The short version

CuppaPug is a membership for people who love our pugs. We keep the personal data we hold about you small, we never see your card details, we do not sell your data, and marketing is off unless you switch it on. You can ask for a copy of your data or ask us to delete your account from your profile page at any time, and a real human will handle it.

Who we are

CuppaPug runs pug cafes in the United Kingdom and the United States, and this membership app for our members in both countries. If anything in this policy is unclear, or you want to exercise any of your rights, email hello@cuppapug.com and a human will help.

CuppaPug is the controller responsible for the personal data described here:

• Legal entity: [OWNER: legal entity name]
• Company number:[OWNER: company number or “not applicable”]
• Registered office: [OWNER: registered office address]
• ICO registration: [OWNER: ICO registration number or confirmed exemption]

What we collect

• Your account and membership. Your name, email address, region (UK or USA), home cafe, membership tier, and membership status. Sign-in itself is handled by Clerk, our login provider — we never see or store your password.
• Billing status, not billing details.Payments happen with Square. We receive confirmations like “payment succeeded” or “membership cancelled” and reference IDs, so the app knows what you have access to. We never receive or store card numbers.
• What you share in the app. Community posts, comments, reactions, reports, photos you upload, cafe visits you log, and questions you send for livestreams.
• Notification choices and devices. Your notification preferences, and — only if you opt in — the browser push subscription that lets us reach your device.
• Support and safety traces.Short, privacy-safe records of key actions (for example “a data request was submitted”) so we can support you and keep the app safe. These traces never contain your message text, card details, or passwords, and they expire automatically.

How we use it

We use your data to run your membership: signing you in, showing the right content for your region and tier, delivering the notifications you asked for, keeping the community kind and safe, sorting out billing hiccups, and answering your support requests. If you have opted in to marketing, we may also send occasional cafe news and offers — and you can switch that off again any time in notification preferences.

We do not sell your personal data, and we do not share it for advertising.

Who helps us run CuppaPug

A small set of trusted providers process data on our behalf, each doing one job:

• Clerk — sign-in and account security.
• Square — membership payments and billing.
• Wix — our public website, where new memberships are set up.
• Cloudflare — storing and delivering the photos and videos in the app.
• Railway — hosting the app and its database.
• Resend — sending transactional membership emails such as activation links and access notices.

Some of these providers are based in the USA, so your data may be processed there or elsewhere outside the UK. The transfer safeguard for this processing is [OWNER: counsel-confirmed UK/US transfer mechanism]. Our internal processor register tracks each provider’s DPA and transfer review before external testing.

Photos and videos at the cafe

Our cafes are photogenic places, and our staff regularly take photos and videos of the pugs and cafe life for the app and our social channels. Visitors may incidentally appear in the background of those moments. If a photo features you (or anyone in your care) recognisably and prominently, we will ask before using it. You can always tell a member of staff at the cafe that you would rather not appear, and you can ask us to take down any photo of you at any time by emailing hello@cuppapug.com.

Photos you share in the app yourself (community posts and “Shared by You” moments) are covered by the membership terms.

Age

CuppaPug membership is for people aged 16 and over. We do not knowingly collect personal data from anyone under 16 through the app. Younger pug fans are always welcome at the cafe with a grown-up.

Your rights, in the UK and the USA

If you are in the UK, you have rights under UK data protection law (UK GDPR), including access, correction, deletion, portability, and objection, and the right to complain to the ICO. If you are in the USA, you may have similar rights under your state’s privacy law, such as the California Consumer Privacy Act. We give every member the same self-serve route regardless of where you live:

• Use the privacy requests form on your profile page to ask for a copy of your data or ask us to delete your account.
• Or email hello@cuppapug.com.

Requests are handled personally by our team, not by an automated system. We aim to answer within a few days and will always respond within one month. Deletion is never instant: we confirm it with you first, cancel billing with Square, and may keep a minimal record where the law requires it (for example billing history or safety reports).

How long we keep things

We keep your data while your membership is active. After a membership ends, billing and audit records are kept for as long as tax, fraud, and safety rules require; support traces expire automatically within about a year; and inactive notification device records are cleaned up within a few months. Community content you posted stays unless you remove it or ask us to.

Cookies

The app uses only essential cookies — the ones that keep you signed in. There are no advertising or cross-site tracking cookies.

Changes to this policy

If we change this policy in a way that matters, we will let you know in the app before the change takes effect. The date at the top shows when it last changed.