Privacy Policy

Last updated: January 31st, 2026

This Privacy Policy explains how Barium Ventures ("we", "us", "our"), operating the Fikapass platform ("Platform"), collects, uses, shares, and protects personal data.

For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Barium Ventures is the data controller of personal data collected through the Platform.

1. Information We Collect

1.1 Information You Provide

  • Name and email address
  • Account login credentials
  • Membership selections and preferences
  • Communications you send to us

1.2 Membership and Transaction Data

  • Subscription status and billing cycle
  • Redemption history
  • Membership usage limits
  • Transaction identifiers

1.3 Payment Information

Payments are processed through Stripe Connect. We do not store full card numbers. Payment data is processed directly by Stripe and subject to Stripe’s privacy policy.

1.4 Usage and Technical Data

  • IP address
  • Device type and operating system
  • Browser type
  • Pages visited and interaction data
  • Referral and timestamp data

2. How We Use Personal Data

We use personal data to:

  • Provide and operate the Platform;
  • Enable recurring auto-renewing memberships;
  • Authenticate users and prevent fraud;
  • Allow Partner Shops to verify in-person redemptions;
  • Send transactional emails (e.g. subscription confirmations);
  • Improve functionality and analytics;
  • Comply with legal and regulatory obligations.

3. Legal Basis for Processing

Our lawful bases under UK GDPR include:

  • Contract: to provide membership services;
  • Legitimate Interests: fraud prevention, platform improvement, analytics;
  • Legal Obligation: accounting, regulatory compliance;
  • Consent: where required for marketing communications.

4. Partner Shops

Partner Shops are independent businesses and act as merchants of record for memberships purchased through the Platform.

We share limited Member data with Partner Shops solely to enable them to:

  • Verify membership status;
  • Process in-person redemptions;
  • Manage subscription-related queries;
  • Provide membership benefits.

Partner Shops are responsible for their own compliance with data protection laws for any data they process independently.

5. Stripe and Payment Processing

Payments are processed through Stripe Connect using Direct Charges. Stripe acts as an independent payment processor and may process personal data in accordance with its own privacy policy.

We do not control Stripe’s processing of payment information.

6. Data Sharing

We may share personal data with:

  • Stripe (payment processing);
  • Cloud hosting providers;
  • Analytics providers;
  • Professional advisers (legal, accounting);
  • Regulators or law enforcement where required.

We do not sell personal data.

7. International Transfers

Where personal data is transferred outside the UK, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent lawful mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to provide the Platform and comply with legal obligations.

Subscription and transaction records may be retained for up to 6 years for accounting and legal purposes.

9. Your Rights

Under UK GDPR, you may have the right to:

  • Access your personal data;
  • Correct inaccurate data;
  • Request deletion;
  • Restrict processing;
  • Data portability;
  • Object to certain processing;
  • Withdraw consent where applicable.

To exercise your rights, contact: [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Security

We implement appropriate technical and organisational measures designed to protect personal data, including secure hosting and access controls.

However, no system can guarantee absolute security.

11. Marketing Communications

We may send transactional communications necessary for membership administration.

Marketing emails will only be sent where permitted by law or where you have provided consent. You may opt out at any time.

12. Cookies

We use cookies and similar technologies to operate the Platform, analyse usage, and improve performance. You can manage cookie preferences through your browser settings.

13. Children

The Platform is not directed at individuals under 16. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated where required.

15. Contact

For privacy-related questions: [email protected]