Privacy Policy

Introduction

The Cold Spot ("we," "us," or "our") operates the website coldspot.bar and the Cool Points loyalty program (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, phone number, and email address (if provided) when you create an account.
• Profile Information: Any additional information you choose to add to your profile.
• Communications: Information you provide when contacting us for support or feedback.

Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns.
• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Location Data: General location based on IP address. We do not collect precise GPS location.
• Cool Points Activity: Points earned, redeemed, events attended, badges earned, and QR codes scanned.

How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Authenticate your identity via SMS verification codes
• Operate and maintain the Cool Points loyalty program
• Track and display your points, badges, ranks, and rewards
• Send you account-related notifications (verification codes, reward alerts, event reminders)
• Improve and personalize your experience
• Analyze usage patterns to enhance our Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

SMS Communications

By providing your phone number and opting in to our Service, you consent to receive SMS messages including:

• One-time verification codes for authentication
• Account and security notifications
• Reward and event notifications

You can opt out of SMS messages at any time by replying STOP. See our SMS Consent Policy for more details. Message and data rates may apply.

How We Share Your Information

We do not sell, rent, or trade your personal information.

We may share your information in the following circumstances:

• Service Providers: We use third-party services to operate our platform (e.g., Supabase for database, Twilio for SMS). These providers only access information necessary to perform their services.
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Safety: We may share information to protect the rights, safety, and property of The Cold Spot, our users, or the public.
• Business Transfers: If The Cold Spot is involved in a merger, acquisition, or sale of assets, your information may be transferred.
• With Your Consent: We may share information for other purposes with your explicit consent.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. We may also retain and use your information to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal requirements).
• Opt-Out: Opt out of SMS communications by replying STOP.
• Account Deletion: Delete your account through the app settings or by contacting us.

To exercise these rights, contact us at the information provided below.

Children's Privacy

Our Service is intended for users who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via SMS or email.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: