Privacy notice
Last updated: 14 August 2026
Moonies operates the Moonies Passport loyalty programme and is the controller responsible for the personal information used by it.
Contact us:
Moonies
Unit 14 Alfreds Way
Batley, WF17 5DR
United Kingdom
Instagram: @mooniesbubbletea
What we collect
- Your first name and either your email address or mobile number.
- Your stamp balance, available and redeemed rewards, membership code and loyalty activity.
- Your optional choice about receiving Moonies offers.
- Essential technical and security information needed to operate the Passport and keep staff access secure.
- Wallet registration information when you choose to add your Passport to Apple Wallet or Google Wallet.
Why we use it and our lawful bases
- Providing the Passport: we use your details to create and recover your Passport, record stamps, and issue and redeem rewards. We do this to provide the loyalty programme you ask to join.
- Security and administration: we use necessary technical records to prevent misuse, resolve problems and operate the programme. Our legitimate interests are protecting Moonies, our customers and the integrity of the loyalty programme.
- Marketing: we use your email address or mobile number for Moonies offers only when you actively opt in. This is based on your consent.
Your first name and one recovery contact method are required to create a Passport. Marketing is optional and does not affect your rewards.
Who can see or receive it
Authorised Moonies team members can find your Passport when helping you at the till. Your email address and mobile number are not placed inside your customer QR code.
Our website and database hosting provider processes information for us so the service can run. If you choose to save the Passport to a phone wallet, Apple or Google will also process the pass information under their own privacy terms. We may disclose information where the law requires it or where it is necessary to establish, exercise or defend legal claims. We do not sell your personal information.
Some service providers may process information outside the United Kingdom. Where this happens, we use providers and safeguards intended to provide the protection required by UK data-protection law.
How long we keep it
We keep your Passport while you use the programme. After it becomes inactive, we keep it only for as long as needed to restore your Passport, answer questions, prevent fraud, resolve disputes and meet legal obligations. We then delete or anonymise it. We may keep a record of marketing consent or withdrawal for as long as needed to respect and demonstrate your choice.
Your choices and UK data rights
You may ask for a copy of your information, correction, deletion, restriction, portability or object to its use where UK data-protection law provides those rights. You can withdraw marketing consent at any time by contacting @mooniesbubbletea or telling a Moonies team member. Withdrawing consent does not affect stamps or rewards.
To make a privacy request, contact us using the postal address or Instagram account above, or speak to a Moonies team member in store. You may also complain to the UK Information Commissioner’s Office through ico.org.uk.
Cookies and phone storage
Moonies Passport uses only the necessary or user-requested storage needed to make the service work. It does not use advertising, analytics or social-media tracking cookies.
moonies_staff: a first-party session cookie that helps protect Passport forms from misuse and keeps shop staff securely signed in on their device. It remains for up to 30 days or until staff sign out.moonies-live-passport-token: browser storage that remembers the random link needed to reopen a customer Passport on that device. It remains until the customer chooses “This isn’t my passport” or clears browser data.moonies-google-wallet-[customer ID]: browser storage set only after a customer chooses to add a pass to Google Wallet, so the Passport can show the appropriate wallet action. It remains until browser data is cleared.moonies-passport-v6: an app cache for Passport files, helping the Passport load reliably. It contains no Passport or API responses and is replaced when the app updates.
We do not use this storage to follow people across websites or show advertising. If we introduce optional analytics or marketing technology in future, we will update our notice and ask for a clear choice before it is used.
Automated decisions
The Passport automatically counts valid stamps and makes a free-drink reward available after eight stamps. Moonies does not use your information to make solely automated decisions that have legal or similarly significant effects on you.
If you are using a shared phone, tap “This isn’t my passport” when finished. Tell a Moonies team member if you lose your Passport link and they can recover it using the contact detail you supplied.
Moonies Bubble Tea · Privacy & Cookies · How Moonies Passport works · Passport terms