Last updated [ DATE — set on the day you publish ] · Version 1.0
The short version
A plain summary of what follows. The full statement is what applies.
We collect your name, phone number, and what you buy from us — because that's what a loyalty programme needs to work.
We don't sell your information, and we don't hand it to other businesses for their marketing.
Your information is stored on servers outside Laos, because that's where our technology providers operate. Lao law requires your consent for this, and you give it when you join.
Your PIN cannot be read by anyone — not our staff, not us. It's stored in a scrambled form that can be checked but never reversed.
You can see, correct or delete everything we hold, from inside the app.
We collect nothing about your race, religion, politics, health or private life. Lao law prohibits it, and we have no use for it.
Section 1Who we are
Mondé Matcha is a matcha café and pâtisserie in Vientiane. This statement explains what we do with your information when you join Mondé Rewards.
Legal entity
[ REGISTERED COMPANY NAME ]
Enterprise registration no.
[ REGISTRATION NUMBER ]
Café
Nam Phou, [ CONFIRM STREET ], Ban Xiangneun, Chanthabouli District, Vientiane, Lao PDR
We are the data administrator for the information described here, under the Law on Electronic Data Protection No. 25/NA of the Lao People's Democratic Republic.
Section 2What this covers
The Mondé app at app.monde.cafe and your Mondé Rewards membership.
Information we record when you buy something from us as a member.
It sits alongside our Terms & Conditions, which set out how the programme itself works. Where the two describe the same thing, this statement is the fuller account.
Section 3What we collect
Information you give us
Your mobile number. Required — it's how we identify you, and how you sign in.
Your name. So our team can greet you properly and find you if your phone is flat.
Your email address — optional. Used for receipts, notices, and to authorise a change of phone number.
Your birthday — optional. Used only to send you something on your birthday.
Your PIN, which is immediately converted into a scrambled form. See section 11.
Information created when you use your membership
What you bought, when, at which till, and the amount paid.
Points earned and spent — a permanent, add-only record. Corrections are recorded as new entries rather than by rewriting history.
Rewards you've claimed and whether they've been collected.
Your member number and your tier.
Information collected automatically
Your IP address, briefly, so we can limit how many sign-in codes can be requested from one connection. This protects you from someone hammering your account, and protects us from SMS costs.
Delivery records for the SMS codes we send — the number, the time, and whether it arrived.
Basic technical information your browser sends to any website it visits.
Information our team records
Where a member of our team credits points manually, adjusts a balance or helps with your account, we record who did it, when, and why. That record protects you as much as us.
Section 4What we deliberately don't collect
This section is as important as the last one.
No payment information. Mondé Rewards takes no payments and holds no money. There is no balance to top up and nothing to charge — you pay at the counter exactly as you would without an account.
No location tracking. We don't know where you are. The app never asks for your location.
No prohibited data. Lao law forbids collecting information about race, religion, political opinion, sexual behaviour or criminal record. We collect none of it, we have no field for any of it, and we never will.
No health information, and no identity-document numbers.
No advertising trackers. We don't run advertising pixels or share your activity with ad networks.
No photographs or biometrics of any kind.
Section 5How we collect it
From you, when you join and when you update your details in the app.
From your purchases, when you show your membership QR code at the counter or our team looks you up.
From the app itself, as you use it — the technical information in section 3.
We don't buy contact lists, and we don't collect information about you from other businesses or from social media.
Section 6Why we use it
To run your membership — awarding points, tracking your tier, issuing and honouring rewards.
To confirm it's you — sending sign-in codes, checking your PIN, and protecting your account.
To prevent fraud and misuse — spotting duplicate accounts, points claimed improperly, and abuse of our SMS.
To talk to you about your account — sign-in codes, voucher confirmations, security notices, and changes to the programme.
To understand our customers as a group — which drinks are popular, how busy we are, whether the programme is working. This kind of analysis is done on combined figures, not on you individually.
To meet our legal and accounting obligations.
We don't use your information to make automated decisions that affect you, beyond the ordinary arithmetic of points and tiers.
Section 7Your consent
You give your consent when you create an account and tick to accept these terms. That consent covers:
collecting and using the information described in section 3, for the purposes in section 6;
sharing it with the providers in section 8; and
storing and processing it outside Laos, as section 9 explains.
You can withdraw your consent at any time by deleting your account in the app. Because your membership cannot operate without the information above, withdrawing consent and closing the account are the same act.
Section 8Who else sees it
Our team
Only to the extent they need it to serve you. Our team can see your name, member number, balance and recent activity when helping you at the counter. They cannot see your PIN, and everything they do to your account is recorded.
The providers who run our systems
Our database and application host, which stores your account and your points.
Our website host, which serves the app and this page.
Our SMS provider, which delivers your sign-in codes. It receives your phone number and the code, and nothing else.
Our email provider, if you've given us an email address.
These providers act on our instructions, are bound to keep your information confidential, and may not use it for their own purposes.
Anyone else
Government authorities or courts, where we're legally required to disclose.
Professional advisers, under a duty of confidence, where genuinely necessary.
If our business is ever sold or transferred, whoever takes it on — bound by this statement until they give you notice of their own.
We do not sell your information, and we do not share it with other businesses for their own marketing. Not now, and not as a change we'd slip into a later version.
