Privacy Policy

1. Information We Collect

We may collect personal data when users interact with our websites, applications, POS systems, CRM / membership systems, QR ordering platforms, WhatsApp communication tools, or other digital services.

The information may include:

• Name
• Mobile number
• Email address
• Membership ID or customer account number
• Birthday or month of birth, where provided
• Transaction and purchase history
• Loyalty points and membership tier
• Outlet or branch registration information
• Communication preferences
• Marketing consent and opt-out status
• Technical information such as IP address, browser type, device information, and usage logs

2. How We Use Personal Data

We may use personal data for the following purposes:

• To provide POS, CRM, QR ordering, membership, payment, and related digital services
• To manage customer accounts, memberships, rewards, vouchers, and loyalty points
• To send service-related notifications and transactional messages
• To send promotional or marketing messages where consent has been obtained
• To support WhatsApp, SMS, email, or other customer engagement communications
• To process support requests and respond to enquiries
• To improve our products, services, security, and user experience
• To comply with legal, regulatory, audit, and business obligations

3. WhatsApp and Marketing Communications

Where merchants use Yumstone services to communicate with customers through WhatsApp or other channels, messages should only be sent where proper consent has been obtained.

Customers may opt out of marketing communications by following the unsubscribe instructions in the message, replying with opt-out keywords such as “STOP”, or contacting the merchant or Yumstone where applicable.

4. Disclosure of Personal Data

We may disclose personal data only where necessary and appropriate, including to:

• Merchants or businesses using Yumstone services
• Service providers, hosting providers, cloud infrastructure providers, payment service providers, messaging platforms, and technical partners
• Professional advisers, auditors, or legal representatives
• Government authorities, regulators, or law enforcement agencies where required by law

We do not sell personal data to third parties.

5. Data Security

We take reasonable administrative, technical, and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction.

However, no method of electronic transmission or storage is completely secure, and users should also take appropriate precautions when using online services.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to provide our services, to comply with legal obligations, or to resolve disputes.

7. Access, Correction, and Withdrawal of Consent

Individuals may request access to or correction of their personal data, or withdraw consent for certain uses of their personal data, by contacting us.

Withdrawal of consent may affect our ability or the merchant’s ability to provide certain services.

8. Cookies and Website Analytics

Our website may use cookies or similar technologies to improve website functionality, understand usage, and improve user experience. Users may adjust browser settings to reject cookies, but some website functions may not work properly.

9. Third-Party Services

Our services may integrate with third-party platforms such as WhatsApp Business Platform, payment providers, cloud hosting providers, or other technology partners. These third-party services may have their own privacy policies and terms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the latest updated date.

11. Contact Us

For questions about this Privacy Policy or personal data matters, please contact: