The Lost Coffee mobile application is owned and operated by Lost Coffee, who are the controller of all stored data.
PepperHQ Ltd operate as a processor of data for the Lost Coffee App.
## Information we collect about you through the Lost Coffee App.
We collect information about you when you:
- register to use the Lost Coffee App;
- register your debit or credit card details;
- upload a profile photo, and
- use the payments facility in the Lost Coffee App to pay for your order.
This information is collected, stored and processed under Article 6(1)(b) of the GDPR,processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract" i.e. We need this data for you to be able to use the App for it's primary purposes.
## Using your information
Collecting personal information in the Lost Coffee App (name, email address, date of birth) helps us to better understand what you need from us.
We use your information to:
- improve the functionality and performance of the Lost Coffee App;
- personalize our services to you;
- tell you about important changes to the Lost Coffee App and related services, and
- manage promotions, competitions, customer surveys and questionnaires.
Your personal information is safe with us and will never be released to third party companies for marketing purposes.
The Lost Coffee App captures your geographic location when you place an order to one of our stores. We do this to provide an enhanced visitor experience. We will only capture this information with your consent. The Lost Coffee App also captures basic usage metrics to help us identify any problems and to make improvements in the future. These metrics also help us understand how people use the Lost Coffee App and how many people use the different functions within the Lost Coffee App.
Your contact details and personal information may be used to send direct marketing messages to you via your contact details provided. This is done only with your explicit consent, which can be withdrawn at any time from the MyAccount section; options within the app. You may refuse consent for marketing messages without detriment to any other areas of functionality within the app.
# Information We Capture
### Geographic location
We provide enhanced store visit experiences when you choose to order to one of our stores and allow you to pay using the Lost Coffee App. You may prevent the Lost Coffee App from accessing your device's location services, or turn off the location services of your Mobile Device. Doing so will impact the capability of the Lost Coffee App and prevent you from enjoying an enhanced experience.
### Data you share with us (Including information you give us when signing up, and information which is shared automatically, such as Device ID, and IP address)
We use this data to log you in to the Lost Coffee App and it helps us understand our customers better and present you with appropriate offers and promotions. Your data is stored in an encrypted database and transferred over a secure network connection. You decide which data you do and do not share with us. If you ask us to, we will update, correct or delete any data which you give to us.
### Your Card details
Your card details are not stored on the Lost Coffee App and they are only used in accordance with your payment instructions. Your card details are stored with our payment gateway partner - Square - who are a Level 1 certified PCI-DSS Service Provider.
### Your profile photo
Your profile photo is used in store to verify your identity. If you ask us to, we will update, correct or delete your profile photo. However, you must have a profile photo if you wish to use the Lost Coffee App to collect your order in store.
## Data storage, protection and your right to access and erasure
Your data is stored in an encrypted database and transferred over secure network connections. We will store your information for as long as your account exists in the Lost Coffee App. If your user account is entirely inactive for a period of 12 months or more, we will delete your account. If you ask us to, or if you delete your account, we will delete the information linked to your account which can identify you personally, including your profile photo and personal details.
You may ask us, at any time, to provide to you confirmation that your data is being processed and access to your personal data. This will generally be provided within 7-21 working days.
## Marketing and research
If you agree, we may contact you:
- with offers and information about the Lost Coffee products or services.
- for customer research, e.g. to help improve our service.
You can ask us to stop contacting you for marketing and/or research purposes by following the instructions in any such communication or by emailing us at firstname.lastname@example.org
## Disclosing your information
We will never disclose your information to anyone outside of the Lost Coffee LLC except:
- Where we have your consent
- Where we are required or permitted to do so by law
- To any successors in title to our business.
If we ever transfer your personal information to countries outside the European Economic Area we will ensure that appropriate security measures are taken.
## Accessing your information
To obtain a copy of the information we hold about you, email us at email@example.com. Please confirm any details to help us identify and locate your information. If any of the details are incorrect, let us know and we will amend them.
## Changes to our policy
This policy replaces all previous versions and is correct as of March 2020. We reserve the right to change the policy at any time.
## Contacting us
If you have any queries, please contact us at firstname.lastname@example.org.