Section 9Where it's stored
Your information is stored on servers outside Laos. We want to be direct about this, because Lao law requires your consent for it.
The providers in section 8 operate data centres in other countries. Our database, our app and our messaging all run on them.
This is how the app can exist at all — there is no equivalent service operating wholly inside Laos that we could use instead.
We choose providers that encrypt information in transit and at rest, and that are contractually bound to protect it.
Once your information is in another country, it is also subject to the laws of that country, and authorities there may be able to require access to it in circumstances we cannot control.
By creating an account, you consent to your information being transferred to and stored outside the Lao PDR for the purposes described in this statement. If you'd rather that didn't happen, please don't join — you're still very welcome in the café, and no account is needed to buy anything.
Section 10How long we keep it
Your account and history — for as long as your membership is open.
After you delete your account — 15 days, so you can change your mind. Then it is erased permanently and cannot be recovered by anyone, including us.
Sign-in codes — minutes. They expire quickly and the records are cleared routinely.
SMS delivery records and connection limits — cleared on a rolling basis; we keep only what a recent fraud check needs.
Records of staff actions on accounts — kept long enough to investigate a dispute, then cleared.
Accounting records — where tax or company law requires us to keep transaction records, we keep them for the period required, in the smallest form that serves the purpose.
Section 11How we protect it
Rather than claim "industry-standard measures", here is specifically what we do.
Everything travels encrypted. The app and this website are served only over HTTPS.
Your PIN is stored scrambled, not stored. It's put through a one-way function, so it can be checked but never read back. Our staff cannot look it up, we cannot look it up, and it would not be readable even by someone who obtained our database.
The database enforces separation itself. It is configured to refuse to return one member's records to another, rather than relying on the app to ask politely.
Points can only be changed by our server. The app displays your balance; it has no power to alter it. Nothing you or anyone else does on a phone can create or move points.
Sign-in codes and PIN attempts are rate-limited, with lockouts that lengthen after repeated failures.
Staff access is logged. Every manual credit or adjustment records who, when and why.
Access is removable instantly. When someone leaves our team, their access stops immediately.
We review our security formally, at least once a year, as Lao law requires — examining how the system could be attacked and fixing what we find.
No system is perfectly secure, and we won't pretend otherwise. What we can promise is that we take it seriously, we test it rather than assume it, and we'd rather a feature be inconvenient than unsafe.
Section 12Your rights
Under the Law on Electronic Data Protection, you have the right to:
See what we hold about you. Most of it is visible in the app already — your details, your points, every transaction. For anything else, write to us.
Correct anything wrong. Your name, email and birthday are editable in the app; your phone number can be changed in the app with an emailed code and your PIN. For a points correction, show us the receipt.
Stop us transferring your information. Because transfer outside Laos is necessary for the app to work, exercising this right means closing your account.
Delete your information. You can do this yourself in the app at any time. See section 10 for what happens next.
We won't charge you for any of this, and we'll respond within 15 working days. If we can't do what you've asked, we'll tell you why in writing.
Section 13Children and young people
Mondé Rewards is for people aged 18 and over. Someone younger may join only with a parent or guardian's permission, given on their behalf.
We don't knowingly collect information from a child without that permission. If you believe we have, tell us at privacy@monde.cafe and we'll delete it.
A parent or guardian may ask to see, correct or delete their child's information at any time.
Section 14Messages and marketing
Service messages
Sign-in codes, voucher confirmations, security alerts and notices about changes to the programme. These are part of having an account and can't be switched off while it's open — a sign-in code you couldn't receive would lock you out of your own membership.
Marketing messages
News about new drinks, events and offers. Entirely optional.
Turn them off in the app, or reply to any message asking us to stop.
Opting out never affects your points, your tier or your rewards.
Section 15Cookies and similar technology
The app stores a sign-in token on your own device so you don't have to enter a code every time you open it. It stays on your phone, and clearing your browser data or logging out removes it.
We use no advertising or tracking cookies, and no third-party analytics that follow you elsewhere.
Our website loads a typeface from a third-party font service. Doing so tells that service your IP address, as loading any file from any website does. It is not used to identify you by us.
Section 16If there is ever a breach
If someone gains unauthorised access to information we hold, we will:
Contain it — shut off the access and secure the system.
Report it to LaoCERT, the national computer emergency response team, as Lao law directs.
Tell you, if your information was affected and there's a real risk to you — what happened, what it means, and what to do. Lao law doesn't strictly require this. We're committing to it anyway, because you'd want to know.
Fix the cause, and say plainly what we changed.
If you notice something that looks like a security flaw, please tell us at privacy@monde.cafe before telling anyone else, and give us a fair chance to fix it. We'd far rather thank you than argue with you.
Section 17Complaints
Start with us. Email privacy@monde.cafe or speak to us in the café. We'll look into it and reply in writing within 15 working days.
If you're not satisfied with our answer, you may take the matter to the Ministry of Technology and Communications of the Lao PDR, which oversees electronic data protection.
You may also pursue your rights through the competent courts of Vientiane.
Section 18Changes, and how to reach us
The current version of this statement always lives at monde.cafe/privacy, with the date at the top.
If we make a change that materially affects how we use your information, we'll give you at least 30 days' notice by app notification, SMS or email — and where the change needs your consent, we'll ask for it rather than assume it.