Skip to content
Nabaperks

For venue operators · plain English summary

What happens to your customers' data.

How Nabaperks handles loyalty records, consent separation, support access, and audit evidence for your venue. The full notice travels with your merchant agreement.

If you're a customer

This summary is written for the venues that run Nabaperks, but it covers your data too. Joining a venue's loyalty card stores your verified phone number, stamps, rewards, and consent choices, scoped to that venue and Nabaperks support. Marketing is optional and separate from collecting stamps, and you can ask for access, deletion, or export at any time using the contact details further down this page.

Privacy, condensed

Nº P-2026

Data collected

Nabaperks stores the verified phone identity used by a customer, merchant loyalty membership records, stamp events, reward events, consent records, QR and billing status signals, and support audit logs. Customer phone numbers are stored for lookup and display using protected server-side helpers.

Purposes

Data is used to provide the loyalty card, show progress, unlock and redeem rewards, prevent misuse, support merchants and customers, keep audit evidence, and measure service performance. Where a venue uses soft GPS checks, Nabaperks stores minimized location evidence for fraud prevention; raw coordinates are not stored by default.

Sharing, scoping, and support access

Customer loyalty data is scoped to the relevant merchant and Nabaperks support administrators. Admin access is used for support, fraud review, privacy requests, and audited operational tasks. PostHog analytics receives minimized event properties where configured.

Data requests

Customers can ask for privacy, access, deletion, export, or consent support. Internal admins use audited lookup tools to identify the relevant customer and merchant records and record the request channel.

Audit and support records

Support notes, consent records, fraud signals, manual adjustments, and admin actions may be retained as audit evidence so reward history and support decisions remain accountable.

Data controller & official guidance

The data controller for Nabaperks loyalty data is Lapen Inns. For privacy, access, deletion, export or consent requests, contact [email protected]. Our approach is privacy-conscious and consent-led, and follows ICO guidance.

Official guidance: ICO (UK data protection) · CAP / ASA advertising codes.

Platform terms