Privacy Policy
Last updated: 27 July 2026
This Privacy Policy explains how BAYTONG SUPERMARKET ("Baytong", "we", "us") collects, uses, and protects your information when you use the Baytong Loyalty mobile and web application (the "App"). By creating an account or using the App you agree to this Policy.
1. Who we are
Data controller: BAYTONG SUPERMARKET
Address: St 307, Phnom Penh 120704
Contact: hello@baytong.com · 0968878766
2. Information we collect
We collect only the data needed to run the loyalty programme. We do not collect your location, contacts, photos, camera, or microphone, and we do not use third-party advertising or analytics tracking.
| Data | Why we collect it | Required? |
|---|---|---|
| Mobile phone number | Account creation, login, and one-time SMS verification (OTP) | Required |
| Name | To identify your loyalty account and personalise the App | Required |
| Password | To secure and authenticate your account | Required |
| Email address | Optional profile detail and receipts/communication | Optional |
| Loyalty activity (points, rewards, vouchers, scratch-game plays) | To operate the loyalty and rewards programme | Generated in-app |
| Support/issue reports you submit | To respond to your enquiries | Optional |
| Push notification token | To send you loyalty and account notifications (if you allow notifications) | Optional |
3. How we use your information
- Create and secure your loyalty account.
- Award, display, and redeem loyalty points, rewards, and vouchers.
- Verify your identity via SMS one-time codes.
- Send account and loyalty notifications you have opted into.
- Respond to support requests you send us.
- Facilitate in-store payment via QR code (see §5).
We do not sell your personal data, and we do not use it for third-party advertising.
4. Payments
In-app QR payments are processed by our payment provider, ABA Bank / ABA PayWay. Card and banking details are entered and handled by the provider — the App never sees, stores, or transmits your card numbers or bank credentials. We only receive a transaction reference and amount to confirm whether a payment succeeded.
5. How we share information
We share data only with service providers that help us run the App, under appropriate safeguards:
| Provider | Purpose |
|---|---|
| ABA Bank / ABA PayWay | Processing in-app QR payments |
| SMS gateway (Plasgate) | Delivering one-time verification codes |
| Expo push notification service | Delivering push notifications |
| Hosting / backend infrastructure | Operating our servers and databases |
We may also disclose information where required by law.
6. Data security
All data is encrypted in transit using HTTPS/TLS. Your session token is stored securely on your device (encrypted storage). Access to our systems is restricted to authorised personnel.
7. Data retention
We keep your account data for as long as your account is active. If you delete your account, we remove or anonymise your personal data within 30 days, except where we must retain records to comply with legal, tax, or accounting obligations.
8. Your rights & account deletion
You may request access to, correction of, or deletion of your personal data.
9. Children
Baytong Loyalty accounts are for adults: you must be at least 18 to register, as set out in our Terms & Conditions. The App is not directed to children, and we do not knowingly collect data from them. If you believe a child has registered an account, contact us at hello@baytong.com and we will delete it.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted on this page with a new "Last updated" date.
11. Contact us
Questions about this Policy or your data: hello@baytong.com.