Privacy notice for your loyalty card
Version 1.0 · 29 September 2026 · Linked on the join screen and at ottadot.com/privacy
This notice explains what happens to your data when you add a shop's loyalty card to your phone wallet. It is short on purpose.
1. Who is responsible
1.1 The shop that gave you the card ("the Shop") decides how your data is used. It is the controller: the shop that gave you the card (its name is on your card). The Shop's details are shown on the screen where you join.
1.2 ottadot runs the card for the Shop. It is the Shop's processor and uses your data only on the Shop's instructions. ottadot is operated by Nextura LLC, a company organized in Wyoming, USA.
2. What is collected
| Data | When |
|---|---|
| Your name | When you join |
| Your email address or phone number | When you join |
| Your visits: date, time, dots and rewards | Each time you check in |
| Your birthday (day and month only) | Only if you choose to give it |
| Your usual order | Only if the staff note it |
| Card data: a card ID, your wallet type (Apple or Google) and a code that lets the card be updated | When you add the card |
| Whether you want optional messages | When you choose |
We do not collect your payment card, your contacts or your location.
3. Why it is used
3.1 Your data is used to:
- create your card and keep it up to date;
- count your dots and rewards;
- let the staff check you in and greet you by name;
- show messages on your card (section 4);
- send a birthday greeting or reward, if you gave your birthday;
- let you join another shop with one tap, if you choose to (section 5);
- keep the service secure and prevent misuse;
- meet legal duties.
3.2 For the UK and the EU, the legal bases are: running the loyalty program you joined; your consent for your birthday and optional messages, which you can withdraw at any time; the Shop's legitimate interest in keeping the program secure; and legal duties. The Shop confirms its legal bases.
4. Messages on your card
4.1 The card may show short messages on your lock screen:
- functional messages (a dot added, a reward ready), always;
- at most one other message every 7 days;
- a "we miss you" message at most once every 30 days;
- no messages between 21:00 and 08:00.
4.2 ottadot never sends you WhatsApp marketing.
4.3 You can turn off card notifications in your wallet settings, or remove the card at any time.
5. Who sees your data
5.1 Your data is seen by:
- the Shop and its staff;
- ottadot, and the providers that help run the card: Supabase (database), Vercel (hosting), WalletWallet (wallet cards), Apple and Google (wallet delivery), Resend (email). They may use it only to provide their service;
- authorities, only when the law requires it.
5.2 Your data is never sold, never used for advertising and never shared with other shops.
5.3 One-tap join: if you already have an ottadot card at one shop and ask for a card at another, you can join with one tap. Your name and contact details then go to the new shop, only because you asked.
6. Where it is stored
6.1 Your data is stored on servers in the United States.
6.2 When data leaves the UK or the EEA, it is protected by approved contract clauses.
7. How long it is kept
7.1 Your data is deleted 24 months after your last visit to the Shop.
7.2 If the Shop stops using ottadot, your data is returned to the Shop or deleted within 12 months.
7.3 You can ask for deletion sooner at any time.
7.4 Removing the card from your wallet does not delete your data by itself. Ask the Shop or ottadot to delete it. At ottadot.com/me you can see all your cards.
8. Your rights
8.1 You can ask to see your data, correct it, delete it, limit or object to its use, get a copy to take elsewhere, and withdraw any consent you gave.
8.2 You will receive an answer within one month.
8.3 You can complain to a data protection authority: in the UK the ICO; in Sweden IMY; in the EU your local authority; in Bolivia, through the privacy protection action under the Constitution; in other countries, the local authority.
9. Children
The card is not meant for children under 16.
10. Contact
10.1 The Shop: at its premises (its name is on your card).
10.2 ottadot: hola@ottadot.com or WhatsApp +591 622 96523. We pass your request to the Shop and help it answer.
11. Changes
We update this notice when something changes and show the new date at the top. If the change is important, your card tells you, within the message limits.