Notoro Passport — Privacy Policy

Last updated: July 2026

This policy describes how Notoro Group (“Notoro,” “we,” “us”) collects, uses, and protects your information when you participate in the Notoro Passport program and use this site.

Information we collect

Identity & contact: your first and last name, mobile phone number, and (optionally) your email address, provided when a team member registers your completed paper passport.
Passport photo: a photo of your completed paper passport, kept as proof of eligibility.
Account credentials: the password you set at signup. We never store your actual password — only a salted, one-way cryptographic hash. One-time verification and reset codes are also stored only in hashed form.
Program activity: where and when your passport was registered, your daily redemption history (date, location, and confirmation details), and the benefit period of your membership.
Consent records: timestamps of your acceptance of the Terms & Conditions and any optional marketing consent you choose to give.
Session data: a sign-in cookie so you stay logged in. It is an httpOnly, secure cookie, and we store only a hash of it. We do not use advertising or cross-site tracking cookies.

How we use your information

To operate your Passport membership: verify eligibility, sign you in, and track daily redemptions.
To send the text messages described below.
To prevent fraud and abuse of the program (e.g., one redemption per day, account lockouts).
To meet our legal obligations and enforce the program’s Terms & Conditions.

Text messaging (SMS)

What we send: a one-time invite text when your passport is registered (containing your verification code and signup link), and a password-reset code when you request one. If you separately opt in to marketing texts, we may occasionally send program news or offers.
Message frequency: varies by account activity. For most members this is a single invite message, plus a code only when you request a password reset. Marketing messages, if you opt in, are occasional.
Message and data rates may apply. Your mobile carrier’s standard messaging and data charges apply to texts we send you.
Opt out: reply STOP to any message to stop receiving texts, or HELP for help. Note that opting out of texts means we cannot send password-reset codes; you can still get help at any Notoro location.
We do not share your mobile number. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Your phone number and SMS opt-in are used solely to operate the Passport program.

How we share information

We do not sell your personal information, and we do not share it with anyone for their own marketing. We use a small number of service providers strictly to run the program: a messaging provider to deliver our texts, and cloud hosting/storage providers that hold our database and the passport photos. These providers process data only on our instructions. We may also disclose information if required by law or to protect our legal rights.

Security

Passwords are hashed with a modern memory-hard algorithm and unique salts; verification and reset codes are stored only as cryptographic hashes, expire quickly, and are single-use; sign-in sessions can be revoked server-side; and repeated failed sign-ins temporarily lock the account. All traffic to this site is encrypted (HTTPS).

Retention

We keep your information for the duration of your Passport membership and for a reasonable period afterward for recordkeeping, fraud prevention, and legal compliance, after which it is deleted or anonymized.

Your choices

You may opt out of texts at any time (see above).
Marketing consent is optional and can be withdrawn at any time.
You may request access to, correction of, or deletion of your personal information by asking a team member at any Notoro location. Deleting your data may end your Passport membership, since we can no longer verify eligibility.

Children

The Passport program is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

If we make material changes, we will update this page and revise the “Last updated” date above.

Contact

Questions about this policy or your data? Ask a team member at any Notoro location, or reach us through notoro.group.