Privacy policy

What we keep, and why.

BeanThere is a coffee loyalty app. It keeps track of the beans you collect and the free drinks you claim. This page explains what we hold, why, and how to get rid of it.

Last updated 19 September 2026

Who we are

BeanThere is a trading name of D Henderson Ltd, a private limited company registered in England and Wales, company number 14785033, registered office 26 Quinton Close, Redditch, England, B98 0EL. D Henderson Ltd is the data controller for the BeanThere app.

Email beans@beanthere.uk with any question about your data, or to use any of the rights below.

What we collect

WhatWhy
Your email addressIt is how you sign in, and where we send sign-up, password reset and email change codes.
Your first and last nameSo the app can greet you, and staff can check the right account at the counter.
Your birthday, if you add oneOptional. For birthday offers. Leave it blank and nothing changes.
Beans and free drinksYour balance, and when beans were collected or a drink redeemed. This is the loyalty scheme itself.
Crash reportsIf the app breaks, we get the error, the screen it happened on, and your phone's model and version. Not your name, email or anything you typed.

We do not collect payment details: the app never takes payment. We do not track your location, read your contacts or photos, and there is no advertising or analytics in the app. The camera is used only to scan QR codes at the counter; nothing is recorded or kept.

Why we are allowed to hold it

Running the loyalty scheme you signed up for is a contract with you. Keeping the app working and secure, which is what crash reports are for, is our legitimate interest. A birthday is consent, which you can withdraw by clearing it in the app.

Who else sees it

Only the businesses that run parts of the app for us. None of them may use your data for anything else, and we never sell it.

WhoWhat they doWhere
Amazon Web ServicesRuns the app's servers and holds your sign-in accountLondon, UK
NeonThe database holding your name, email and beansEurope
PostmarkSends your sign-up and password reset emailsUnited States
SentryReceives crash reportsUnited States

Where a supplier is outside the UK, the transfer is covered by the standard contractual clauses and UK addendum in their terms.

How long we keep it

Your account and beans stay until you delete them. Crash reports are kept for 90 days. Records of emails we sent you are kept by Postmark for around 45 days. Database backups roll off within about a week, so a deleted account can persist in a backup for a few days before it disappears for good.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can also object to how we use it, ask us to restrict use, or ask for it in a portable form. The quickest routes:

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The app is not intended for children under 16. If a child has signed up, email us and we will delete the account.

This website

This site sets no cookies and has no analytics or tracking of any kind.

Changes

If this policy changes we will update this page and the date at the top. Anything significant will be told to you in the app.