What we know about you, and why

If you are a member: your name, email, mobile number, the plan you are on, your visits to the cafe and the last four digits of your card. Your full card number is held by Stripe, not by us.

If you are not a member: nothing. The public pages of this site set no cookies and run no third-party analytics until you say yes.

To run your membership: to know what you are entitled to, to take the payment you agreed to, and to tell you when something changes. That is a contract, not consent, so we cannot run the membership without it.

Marketing email is separate and optional. The box is never pre-ticked, and unsubscribing takes one click and removes you immediately.

When you redeem a drink, the person serving you sees your first name, your plan, what you are owed today and when you last redeemed. They cannot see your surname, contact details, payment details or your full history.

The owner can see the full customer record, and every look at it is written to an audit log.

The code in your member card is a rotating token containing an opaque reference, an expiry and a random value. It carries no personal information, so a photograph of your screen tells nobody anything and stops working within a minute.

Membership and visit records: for as long as you are a member, and six years afterwards, because HMRC requires it of the payment records attached to them.

Marketing preferences: until you change them. Analytics, if you have agreed to it: 14 months.

Stripe processes payments. Our hosting and database providers store the data. Nobody buys it, and we do not share it with any other business.

This system is entirely separate from Belsize Priory Pharmacy and from any medical or patient record system. There is no shared database, no shared login and no data flows between them in either direction.

You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email the address below and we will do it within 30 days.

If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk.