Off Road Bean

BeanThere

Privacy policy

Last updated 18 September 2026

BeanThere is the loyalty app for Off Road Bean. It keeps track of the beans you collect and the free drinks you claim. This page explains what we hold, why, and how to get rid of it.

Who we are

BeanThere is a trading name of D Henderson Ltd, a private limited company registered in England and Wales, company number 14785033, registered office 26 Quinton Close, Redditch, England, B98 0EL. D Henderson Ltd is the data controller for the BeanThere app.

Email info@beanthere.uk with any question about your data, or to use any of the rights below.

What we collect

What Why
Your email address It is how you sign in, and where we send sign-up, password reset and email change codes.
Your first and last name So the app can greet you, and staff can check the right account at the counter.
Your birthday, if you add one Optional. For birthday offers. Leave it blank and nothing changes.
Beans and free drinks Your balance, and when beans were collected or a drink redeemed. This is the loyalty scheme itself.
Crash reports If the app breaks, we get the error, the screen it happened on, and your phone's model and version. Not your name, email or anything you typed.

We do not collect payment details: the app never takes payment. We do not track your location, read your contacts or photos, and there is no advertising or analytics in the app. The camera is used only to scan QR codes at the counter; nothing is recorded or kept.

Why we are allowed to hold it

Running the loyalty scheme you signed up for is a contract with you. Keeping the app working and secure, which is what crash reports are for, is our legitimate interest. A birthday is consent, which you can withdraw by clearing it in the app.

Who else sees it

Only the businesses that run parts of the app for us. None of them may use your data for anything else, and we never sell it.

Who What they do Where
Amazon Web Services Runs the app's servers and holds your sign-in account London, UK
Neon The database holding your name, email and beans Europe
Postmark Sends your sign-up and password reset emails United States
Sentry Receives crash reports United States

Where a supplier is outside the UK, the transfer is covered by the standard contractual clauses and UK addendum in their terms.

How long we keep it

Your account and beans stay until you delete them. Crash reports are kept for 90 days. Records of emails we sent you are kept by Postmark for around 45 days. Database backups roll off within about a week, so a deleted account can persist in a backup for a few days before it disappears for good.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can also object to how we use it, ask us to restrict use, or ask for it in a portable form. The quickest routes:

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The app is not intended for children under 16. If a child has signed up, email us and we will delete the account.

This website

This site sets no cookies and has no analytics or tracking of any kind.

Changes

If this policy changes we will update this page and the date at the top. Anything significant will be told to you in the app.