4 Counties Beer & Music Festival app — The Chequers, Fenny Stratford
Version 2.2Last updated 6 August 2026Applies to the mobile app only
This app continues after the festival. Once the 4 Counties Beer & Music Festival ends, this app carries on as The Chequers app — the same account, the same data, the same consent choices you made here. If you'd rather stop using it once the festival is over, you can delete your account at any time (see Your rights).
1.Who this policy is about
This policy covers anyone who downloads or uses the 4 Counties Beer & Music Festival app — the tasting-card app for The Chequers' festival at 48 Watling St, Fenny Stratford, MK2 2BY (28–31 Aug 2026, and any future Chequers events you opt in to). It explains what personal data the app collects, why, and what rights you have over it.
It doesn't cover The Chequers' own website, social media pages, or till/payment systems — those are separate from this app and have their own privacy arrangements.
2.Who's responsible for your data
Role
Party
Data controller decides why and how your data is used, and is who you register with
Your venue recorded against your account, but not a controller of your data
The Chequers, Fenny Stratford
In practice: you're registering with Intelligent Dashboards' platform, not with The Chequers directly. The Chequers is recorded as your home venue so the app knows which festival, events and local sponsors are relevant to you, but it doesn't hold or control your personal data — Intelligent Dashboards does, and answers for it. The Chequers only ever sees aggregate figures about its own members (e.g. how many people opted in, average ratings), never your name, email, or individual activity — see Who we share it with.
If The Chequers ever contacts you through its own separate channels (its own social media, its own mailing list) outside this app, that's their own activity and their own responsibility as a data controller for it — this policy only covers the app.
3.What we collect
Your name and email address — given at sign-up, so we know who's used the app and can send the alerts or offers you opt into. No password, no address, no phone number.
Confirmation that you're 18 or over — this app is tied to a licensed premises and alcohol content, so we ask you to confirm your age at sign-up. We don't store a date of birth, just the yes/no confirmation.
Your event-alerts and marketing/offers preferences — two separate, independent choices: whether you opted in to hear about festival changes and future events at your venue, and whether you separately opted in to promotional messages, which may include offers or sponsored content from The Chequers. Either can be turned on or off independently, and neither is required to use the app.
A push notification token — if you opt into either of the above, your phone registers with Apple's or Google's push notification service (APNs/FCM) and we store the resulting token so we can actually deliver a notification to your device. This token identifies your phone's notification inbox, not you personally, and is only requested if you say yes to at least one of the alert/offer toggles.
The beers you rate — which of the festival's beers you've scored, your 0–5 score on CAMRA's National Beer Scoring System, and any optional tasting note you type.
A device identifier — a random code stored on your phone (not an advertising ID, not linked to Apple/Google account data) used only to stop the same beer being rated twice from one device on the same day and to pace out rapid repeat scans.
Your precise location, at the moment you submit a rating — used only to confirm you're at The Chequers before the rating is saved, so the leaderboard reflects people actually at the festival. We check it and discard it immediately; we don't store a location history and can't see where you are at any other time.
We don't collect payment details, contacts, photos, or anything from your phone beyond what's listed above.
4.Why we collect it, and our legal basis
What
Why
Legal basis
Name, email
Identify who's using the app; send opted-in alerts and offers
The app is tied to a licensed premises and alcohol content — we need to confirm you're old enough to use it
Legal obligation / legitimate interest — compliance with licensing requirements
Ratings & notes
Run the tasting card, leaderboard and "Beer of the Festival" award
Legitimate interest — running the festival feature you signed up to use
Device identifier
Stop one phone rating the same beer twice in a day or gaming the leaderboard
Legitimate interest — fair use of a shared, public leaderboard
Precise location (checked, not stored)
Confirm you're at The Chequers before a rating is saved
Legitimate interest — the leaderboard should reflect people actually at the festival
Event-alert emails & push notifications
Tell you about festival changes and future nights at your venue
Consent — only if you opted in, withdrawable any time
Marketing/offers emails & push notifications
Tell you about promotions and sponsor news from The Chequers — a separate, independent opt-in from event alerts
Consent — off by default, only if you separately opted in, withdrawable any time
Push notification token
Deliver whichever of the above you've opted into to your device
Consent — only requested if you opt into event alerts or offers
We rely on legitimate interest rather than consent for the core tasting-card features because they're the reason you downloaded the app and there's no less-intrusive way to run a shared leaderboard fairly. You can always stop using the app and ask for your data to be deleted (see Your rights).
5.How we use it
To let you log in, rate beers, and see your own tasting history.
To calculate and display the public leaderboard and the "Beer of the Festival 2026" result — shown only as an aggregate average and tasting count, never your name.
To send you event-alert emails or push notifications, only if you've opted in.
To send you offers, sponsor news, or promotional messages from The Chequers, only if you've separately opted into that — it's off by default and never bundled with event alerts.
To detect and prevent abuse of the rating system (duplicate votes, rapid-fire scanning, and ratings from people not at the venue).
