01Who we are
Tenth Cup (“we”, “us”) is registered with the Dutch Chamber of Commerce (KVK) under number 98046373 and provides the Tenth Cup loyalty card service at tenthcup.com.
We play two different roles, depending on whose data it is:
- For cafes that sign up, and for their staff, we are the controller. We decide how that data is used to run your account.
- For a cafe’s customers, the people who carry a cafe’s stamp card, the cafe is the controller and we are its processor. We store and handle that data on the cafe’s behalf and only to run its loyalty card.
02If you carry a cafe’s card
When you get a card at a cafe that uses Tenth Cup, we collect:
- Your first name and email address, and your last name if you give it. Your name appears on your card; your email lets you get the card back on a new phone.
- Your birthday (day and month only, no year), if you choose to add it, so the cafe can give you a birthday treat.
- Your stamp history: when and at which of the cafe’s locations you collected a stamp or redeemed a reward, and which team member added it when staff scanned your card.
- Your card code: a code shown as a QR on your card, which the cafe’s staff can scan to add a stamp. It only works with that cafe’s Tenth Cup account.
- Device details: a cookie that keeps your card open in your browser, and, if you add the card to Apple Wallet or Google Wallet, the identifiers those services need to update it.
We never collect your location from your phone. A stamp is linked to a location because you tapped that location’s NFC, scanned its code, or staff there scanned your card.
The cafe can see your name, email, birthday and visits in its dashboard, and can export them. It uses them to run its card, and can send notifications to the card in your wallet about your stamps, rewards and its offers. You can turn these off in your phone’s wallet settings, or remove the card. Neither the cafe nor Tenth Cup sends you marketing emails; the only emails you get are links to bring your card back.
To see, correct or delete your data, ask the cafe. You can also write to us and we’ll pass your request on and help the cafe deal with it.
03If you run a cafe on Tenth Cup
When you or your team use Tenth Cup, we collect:
- Account details: names and email addresses of the owner and team members, a securely hashed password, and when each person last signed in.
- Cafe details: your cafe’s name, logo, card design, location names and addresses, and the shipping address for your NFC stands.
- Billing details: billing email, subscription status and invoices. Your card number is entered directly with Stripe; we never see or store it.
- Usage records: actions such as adding stamps by hand, sending campaigns and changing settings, so your team can see what happened and so we can help when something goes wrong.
04Why we use it
We use personal data only to run the service:
- To provide Tenth Cup under our contract with the cafe: accounts, cards, wallet passes, stamps, rewards and emails.
- To keep it secure and fair (our legitimate interest): signing in, rate limiting, stamp cooldowns and stopping abuse.
- To meet legal duties: keeping invoices and tax records.
- To send wallet notifications on the cafe’s instructions, as part of the card you signed up for: updates about your stamps and rewards, and the cafe’s own offers.
We email cafe accounts about their service, such as sign-in codes, billing notices and setup reminders. We don’t send our own marketing to a cafe’s customers, and we don’t use their data to build profiles or for any other business.
07How long we keep it
- Customer cards and stamp history are kept while the cafe’s account is active, so cards keep their progress. A cafe can delete a customer at any time, which removes their stamps and history permanently.
- When a cafe cancels, we keep its data for 30 days in case it comes back, then delete it, including its customers’ data.
- Invoices and billing records are kept for 7 years, as Dutch tax law requires.
- Sign-in codes and links can be used once and expire within an hour; team invites expire after 7 days.
08How we protect it
All traffic is encrypted with HTTPS. Passwords are stored as one-way hashes, never in plain text. Each cafe can only see its own data, and inside a cafe only owners can delete customers. Sign-in and stamping are rate-limited, and NFCs can be cryptographically signed so a stamp can’t be faked.
If a data breach puts your rights at risk, we will tell the affected cafes without undue delay, and notify the Dutch data protection authority where the law requires it.
09Your rights
Under the GDPR you can ask to see the data held about you, have it corrected or deleted, receive a copy in a portable format, and object to or restrict how it’s used. You can turn off wallet notifications at any time in your phone’s wallet settings.
Cafe customers should ask the cafe (see section 2), which can see, correct, export and delete their data from its dashboard. Cafes can change their own account details in Settings.
If you’re unhappy with how your data is handled, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or to the authority in the country where you live.
10Children
Tenth Cup isn’t meant for children under 16. If you believe a child has given us their data, contact us and we’ll delete it.
11Changes to this policy
We’ll update this page when the service or the law changes, and change the date at the top. For significant changes, we’ll email cafe owners in advance.