Privacy policy

Last updated: 11 October 2026

This policy explains what personal information we collect when you join or use The UB1UB2 Card, how we use it, who we share it with, and your rights. Please read it alongside our Terms of Service.

1. Who we are

The UB1UB2 Card is operated by Southall Social Ltd, a company registered in England and Wales (company number 13100902), trading as UB1UB2 Card. We are the data controller for the personal information described in this policy.

Contact: hello@ub1ub2card.com. Address: 66 Paul Street, London, England, EC2A 4NA.

Southall Social Ltd is registered with the Information Commissioner's Office, registration number ZC167782.

2. The information we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details: your name and email address (and phone number if you give it to us).
  • Membership details: your membership status, join date, renewal and expiry dates, and the digital card we issue to you in Apple Wallet or Google Wallet.
  • Card and device details: to keep your Wallet card up to date, Apple or Google gives us a technical identifier for the card on your device. We use it only to send updates to your card.
  • Payment information: when you join or renew, your payment is handled by our payment provider. We receive confirmation of payment and limited details such as the result of the transaction. We do not store your full card number.
  • Usage and technical information: information about how you use our website and app, such as your device, browser, IP address and pages viewed. Analytics and advertising cookies are only used if you accept them.
  • Questions you ask "Ask the card": the words you type, so we can suggest offers and see what members are looking for. We don't attach your name to them.
  • Places you suggest: if you suggest a business to us, we keep what you tell us about it (its name, area, link and why you like it). If you give us your email so we can tell you when it joins, or your phone number or email because you own the business and would like to talk about joining, we keep those too. If you suggest a place from the app while signed in, we also see your membership email.
  • Location, if you choose to share it: our offers map can show offers near you if you allow it. This happens only with your permission and we do not store your location.
  • Communications: the content of messages you send us.

3. How we use your information and our lawful bases

Under UK data protection law, we must have a lawful basis to use your information. We use it to:

  • Provide your membership (issue and update your Card, take payment, manage renewals, give you support). Lawful basis: performance of our contract with you.
  • Send you membership emails such as your welcome email, sign-in codes, renewal reminders and service updates. Lawful basis: performance of our contract, and our legitimate interest in keeping you informed.
  • Send you marketing about UB1UB2 and partner offers, where you have agreed to receive it. Lawful basis: your consent. You can opt out at any time.
  • Consider the places you suggest and, where you have asked us to, contact you about them (to tell you a place has joined, or to talk to you about your business joining). Lawful basis: our legitimate interests, and steps you have asked us to take.
  • Keep our service secure, prevent fraud and misuse, and improve how the Card works. Lawful basis: our legitimate interests.
  • Measure how our website is used and how our advertising performs, where you have accepted those cookies. Lawful basis: your consent.
  • Meet our legal obligations, such as keeping financial records. Lawful basis: legal obligation.

4. Marketing

If you have opted in, we may email you about UB1UB2 news and partner offers. You can unsubscribe at any time using the link in any marketing email, or by emailing us. Opting out of marketing does not stop service emails about your membership.

5. Who we share your information with

We do not sell your personal information. We share it only with service providers who help us run the membership, and where the law requires. These include:

  • Shopify, which hosts our website, processes your order and manages subscription renewals (Shopify Subscriptions).
  • Shopify Payments, which processes your payment.
  • Toki, which manages renewals for some members who joined before October 2026, until those memberships move to Shopify.
  • Cloudflare, which hosts our membership system and member card page.
  • Apple and Google, which provide Apple Wallet and Google Wallet, where your Card is stored and updated.
  • Klaviyo, which we use to send emails.
  • Resend, which sends sign-in codes and Card emails.
  • Google, which provides our business email and website analytics (analytics only if you accept cookies).
  • Meta, which helps us measure our advertising (only if you accept cookies).
  • Anthropic, which processes the questions you ask "Ask the card" to suggest offers.
  • Expo and CARTO, which provide app updates and notifications, and map tiles for our offers map.

Each provider only uses your information to provide its service to us, under contract.

Partners: when you choose to show your Card to redeem an offer, the Partner's staff will see your name and expiry date on the Card. We do not give Partners your contact details or a list of members.

We may also share information if required by law, to protect our rights, or in connection with a sale or reorganisation of our business.

6. International transfers

Some of our providers are based outside the UK. Where your information is transferred outside the UK, we rely on appropriate safeguards such as the UK's International Data Transfer Agreement, Standard Contractual Clauses, or transfers to countries the UK considers to provide adequate protection.

7. How long we keep your information

We keep your information for as long as you are a member and for a reasonable period afterwards. We keep financial records for as long as the law requires (generally six years). We keep marketing preferences until you opt out. "Ask the card" questions and the places you suggest are kept for up to 90 days.

8. Your rights

Under UK data protection law you have the right to access the personal information we hold about you, ask us to correct information that is wrong, ask us to delete your information in certain circumstances, object to or restrict how we use it in certain circumstances, ask us to transfer it to another provider, and withdraw your consent at any time where we rely on consent.

To exercise any of these, email hello@ub1ub2card.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to help first.

9. Cookies

Our website uses cookies and similar technologies to make the site work and remember your preferences. With your consent, we also use analytics and advertising cookies (for example Google Analytics and Meta) to understand how the site is used. You can accept or decline these in the cookie banner, change your choice using the "Preferences" option, and control cookies through your browser settings.

10. Security

We take reasonable steps to protect your information. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date.

12. Contact

Questions about your privacy or this policy: hello@ub1ub2card.com.

Southall Social Ltd, trading as UB1UB2 Card. Company number 13100902. 66 Paul Street, London, England, EC2A 4NA.