We do not use your data for profiling, and we don't do anything with it beyond running this app and the alerts or offers you've specifically opted into. If you've opted into "Offers & sponsor news," any promotional messages are sent by us using the contact details/token you gave us — see Who we share it with for exactly what that does and doesn't mean for your personal data.
6.Who we share it with
The Chequers — as your venue, they see aggregate figures only (e.g. total registered members, opt-in counts, average ratings, sponsorship reach once that's live) so they can run and report on the festival and any sponsorship they've sold. They don't receive your name, email, or individual activity — see Who's responsible for your data.
Cloudflare, Inc. — our hosting provider, which runs the app's backend (Workers + D1 database) on our behalf as a sub-processor. Cloudflare doesn't use this data for its own purposes.
Apple and Google — if you've opted into event alerts or offers, your push token is passed to Apple's (APNs) or Google's (FCM) push notification service purely to deliver the notification to your device, the same as any app that sends you a push notification.
We don't sell your personal data, ever. If a sponsor of The Chequers — a brewery or other drinks brand introduced by the venue — pays to send opted-in members a message, we send it ourselves; the sponsor doesn't receive your name, email, device token, or any other personal data. They'd see only an aggregate reach figure (e.g. "sent to 340 members"), the same way running an ad on a platform doesn't hand your details to the advertiser. We don't share personal data with advertisers, data brokers, or any other third party.
7.Where it's stored
The app's data is hosted on Cloudflare's infrastructure, and the database that stores it runs in Cloudflare's Western Europe (WEUR) region. Some incidental processing (e.g. edge network routing/caching) may still touch other Cloudflare locations as part of normal service delivery; where that happens, it's covered by Cloudflare's standard contractual clauses and UK GDPR-approved safeguards.
8.How long we keep it
Your account (name, email, preferences, and push token if you opted into alerts or offers) is kept for as long as you're an active user of this app or any Chequers event you've opted into, plus 24 months of inactivity afterwards in case you return, after which it's deleted. Turning off event alerts or offers deletes the push token immediately — it isn't kept "just in case."
Individual ratings and notes are kept for as long as your account exists. Once aggregated into the public leaderboard, the aggregate figures (average score, tasting count) may be kept indefinitely, since they no longer identify you.
You can ask for deletion at any time — see Your rights — and it's actioned regardless of the above.
Your precise location is not retained at all — it's checked at the moment you submit a rating and immediately discarded. We never build up a location history for you.
9.Your rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you.
Correct it if it's inaccurate or incomplete.
Delete it ("right to be forgotten").
Restrict or object to how it's used.
Receive a copy in a portable format (data portability).
Withdraw consent for event alerts or offers/sponsor news at any time, independently of each other, without affecting anything processed before you withdrew it.
All traffic between the app and our servers is encrypted (HTTPS/TLS).
There's no password to steal — sign-up uses name and email only, so there's no credential database at risk.
Access to your individual data (name, email, ratings) is limited to Intelligent Dashboards. The Chequers has no login or export access to member-level data — only the aggregate figures described in Who we share it with.
The app never collects or stores payment card details — food, drink, and tokens are still paid for the normal way at the bar/counter.
11.Children
This app is built for a licensed-premises beer festival and isn't directed at or intended for use by children. We ask everyone to confirm they're 18 or over at sign-up, and we don't knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact us and we'll delete it.
12.Cookies & tracking
The app doesn't use cookies, third-party analytics, or advertising trackers. Your personal data is never sold or handed over for marketing purposes, inside or outside the app — if you've opted into "Offers & sponsor news," we send you the message ourselves, we don't hand your details to whoever it's about (see Who we share it with).
13.Changes to this policy
If we make material changes to this policy, we'll update the version and date at the top of this page and, where the change affects you directly, tell opted-in users by email.
2.2 (6 August 2026) — narrowed offers & sponsor news back to The Chequers only: removed references to "other venues on our platform" and "partner drinks brands"/national-brand sponsorship, since offers and sponsor content only ever come from The Chequers itself (§3, §4, §5, §6).
2.1 (5 August 2026) — added precise location as a data point: checked at the moment a rating is submitted to confirm you're at The Chequers, then immediately discarded, never stored (§3, §4, §5, §8). Also noted the device identifier now limits ratings to once per beer per day rather than once ever (§3, §4).
2.0 (29 July 2026) — corrected who's responsible for your data: Intelligent Dashboards Ltd is the controller, not The Chequers (see §2). Added age confirmation (§3, §4, §11), the "this app continues after the festival" notice, and broadened the marketing/offers description to cover partner venues and brands as the network grows (§3, §4, §6). The Chequers' access was clarified to aggregate figures only, not individual member data (§6, §10).
1.2 (28 July 2026) — named Intelligent Dashboards Ltd (company no. 17359146) in place of the sole-trader name, following incorporation.
1.1 (24 July 2026) — confirmed hosting region (Cloudflare WEUR) and a 24-month inactivity retention period.