Privacy Policy

We collect only what we need to run Certainlyours: guest reviews and tips for hospitality teams, team members' professional profiles, and the venue tools that sit around them.

• Identity and contact — name, email address, phone number, profile photo and job title or role
• Account data — sign-in details (managed by Supabase Auth), your role (venue operator or team member), the venue team(s) you belong to, and your settings
• Right to Work and staff documents — copies of documents you or your venue upload (for example to prove your right to work in the UK), the check outcome and any expiry date. These are kept in private storage that only you and your venue can access
• Attendance and location — QR clock-in and clock-out times. If your venue uses location checks and you allow it, we record your device's approximate GPS location when you clock in so your venue can confirm you were on site. Venues may save their own venue location
• Reviews — the rating and comment a guest leaves after scanning a venue or team member QR code, the date and venue, and the guest's name only if they choose to give it. We also store a device token and the IP address used, so we can stop repeat reviews (one review per device, per venue, per day)
• Tips and payouts — tip amounts, dates, who was tipped, how the venue's tip pool is set up, withdrawals, and your Stripe Connect account status. Card and bank details are collected and held by Stripe, never by us
• Identity verification status — when you connect your bank, Stripe verifies who you are under its own rules. We receive the result (verified or not), which is what shows your gold tick. We do not receive your ID documents or images from Stripe
• Team Wall and chat — messages, posts, photos and reactions you share with your venue team
• Notifications — your email address and, if you turn on push notifications, a device push token
• Technical data — IP address, browser and device type, and error logs
• SMS opt-in data — phone number and consent records, if you opt in to any SMS messages

UK GDPR requires a lawful basis for each use of your data. These are ours:

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We do not sell, rent or share your personal data for marketing. We use these service providers, under contract, only to run the platform:

• Supabase — database, sign-in and file storage, hosted in the EU (Ireland)
• Stripe — tips, payouts, venue membership billing and identity verification when you connect your bank (UK, EU and US)
• Resend — service emails (US)
• Cloudflare — website hosting and security (global network)
• Google Fonts — web fonts; your browser sends your IP address to Google (US)
• jsDelivr — delivers some of the scripts the app uses; your browser sends your IP address to the network that serves them

Inside the product: your venue can see your profile, attendance, documents status, tips and reviews for its team. Other members of your team can see what you post on the team Wall and chat. Your public profile and reviews can be seen by anyone you share them with.

We may also share data with legal authorities where the law, a court order or a regulator requires it.

No mobile information (phone numbers, opt-in data, consent records) will be shared with third parties or affiliates for marketing purposes.

Some of our providers process data outside the UK. Where they do, we rely on UK adequacy regulations (for example for the EU, and for US organisations certified under the UK Extension to the EU–US Data Privacy Framework) or on the ICO's International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Account and profile — while your account is open, then deleted within 90 days of closure
• Tip and payout records — 3 years from the date of each tip (Tips Act record-keeping), and up to 6 years where needed for tax and accounting
• Right to Work documents — for as long as you work at the venue and 2 years after that ends (Home Office guidance), then deleted
• Clock-in location data — 12 months
• Team Wall posts and chat — while the venue team exists; they stay visible to the team if you leave (see our Terms)
• Reviews — kept on the team member's profile and venue page while the account exists. The device token and IP address stored with a review are kept for 12 months
• SMS consent records — for as long as you are opted in, plus 2 years

We take appropriate technical and organisational measures to protect your data, including:

• Encryption in transit and at rest
• Row Level Security (RLS) at the database level
• Private storage for staff documents
• Secure, role-based access controls
• Regular security reviews

No method of transmission or storage over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

We use only cookies and browser storage (such as localStorage and the app's offline cache) that are strictly necessary to keep you signed in, remember your settings and keep the app working offline. These do not need your consent, so we do not show a cookie banner.

We do not use analytics or advertising cookies, and we do not track you across other websites. If that ever changes, we will ask for your consent first.

You can clear cookies and site data in your browser settings at any time. If you do, you will be signed out and your settings on that device will be reset.

Under UK data protection law (UK GDPR), you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing in certain circumstances
• Receive your data in a portable format (data portability)
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the ICO (ico.org.uk)

To use any of these rights, or to delete your account and data, email founder@certainlyours.com, use our support form, or use your account settings where available. We will respond within one month (this can be extended by two months for complex requests). There is no fee in most cases.

If we offer SMS and you opt in to receive messages from The CS (operated by Get Certain Limited), you agree to receive messages such as account updates, tip and review notifications, and team alerts.

• Message frequency may vary
• Message and data rates may apply
• Text STOP at any time to unsubscribe
• Text HELP for assistance
• Consent to receive messages is not a condition of any purchase or service

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All opt-in data and consent records are kept confidential and are never sold.

Our services are intended for users aged 18 and over (our payment provider, Stripe, cannot pay out to under-18s). We do not knowingly collect personal information from anyone under 18. Guests leaving a review do not need an account. If you believe a minor has created an account, please contact us at founder@certainlyours.com and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Where changes are material, we will tell you by email or with a notice in the app before they take effect.

For any privacy-related queries, to use your rights, or to raise a concern: