Privacy Notice — Bar Bunny

Applies to the Bar Bunny loyalty app, operated by Focalius.

This is a courtesy translation. The Spanish version is the original and the only binding one; if the two differ, the Spanish text prevails.

1. Data Controller

Last updated: August 2026. Bar Bunny S.A. de C.V. is the entity responsible for processing the personal data obtained through the Cuponera Bar Bunny loyalty application, available on the web, Google Play and the App Store.

2. Data We Collect

Contact and identification data: name, phone number, email address and date of birth. Profile data (optional): gender, area, occupation, favorite drink/music/day and preferred time. Loyalty card data: Bunny Card ID and linked NFC card. Program activity: visit history, points, stamps and rewards redeemed. We do not request or store official IDs, payment details or real-time location.

3. Purpose of Data Use

Your data is used solely to create and manage your account, assign you benefits, manage your stamp card, prevent duplication or fraud, verify your mobile number and personalize your experience on each visit to Bar Bunny.

4. Who We Share Your Data With

We do not sell or share your personal data with advertisers or with third parties for commercial purposes, and we do not carry out advertising tracking across apps or websites. Your data is processed only by our own team and by the cloud infrastructure providers that run the service (hosting and database) under confidentiality obligations. Links to WhatsApp, Instagram and Facebook take you to third-party services governed by their own privacy policies.

5. Where Your Data Is Stored

Your information is held on cloud servers with encryption in transit (HTTPS/TLS). Your session and, in Demo Mode, your loyalty profile, are also stored locally in your browser or device storage (localStorage) to keep you signed in between visits.

6. Use by Minors

The Bar Bunny loyalty program is intended solely for people aged 18 and over. We do not knowingly collect personal data from minors; if we identify a minor’s account, it will be deleted.

7. Retention Period

We keep your data for as long as your account remains active. Points expire after 12 months of inactivity counted from your last visit. If you delete your account, your personal data is permanently erased from our systems, unless the law requires us to keep certain information for a further period.

8. Your Rights and Deleting Your Account

You may request access, rectification, cancellation or objection (ARCO rights) regarding the processing of your data by writing to privacidad@barbunny.com or in person at the Bar Bunny till. You can also delete your account and all your data at any time, without contacting us, from Settings → Delete my Account inside the app; this action is immediate and irreversible.

9. Security of Your Information

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encrypted communication (HTTPS) between the app and our servers.

10. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in the service or in applicable regulations. The "Last updated" date at the top of this document indicates the version in force.

11. Contact

For questions about this Privacy Notice or the processing of your data, write to us at privacidad@barbunny.com.