Privacy Policy

Places 360 · Last updated 13 November 2026

Places 360 is operated by Digit Places Limited, registered in England and Wales (company no. 13863363) ("we", "us"). We are the data controller for your Places 360 account. This policy explains what we collect when you use the Places 360 app and websites, and the apps and ordering pages we run for venues under their own name (such as the Bonata app), and how we handle it.

What we collect

• Account details — your email address (or your Apple or Google sign-in identity), an optional display name, and — if you choose to verify one — your phone number.
• Loyalty activity — which businesses you join, stamps you collect, offers you claim, and rewards you earn and redeem, with timestamps.
• Review asks — if a business asks you for a review after a reward, we record that we asked and which review site you opened (Google, Trustpilot or another), never what you wrote there, and we send those sites nothing about you. Kept for up to 24 months, and deleted with your account.
• Ratings and notes — if you rate a business (one to five stars) in the app or on its review page, and add a note, the business sees the rating, the note and the location, but never who you are; a note is also emailed to its owners and managers. We also record when we asked you to rate a visit or an order. Notes are deleted after 12 months, ratings and asks after 24, and those made in the app are deleted with your account. The review page needs no account and saves nothing on your device.
• Pages and links you open — We count how often pages and links in the app are opened, to show the venue totals; we never show them who. Each open is counted against a one-way code that is different for every venue (made from your account, or a random number for this install if you're signed out), so opens at two venues can't be linked. After 13 months only each day's totals are kept. If you open a notification from a venue, it sees that only in a total too.
• Orders — what you ordered, when and where, the contact name and phone number you give for an order, and any delivery address you save.
• Payments — handled by Stripe. We never see or store your card number. We keep the order amount, its payment status, and non-identifying card metadata (brand, funding type, country) for reconciliation.
• Location (optional) — used at the moment you search for nearby places or when a business verifies venue presence for a stamp. Used in the moment, with your permission; we never track you in the background.
• Push token — a device identifier so we can send notifications, if you allow them.
• Guest browsing — you can browse without an account. Places you save before signing up stay on your device. Web guest checkout creates a temporary anonymous account that you can later claim or leave behind.
• Business content — if you run a business on Places 360: your business and payout details, content you publish, and your customers' activity at your venue.

Your phone number

Two numbers exist and are never merged. A verified account phone number (used to secure your account, for phone sign-in on partner apps, or to unlock phone-verified offers) stays on the platform — it is never given to a business, with one exception: if you pay a venue later by invoice from an account that has no email address, that venue sees this number on those orders so it can invoice you. Separately, the contact number you type on an order goes to that venue, for that order, so they can reach you about it.

What businesses see

• Every business you interact with sees your activity at their venue: your display name, stamps, rewards, offers claimed, orders (with the contact details you gave on them), and a per-business reference code.
• If you say yes to a venue's marketing emails and that venue is on our branded-app tier, its owner (and any staff it lets do marketing) can see your account email, so it can send you news and offers. From then on the venue is responsible for how it uses your email, as a controller in its own right, and may only send you marketing while you're subscribed. Unsubscribe, or switch it off in Profile, and it stops seeing your email in Places 360 straight away and must stop sending you marketing. Otherwise no business sees your account email, except on orders you pay later by invoice (below), or when a venue you've joined leaves Places 360 (next).
• If a venue you've joined leaves Places 360 for another provider, we'll email you at least 30 days before. Unless you tell us not to, by the link in that email or through our contact form, we then give that venue your account email together with your stamps, rewards and any balance there, so you can keep them with its new provider. We do this because you'd otherwise lose what you've earned (our legitimate interest, and yours). The venue may use your email only to carry those over and tell you about the move, and may send you marketing only if you've said yes to it. Nothing about your activity at any other venue is passed on.
• If you choose "Pay later — invoice" at a venue, that venue sees your company name and your account email (or, if your account has no email, its phone number) with those orders, so it can invoice you. If the venue approves your company to pay later, it keeps your work email and company name on its list until it removes them.
• No business sees your activity at any other business, and reference codes are different at every venue so businesses cannot match you between them.
• Businesses may only contact you with marketing where you have consented, and only on the channel you consented to — an email opt-in is not a notifications opt-in. Venues on the branded-app tier can email their subscribers through Places 360; every such email carries an unsubscribe link, and one click ends it. You can also switch any venue's emails off in Profile at any time. If your mailbox provider tells us you reported a venue's email as spam, we treat that as an unsubscribe.
• No venue can send you marketing as notifications through the Places 360 app. A venue's own app may, but only if you switch them on in that app.

Apps we run for venues

Some venues offer their own app, under their own name, that runs on Places 360 — for example the Bonata app. You sign in to it with your Places 360 account, and this policy covers that account. What the venue receives, and its own marketing if you say yes to it, is covered by the venue's own privacy notice, linked in its app and on its ordering page.

When a venue moves its app to Places 360 from the Places App platform, we bring across the accounts and order history of the people who ordered from that venue, so they can carry on where they left off: your name, your email address, your password if you had one (stored only in scrambled form), and your past orders with that venue. Nothing else comes across — not your phone number, saved addresses, payment details or any marketing choice you made in the old app.

If you work at a venue that uses Places 360

If you're on a venue's team, or ask to join it, the venue's owners and managers see your name and your account email, so they can tell people apart, approve a request and manage who has access. They also see what you do in the venue's tools, such as the stamps you gave and the orders you handled.

Venues can use Places 360 to let their team clock in and out. If yours does: your shift times, how you clocked (tag, location check-in, kiosk or a manual entry) and — where the check-in method uses your location — your distance from the venue are recorded and visible to the venue's managers. A venue can choose to require a photo when clocking in or out on the shared kiosk or in the app; the app tells you before the photo is taken, the photo is only ever reviewed by the venue's managers, nothing is scanned or biometrically recognised, and photos are deleted automatically after the period the venue sets, between 1 and 65 days (31 days unless the venue changes it). Your kiosk PIN is stored only as a cryptographic hash.

Your venue can also plan shifts on a rota and record time off: holiday you ask for, and absence a manager records, including sickness absence (dates and hours only; no reason is asked for). Only you and your venue's managers see your time off. Your hours, holiday and absence records are kept for 6 years, as UK law requires employers to keep them, even after you leave the team. If you delete your account, your name stays only on those records.

What we don't do

• We don't sell your data. Ever.
• We don't track your location in the background.
• We don't use third-party advertising or cross-app tracking SDKs in our app.

Cookies on places360.io

The website sets no advertising or analytics cookies. If you arrive through a referral link (places360.io/r/…), it stores one first-party cookie, p360_ref, holding only the referrer's code, for up to 90 days, so the introduction and its welcome offer apply when you sign your business up. The code is shown in the sign-up form, where you can change or remove it, and the cookie is deleted when you send the form. Signing in on the website keeps your session in your browser's own storage for places360.io.

Marketing and consent

Platform marketing email is opt-in — asked once, unticked by default, changeable any time in Profile. We record when you accept the terms and when you give or withdraw marketing consent.

Each venue's marketing works the same way: opt-in, per venue and per channel. We record when and where you gave or withdrew it.

Who processes data for us

When a venue's owner or manager asks Dalve something, their message and the parts of that venue's own data needed to answer it go to Anthropic: for example its menu, order and sales totals, team names, and the display names and recent activity of customers at that venue. When a business imports a menu or asks for dish icons, the menu text or photos it gives go to Anthropic too. Anthropic processes this on our instructions under its commercial terms, which include its data processing addendum and, for transfers out of the UK, the standard contractual clauses with the UK addendum. Under those terms it may not use this data to train its models. It deletes it within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law.

If an owner or manager marks one of Dalve's replies as not right, we keep that reply, the few messages before it and any note they add for 90 days, so we can see what went wrong and put it right.

If you ask for a free website redesign on places360.io, we use your email address, your website's address, what you tell us, the sites you name and any photos you send only to make a new version of your website, to email it to you and to talk to you about it. We use AI tools to help build it. We keep the request for 180 days; your photos stay only with the person building your site. We don't add you to any mailing list.

Businesses may connect their own tools (for example a till system or receipt printer); order details flow to those under the business's instruction.

Data in transit and at rest

Encrypted in transit (TLS) and at rest. Access to production data is restricted and logged.

Your rights (UK GDPR)

You can access, correct, export, or delete your data at any time. Deleting your account (Profile → Delete account) removes your profile, loyalty progress, rewards and personal identity immediately; order and payment records that we must keep for tax and accounting law are retained without your identity attached. Ask through the contact form and we'll respond within 30 days. You can also complain to us: use the contact form and we'll acknowledge it within 30 days, look into it and tell you the outcome. You may also complain to the ICO (ico.org.uk).

Retention

We keep your data while your account is active. Financial records are retained for the periods UK tax law requires, then deleted. Businesses keep the aggregated history of their own venue's activity; deleting your account removes your identity from it. Work records (hours, holiday and absence) are kept for 6 years, as described above.

One thing stays after you delete your account: if you activated an offer while your account had a confirmed phone number, a one-way code made from that number (never the number itself) is kept for as long as that offer exists, so the same number can't claim it again from another account. It can't be turned back into your number.

Children

Places 360 is not directed at children and requires users to be at least 16.

Changes

We'll post any changes here and note the date above. Material changes will be flagged in the app.