PintUp

PintUp Privacy Notice

Last updated: 27 January 2026

1. Who we are

PintUp is operated by Geltzo Limited ("we", "us", "our").
Registered office: C/o Image Accounting, The Urban Building, Slough, Berkshire, SL1 2BE, United Kingdom
Privacy contact: PintUp@sarinmail.com

2. What this notice covers

This Privacy Notice explains how we process personal data when you use PintUp, including as a business owner, staff member using a bar device, or a customer using a loyalty card.

3. Roles: who is responsible for your data

We act as a data controller for personal data we process to operate PintUp (for example, account authentication, service security, and platform operations). Establishments may act as separate data controllers for personal data they process for their own loyalty scheme operations and marketing.

4. Data we collect

  • Account data: email address, authentication and login metadata.
  • Loyalty data: stamps issued, Tokens issued and redeemed, timestamps, and activity history within PintUp.
  • Device and usage data: device identifiers, IP address, browser information, and logs for fraud prevention and security.
  • Billing data (business owners): subscription status and Stripe identifiers. Card details are processed by Stripe and not stored by us.
  • Support data: messages you send us and related diagnostics.

5. How we use your data

  • to provide and operate PintUp (accounts, loyalty cards, wallets, redemption);
  • to send you transactional emails related to the service (stamp confirmations, reward notifications, redemption codes);
  • where you have given consent, to send you marketing communications such as offers, birthday treats, re-engagement messages, and campaigns from establishments you have joined;
  • to secure PintUp and prevent fraud and abuse;
  • to provide customer support and troubleshoot issues;
  • for billing, payments, and account administration (business owners);
  • to comply with legal obligations.

6. Lawful bases

  • Contract: to provide PintUp features you request (including transactional emails such as stamp confirmations, reward notifications, and redemption codes).
  • Consent: to send marketing communications such as offers, birthday treats, re-engagement messages, and campaigns from establishments you have joined. You can withdraw this consent at any time by unsubscribing via the link in any marketing email.
  • Legitimate interests: to operate, secure, and improve PintUp, prevent fraud, and support users.
  • Legal obligation: where required.

7. What we share with establishments

To operate the loyalty scheme, an Establishment may see customer loyalty activity for that establishment (for example, stamp issuance and reward redemptions). Depending on how the Establishment uses PintUp, it may also see identifiers such as your email address. Establishments are responsible for their own use of that data.

8. Service providers

We use service providers to help us run PintUp. These providers may process data on our behalf:

  • Hosting and deployment: Vercel
  • Database, authentication, storage: Supabase
  • Payments and billing: Stripe
  • Email delivery: Resend

9. International transfers

Some providers may process data outside the UK. Where this occurs, we use appropriate safeguards (for example, contractual protections).

10. Cookies and similar technologies

PintUp uses cookies or similar technologies necessary to operate authentication sessions and keep you signed in. We do not use non-essential cookies unless we tell you and, where required, obtain consent.

11. Retention

We keep personal data only as long as necessary for the purposes described. As a guide:

  • account data: while your account is active, and for a reasonable period after deletion for security and dispute handling;
  • loyalty and audit logs: to operate the service and prevent fraud, typically up to 24 months;
  • billing records: as required for accounting and tax purposes.

12. Your rights

Under UK GDPR you may have rights including access, correction, deletion, objection, restriction, data portability, and the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. You can withdraw marketing consent by clicking the unsubscribe link in any marketing email, or by contacting PintUp@sarinmail.com. To exercise any other rights, contact PintUp@sarinmail.com.

13. Complaints

If you have concerns, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO).

14. Changes

We may update this Privacy Notice from time to time. Continued use of PintUp after updates constitutes acknowledgement of the updated notice.

15. Contact

Privacy enquiries: PintUp@sarinmail.com