Privacy Policy

Last updated: January 2025

1. Introduction

DrinkCountr ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our drink tracking application ("the Service").

By using DrinkCountr, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using the Service:

  • Account Information: Email address, username, and password when you register
  • Bar Data: Names of bars/events you create, drink names, and prices
  • Guest Data: Names of guests you add to track drinks (first names only recommended)
  • Session Data: Drink consumption logs, timestamps, and calculated totals
  • Payment Information: Processed by Stripe; we do not store card details

2.2 Information Collected Automatically

When you access the Service, we automatically collect:

  • Device Information: Browser type, operating system, device type
  • Usage Data: Pages visited, features used, time spent on the Service
  • Log Data: IP address, access times, referring URLs

2.3 Cookies and Similar Technologies

We use essential cookies to operate the Service (session management, authentication). We may use analytics cookies to understand how the Service is used. See our cookie settings for more control over non-essential cookies.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage subscriptions
  • Send service-related communications (account verification, billing)
  • Respond to your enquiries and support requests
  • Detect, prevent, and address technical issues or fraud
  • Analyse usage patterns to improve user experience
  • Comply with legal obligations

We do not sell your personal information to third parties.

4. Legal Basis for Processing (GDPR)

If you are in the UK or European Economic Area, we process your data based on:

  • Contract: Processing necessary to provide the Service you requested
  • Legitimate Interests: Improving our Service, preventing fraud, security
  • Consent: Where you have given specific consent (e.g., marketing emails)
  • Legal Obligation: Where required by law

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

  • Stripe: Payment processing (see Stripe Privacy Policy)
  • Resend: Email delivery for transactional emails
  • Railway: Cloud hosting infrastructure

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

6. Data Retention

We retain your information for as long as:

  • Your account remains active
  • Needed to provide the Service to you
  • Required by law or for legitimate business purposes

Session data (drink logs) is retained according to your subscription tier. Free accounts retain the last 3 sessions; Premium accounts retain full history.

When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR/UK GDPR)

If you are in the UK or EEA, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@drinkcountr.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO).

8. Data Security

We implement appropriate security measures to protect your data:

  • HTTPS encryption for all data in transit
  • Encrypted password storage using industry-standard hashing
  • Regular security updates and monitoring
  • Limited access to personal data on a need-to-know basis

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data.

9. International Data Transfers

Your data may be processed on servers located outside your country of residence. Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: privacy@drinkcountr.com
General enquiries: hello@drinkcountr.com

Terms of Service | Back to Home