Privacy

Information used by the service

• Customer accounts: your email address, email verification requests and authenticated sessions. Merchant staff accounts also use an email address, password hash, assigned role and store access.
• Bookings and orders: customer name and email, selected store and items, dates, quantities, prices, payment state, ticket references and check-in or pickup status.
• Pickup notifications: the mobile number you provide, SMS consent and notification delivery status.
• Payment records: transaction references, amounts, payment status and subscription consent. When saved cards or automatic renewals are used, the service also handles payment tokens and limited card details such as brand, last four digits and expiry. Card entry is handled through Payrix-hosted secure fields.
• Security and operations: sign-in attempts, service requests and records of staff actions. IP-based limits help protect sign-in, verification codes and other endpoints from abuse.

How information is used and shared

We use this information to authenticate users, provide bookings, process payments, display order status, verify tickets, send requested service messages and support merchants and customers. Authorized merchant staff can access relevant records for their store.

Cloudflare provides hosting and transactional email infrastructure, Twilio handles pickup SMS delivery, and Payrix handles payment processing. These providers receive the information needed to perform those services. Customer and merchant notification emails are sent separately.

Camera and device storage

The merchant scanner uses the camera to read ticket QR codes. The decoded ticket reference is used to retrieve and verify the ticket; the scan flow does not upload camera photographs. Camera access can be denied or revoked in your device settings, and staff can paste a private ticket link manually.

The native app stores login tokens using the device’s secure storage and saves limited app preferences and private ticket references on the device. The website uses session cookies and local storage for the corresponding browser features. Private ticket links and QR codes should be kept confidential.

Service messages and your choices

Pickup-ready SMS is optional. With your consent, the merchant can send a message to tell you your order is ready. SMS and data charges may apply through your mobile provider.

You can choose whether to give optional pickup-notification consent, sign out of the app, change available device permissions, and contact us about information associated with your account. Parents or guardians should make bookings and provide contact details for children.

Retention and deletion requests

Information is retained as needed to operate the service, manage purchases and payment obligations, reconcile transactions, handle support requests and maintain necessary business records. Deleting the app from a device does not itself delete server-side information.

You can request deletion of your customer account and associated data from the app or this website. Submitting a verified request signs out your customer sessions. The request is then reviewed and processed; it does not automatically erase orders or financial records, or cancel active payment mandates. We will explain any information that must be retained when handling your request. Contact us if you need information about retained data or the progress of a request.

Cancel any membership renewals you no longer want using the membership’s subscription controls or by contacting the merchant. Account deletion and subscription cancellation are separate actions.

Contact

For privacy questions, access or correction requests, or help with deletion, email info@yolkpay.com.