SOOPSOK BBQ Privacy Policy

숲속 BBQ 개인정보처리방침

1. Scope

SOOPSOK BBQ processes personal data for membership registration, member identification, loyalty accounting, customer support, account security and optional marketing.

2. Personal Data We Process

Name
Mobile phone number
Email address
Birthday
Membership status and internal Member ID
Membership QR identifier
Marketing-consent choices
Points, Stamps, reward activity, expiry and adjustment records
Relevant purchase/payment references used to calculate or verify loyalty credit
Account-security and phone-change audit records

3. Why We Use the Data

Register and identify Members
Issue/display Member QR
Calculate, convert, expire, reverse and audit Points/Stamps
Provide Rewards and tiers
Prevent duplicate/fraudulent loyalty claims
Support account correction and phone changes
Handle customer-service/dispute requests
Send marketing only where optional consent was provided

4. Phone Number Changes and Identity Verification

A mobile number is an important membership identity key. Stronger verification is required before changing it.

4.1 Existing Phone Available

Both the existing phone number and new phone number must be verified.

4.2 Existing Phone Unavailable

The registered email must be verified, the birthday must match, at least one additional proof such as the existing Member QR or recent purchase information must be verified, and the new phone number must be verified.

4.3 Phone and Email Both Unavailable

Authorized staff may perform in-person identity verification using the Member’s name, birthday and an official identity document, together with verification of the new phone number.

Data minimization: SOOPSOK BBQ does not intend to retain a copy of an identity document or its full identification number solely for routine phone-change verification unless a separate legal or disclosed operational requirement applies.

4.4 Audit Data

SOOPSOK BBQ may retain an audit record of old/new phone identifiers, verification method/status, responsible administrator, date/time and reason for the correction.

5. Account Merge

If a new phone number is already associated with another account, accounts are not automatically combined. A separate Account Merge review and ownership verification are required.

6. Marketing Communications

SMS/WhatsApp/email marketing consent is optional and may be withdrawn without cancelling membership.

7. Retention

Membership and loyalty data is retained for as long as reasonably necessary to operate the service, maintain loyalty/security records, resolve disputes, and satisfy applicable legal, tax, accounting or regulatory obligations. Data no longer required will be deleted, anonymized or otherwise disposed of using appropriate controls.

8. Disclosure and Service Providers

Personal data is not sold as part of the membership program. It may be processed by service providers where necessary for hosting, communications, payment/order integration, security or supporting services, subject to appropriate controls and applicable law.

9. Security

SOOPSOK BBQ uses access controls, role separation, audit records, duplicate-protection controls and other reasonable measures designed to protect membership data.

10. Your Choices and Rights

Subject to applicable Malaysian law, Members may request access to or correction of personal data and withdraw optional marketing consent. Changes to a high-risk identity field such as a mobile number may require identity verification before correction is completed.

11. Policy Changes

This policy may be updated to reflect system, legal or operational changes. Material changes will be communicated where appropriate.

12. Effective Date

Effective: 15 August 2026. Policy version: 2026-08-15-v1.