Privacy policy

Effective date: 8 September 2026. This policy explains how Le Flamant Rose uses information for its app and restaurant loyalty programme.

Information we use

We use your name, email, optional phone number, optional birth date, and marketing choice; membership, points, reward, and offer activity; receipt references, purchase amounts and categories; delivery order contact details, Creek Harbour address, delivery notes, payment method and status; push device tokens; feedback; and an opaque QR code used to identify your loyalty account.

We also use notification choices. feedback; device tokens; and an opaque QR code are retained only as needed.

Camera and authentication

The camera is used only to scan the QR code locally. No photo, video, or audio is captured, stored, or transmitted. We use Clerk for authentication and Replit-hosted app and database infrastructure. Service providers process personal data only to operate the service and with appropriate protections.

Purposes and sharing

We use this information to authenticate you, run the membership and loyalty programme, award and redeem points and offers, process and update delivery orders, send opted-in order updates or offers/news, provide support, prevent misuse, and improve the service. We do not sell personal data.

Legacy guest records are used only to recognise returning guests when they enrol; they do not prefill names or award points, and are deleted with the matched account.

Your choices, rights, and retention

You may request access to your account data or deletion through the app or by emailing us. Directly identifying app, loyalty, order, push-token and notification-consent data is deleted when in-app deletion succeeds, or within 30 days of a verified email request. Support correspondence may be kept for up to 12 months after resolution. Anonymized security and accounting records may be kept for up to 5 years. A non-reversible deletion-prevention digest is retained indefinitely solely to prevent account recreation and cannot identify you on its own.

Security and contact

We use reasonable technical and organisational measures to protect data, but no service can guarantee absolute security. For privacy, access, or deletion questions, contact admin@leflamantrose.ae.