Ενημέρωση απορρήτου

This notice explains what personal data NextStamp collects, why, who else handles it, how long we keep it and what your rights are. It’s written from what the app actually does.

Who we are

NextStamp (https://nextstamp.app) is run by Lentio Sechou, a sole trader in England, trading as NextStamp. For anything about your data, email hello.nextstamp@gmail.com.

NextStamp has three kinds of user: people who collect stamps (customers), people who run a business on NextStamp (owners and their team), and NextStamp’s own staff. We’re the controller for NextStamp accounts and for running the service. For each business’s customers, the business is the controller and we process their data on its behalf, as our terms set out.

What we collect, and why

When you create an account

• Your name and email address, and your password, which we store only as a salted hash. We never see or keep the password itself.
• If you continue with Google: your Google account’s name, email address and account identifier. We don’t keep your Google photo, and we store the tokens Google returns encrypted.
• Your sign-ins: when you signed in, your IP address and your browser’s user agent. We use these to keep you signed in, to slow down attempts to guess passwords and to let you sign out of other devices.

Why: to give you an account and keep it secure. Lawful basis: our contract with you, and our legitimate interest in keeping accounts secure.

When you join a business’s card

• The card itself: its stamps, rewards, tiers and gifts, when and at which outlet you collected them, and which team member gave or corrected a stamp.
• What the business sees: your name and email address from your account, and whether you agreed to its offer emails. It doesn’t see your password, or your cards and visits at other businesses.
• Your acceptance of the card’s terms, with the words you accepted and when.
• Offer emails from that business, only if you tick the box. We keep the words you agreed to and when, and you can switch it off for each business in Account. NextStamp doesn’t send campaign emails or texts today; the switch records your choice for the business.
• Requests from the till poster: when you scan it, your request to the till and the answer.
• Tap tags: if a business uses a secure NFC tag, the tag’s identifier and its tap counter, so each tap counts once.

Why: to run the cards you join. Lawful basis: our contract with you, and for offer emails, your consent.

If you add a card to Apple Wallet or Google Wallet

The pass shows the card’s progress, its rewards and the business’s details. It doesn’t show your name. We keep a random identifier for each pass and, for Apple Wallet, the push token Apple gives us and a scrambled form of your device’s identifier, so the pass can update. Google keeps the pass in your Google account. Adding a pass also records your agreement to its alerts, with the words shown beside the button. A pass can suggest itself on your lock screen near the business’s outlets; your phone does that matching, and we never receive your location.

If you run a business on NextStamp

• Business details: name, trade, timezone, logo, and outlets with their addresses and phone numbers. If you tap "Pin it where I am", we also keep that outlet’s map position from your phone.
• Your team: each member’s name, email, role and outlets, and invitations. An invitation link carries a random token, and we keep only its hash.
• What happens at the till and in the app: stamps, rewards, corrections, campaigns and settings, with who did what, in an audit log.
• Totals for Insights: visits, stamps and rewards added up by day, card, outlet and team member. Customers appear in them only as counts.

Why: to run the service for the business. Lawful basis: our contract with the business, and our legitimate interest in keeping a record of who changed what.

If you pay for a plan

Only a business’s owner pays, through Stripe, our payment provider.

• Card and payment details are entered on Stripe’s own pages and stay with Stripe. We never see or store a card number.
• When an owner first chooses a plan, we send Stripe the business’s name, the owner’s account email, the business’s language and its NextStamp reference, so payments reach the right business.
• Stripe holds the billing name, email and address, any tax number given, the payment method, and the invoices and payments. Stripe’s privacy policy explains what it does with them.
• We keep Stripe’s references for the business’s customer record and subscription, the plan, whether it’s paid monthly or yearly, the outlets paid for, and the subscription’s status and dates.

Why: to bill the business for its plan. Lawful basis: our contract with the business, and our legal duty to keep tax and accounting records.

Suggestions and help search

Some features can ask TypeSafe, an AI service, for a suggestion: a card design and a business’s trade from its name, a check of the words a business writes for its customers (such as reward names and campaign notes), and which help article answers a question typed into the help centre’s search. TypeSafe receives that text only, never customer details. Please don’t type personal information into the help search.

Lawful basis: our legitimate interest in making NextStamp easier to set up and use.

NextStamp’s own staff

NextStamp’s admins can look up an account by its exact email address to help with support. They see counts, never the cards, and every look is recorded.

Our website

• Page views: on our public pages and the sign-in and sign-up pages, we use Vercel Web Analytics, which counts visits without cookies. It receives the page address with every query parameter removed except utm_* tags, and basic details of the request (browser, device type and rough location). Vercel tells visits apart with a hash of the request that it discards after 24 hours. Lawful basis: our legitimate interest in knowing which pages people use.
• Cookies: only the ones NextStamp needs to work. Signing in sets a session cookie and a short-lived sign-in token, your language is remembered in a cookie for a year, and a business device that works a till remembers its outlet in a cookie. There are no advertising or tracking cookies, which is why we don’t ask for cookie consent.

Who else processes your data

Some of these providers are in the United States. When personal data leaves the UK, it’s protected by the UK’s adequacy regulations, including the UK-US data bridge for providers certified under it, or by the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

We don’t sell personal data, and we don’t use it for advertising.

How long we keep it

• Your account: until you delete it.
• When you delete your account (Account, then Delete account), your sign-in, sessions and password go at once, and your name and contact details are cleared at once from every business that knew you. Then everything each business held about you is deleted, usually within minutes: your cards with every stamp, reward and gift on them, your consent records and your history. What stays names nobody, such as a business’s totals. A card you saved to Apple Wallet or Google Wallet changes to show it’s void, then stops updating, and you can remove it from your wallet.
• When an owner deletes a business, everything it held about its customers and its team is deleted the same way, and its record at Stripe is deleted too, which ends a paid plan at once. Stripe keeps the invoices and payments already made, which are our accounting records, for as long as tax law requires: at least five years after the relevant tax return deadline.
• Removing a card from My cards closes that card. The business keeps its record of your visits until you delete your account.
• Till requests are deleted 30 days after they’re made, unused team invitations a month after they lapse, and our records of payment events from Stripe after 90 days.
• Sign-in sessions last 7 days and renew while you use NextStamp. Signing out ends them.

Your rights

You can see your cards and activity in the app, change your name in Account, switch offer emails off for each business, remove a card and delete your account. You also have the right to ask us for a copy of your data, to correct it, to restrict or object to how we use it, to have it deleted, and to receive it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. Email hello.nextstamp@gmail.com and we’ll answer within one month. If your data is on a business’s card, you can also ask that business.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.

Children

NextStamp isn’t meant for children under 13, and running a business account needs someone 18 or older. If you think a child under 13 has an account, email us and we’ll delete it.

Changes to this notice

We’ll update this notice when what we do changes, and show the date at the top. If a change matters to you, we’ll tell you in the app before it applies.