Español

Privacy Policy of the Tata Card

Version 2026-11-07. This Policy explains how AM Properties International, S.A. processes the personal data of the members of the Tata loyalty program, in accordance with Law 81 of 2019 on Personal Data Protection of the Republic of Panama and its regulations.

1. Data controller

AM Properties International, S.A., RUC 155736166-2-2023 DV 70, Calle 39 Este, PH Doña Raquel, planta baja, Calidonia, Ciudad de Panamá, República de Panamá. Contact for privacy matters: tata@amholdings.me, +507 836-5459.

2. What data we collect

  • Identification and contact: first name, last name, email address and, if you provide it, phone number.
  • Birthday: the date you give us when you join.
  • Your preferences: whether you agreed to receive promotions by email, when, and where you told us.
  • Program data: points, rewards earned and redeemed, and the purchases linked to your card (date, products, amounts, payment method, electronic invoice number).
  • Invoicing data: your email is used as the recipient address of the electronic invoices for your purchases.
  • Technical data: if you save the card in Apple Wallet, the device identifier and notification token that Apple sends us so that your card updates; if you use Google Wallet, the identifier of your pass in Google. Our servers also record IP address, date and time of access, and your phone's language, for security and operation.
  • The Tata app: if you sign in with Apple or Google, we receive only your name, your email and an identifier of your account (never your password or any other Google or Apple data). We use them only to sign you in and link your account to your card and TATA Points; we do not share them or use them for advertising, and we delete that link when you delete your account. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
  • What you write to us when you contact us about the Program.

We do not ask for identity documents, payment card numbers or sensitive data. Our electronic invoicing provider and the card terminals process payment data under their own responsibility; we never receive full card numbers.

3. Why we use your data and on what legal basis

  • To run the Program (create your card, record points and rewards, apply them at the counter, show your card in Apple Wallet or Google Wallet and keep it updated): performance of the Program you joined and your consent.
  • To issue and send electronic invoices for your purchases: legal obligation (Panamanian tax regulations, Dirección General de Ingresos).
  • To give you a birthday treat and to tell you about changes to the Program that affect your card: your consent and the Program you joined.
  • To send you promotions and news from Tata by email: only if you asked us to: by ticking that box when joining (it is optional and unticked by default), on the customer screen at the counter, or by telling the person serving you. You may unsubscribe at any time with the link included in every one of those emails, by writing to tata@amholdings.me or asking at the counter, without affecting your card.
  • Security and fraud prevention (one card per person, detection of misuse, limits on attempts): our legitimate interest in protecting the Program.
  • Internal statistics about the café, using aggregated or anonymized data that no longer identifies you.

We do not use your data for third-party advertising and we do not make automated decisions with legal effects on you.

4. Who we share your data with

  • Apple Inc. and Google LLC, only what is needed to show and update your card in their wallets (your name, your points and rewards, the card identifier). They process it under their own privacy policies.
  • Our authorized electronic invoicing provider (PAC) and the Dirección General de Ingresos of Panama: the data of each invoice, including your email as recipient.
  • Technology providers that host our servers and send notifications, under confidentiality obligations and only to provide the service to us.
  • Authorities, when the law requires it or to defend our rights.

We never sell, rent or give away your personal data.

5. International transfers

Apple, Google and our hosting providers may process data on servers outside Panama. In those cases we apply the safeguards required by Law 81 of 2019 (contractual guarantees and providers with recognized security standards).

6. How long we keep your data

  • While your card is active.
  • If you cancel your card, or if we cancel it, we delete or anonymize your Program data within ninety (90) days.
  • Invoicing and accounting data are kept for the periods required by Panamanian tax and commercial regulations, even after cancellation.
  • Technical logs are kept for no more than twelve (12) months.

7. Your rights

You may at any time exercise your rights of access, rectification, cancellation (deletion), opposition and portability, as well as withdraw your consent, by writing to tata@amholdings.me from the email registered on your card, or by asking at the counter. We will answer within the time limits of Law 81 of 2019. If you are not satisfied, you may file a claim with the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI), the data protection authority of Panama.

Deleting your data means cancelling your card and losing your pending points and rewards. Data that we must keep by law (for example, issued invoices) will be kept only for that purpose.

8. Security

We protect your data with encrypted connections (https), restricted access limited to the staff who need it, servers with access controls and backups, and tokens that are never shared. No system is infallible; if a security incident affects your data, we will notify you and the authority as required by law.

9. Minors

The Program is intended for persons aged 18 or older. If a minor wishes to join, a parent or guardian must do so on their behalf. If we learn that we hold data of a minor without authorization, we will delete it.

10. Cookies

The join form and the Program pages do not use advertising or tracking cookies. Only the technical storage strictly necessary for the pages to work is used.

11. Changes to this Policy

We may update this Policy. The current version and its date are always shown at the top of this page. If a change is significant, we will announce it on this page and/or through your card.

12. Contact

AM Properties International, S.A., Calle 39 Este, PH Doña Raquel, planta baja, Calidonia, Ciudad de Panamá, República de Panamá. tata@amholdings.me, +507 836-5459.