commission (www.dataprotection.ie).

To exercise any of these rights, contact us at south_williamstreet@lemonco.com. We will respond within 30 days.

8. Data Security

We protect your data using industry-standard security measures including encrypted connections (HTTPS/TLS), secure database storage, and access controls. Wallet pass authentication uses unique tokens per customer.

9. Children

The loyalty programme is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has signed up, please contact us.

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Significant changes will be communicated via your wallet card or email.

11. Contact Us

If you have any questions about this privacy policy or your data, contact us at:

Lemon Crepe & Coffee Co.
55 Tymonville Road, Dublin
south_williamstreet@lemonco.com