Privacy Policy

1. Who we are

Voucheers (“Voucheers”, “we”, “us”) provides a rewards platform that restaurants use to run voucher campaigns. This policy explains how we collect, use, and protect personal data across our website (voucheers.biz), the diner rewards experience, and the merchant dashboard. If you have any questions, contact us at contact@voucheers.biz.

2. Who this covers

• Dinerswho scan a restaurant's QR code and take part in a rewards campaign.
• Restaurant operators and staff who use the merchant dashboard.
• Website visitors, including anyone who uses our support chat or contacts us.

3. What we collect

From diners: your mobile number, email address, and your consent record. When you play, we also automatically record limited technical information — your IP address, an approximate location (city/area only, derived from your IP), your device/browser type, and the date and time — which we use to keep campaigns fair and prevent abuse. We never ask for or track your precise GPS location.

On your device:if you choose “Remember my details”, your phone and email are stored in your own browser's local storage on your device so they can be pre-filled next time. You can clear this at any time.

From restaurant operators/staff: your name, business name, contact email and phone, login credentials, and the settings you configure (outlets, campaigns, branding).

From website visitors: basic technical data needed to serve the site, and — if you use our support chat or email us — the content of your messages so we can respond.

4. How we use your data

• To issue, deliver, and validate your voucher.
• To recognise you on a return visit and re-use your voucher wallet.
• To keep campaigns fair and detect fraud or abuse (e.g. checking that activity is consistent with genuine restaurant visits).
• To provide the participating restaurant with aggregated campaign analytics and their own customer list (see section 6).
• To operate, secure, support, and improve the service.
• To respond to your enquiries.

Reviews are optional. Leaving a Google review or following a social account is entirely voluntary, is never required to receive a reward, and your reward never depends on whether — or what — you review.

5. Consent

We collect and process diners' personal data on the basis of the consent you give on the entry form before playing. You may withdraw your consent at any time (see section 9); note that we may be unable to issue or honour a voucher without the necessary details.

6. Sharing and disclosure

With the participating restaurant. The restaurant whose campaign you take part in receives your details (such as phone and email) and may contact you about your voucher and their offers. That restaurant is independently responsible for its own use of your data.

With service providerswho process data on our behalf under contract, only as needed to run the service — currently our cloud hosting (Vercel), database and authentication (Supabase), email delivery (Resend), approximate IP-location lookup (ipinfo), and, for our support chat, our AI/chat provider. Where you follow a Google review or social link, that third party's own policy applies.

Legal. We may disclose data where required by law or to protect our rights, users, or the public.

We do not sell your personal data.

7. International transfer

Some of our service providers may store or process data on servers located outside Malaysia. Where this happens, we take reasonable steps to ensure your data remains protected to a standard consistent with the PDPA.

8. Cookies and local storage

We use essential cookies to keep operators and staff securely logged in, and (only if you opt in) your device's local storage to remember your diner details. We do not use third-party advertising or cross-site tracking cookies.

9. Your rights

Under the PDPA you may request access to, or correction of, your personal data; withdraw your consent; or limit how we process it. To exercise any of these, email contact@voucheers.biz (for diner data you may also contact the restaurant directly). We will respond within a reasonable time as required by law.

10. Retention

We keep personal data for as long as needed to provide the service and for a reasonable period afterwards (for example, while a voucher is valid and for the duration of the restaurant's campaign), then delete or anonymise it, unless a longer period is required by law.

11. Security

We use industry-standard measures — encryption in transit, access controls, and strict data-isolation between businesses — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

12. Children

Our service is intended for use by adults (for example, restaurant patrons and staff). We do not knowingly collect data from children without appropriate consent.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows the latest version, and continued use of the service means you accept the updated policy.

14. Contact

For any privacy question or request, contact us at contact@voucheers.biz.