Privacy notice

SH Scanner · Updated 25 October 2026

Alternative Hospitality Co., Ltd is responsible for the information processed through SH Scanner. Contact support@althosp.com for privacy questions or requests.

SH Scanner is an online operational tool for authorised adult venue staff. It supports event admission, guest identification, wristband and locker assignment, walk-in belongings and checkout. This notice describes the staff app; it does not describe the separate Soir Haus member app or grant a membership.

Information handled

Staff access: staff email and account identifiers, sign-in and session records, language preferences, and security information. If you choose remembered access, a device key and related identifiers support that choice.
Guests and visits: names or identifying labels, ticket and event references, admission and verification outcomes, wristband identifiers and printed codes, locker assignments, and checkout or cancellation records. Authorised staff can view existing attendee identity details and photos required for their role; relevant confirmation details and supporting photos or files may be submitted during operational workflows.
Operational history: the staff actor, time and action associated with check-in, assignment, lookup-related activity, skips, corrections and checkout, including notes or reasons where requested.
Service and support information: IP addresses, device/browser information, security and server logs, errors, and information you send when requesting support.

Camera and NFC

The ticket QR reader uses the camera to decode a ticket on the device and sends the decoded value for lookup. That reader does not upload its camera video or request microphone audio. Photo or file uploads offered elsewhere are separate actions and send the selected content to the service.

NFC reads a wristband identifier for lookup or assignment. Identifiers may be hashed on the server, but records linked to a guest are still personal data. SH Scanner does not write guest names, locker details or credentials onto the wristband. Printed codes provide a manual alternative.

Why information is used

We use information to authenticate staff, enforce access permissions, verify admission and identity, manage belongings and guest departure, provide support, prevent misuse and fraud, investigate safety issues, maintain accountability and meet legal obligations. Core staff and visit information is needed to perform these functions; optional remembered access and supporting information are used when selected or required by the workflow.

Access and service providers

Guest information is available to authorised operational staff according to their role. Service providers supporting hosting, storage, email delivery, security and support process information as needed to operate the service. Information may also be disclosed where required for law, safety, dispute resolution or a business transfer. We do not sell personal information. The staff app does not display advertising or use guest records for advertising targeting.

Security and device storage

Connections to the service use HTTPS. Server-side permissions restrict operational access. Cookies and device storage support sessions, language preferences and optional remembered access. Signing out or administrative revocation ends access; clearing local storage removes the device's stored access information. No internet service can guarantee perfect security.

Retention

We retain information for as long as needed to operate the service, comply with law, resolve disputes, enforce rules, investigate safety incidents and maintain audit trails. Attendance and operational evidence are not automatically deleted when a wristband is released or staff access is removed. Some information may remain in backups or legal and safety records for a limited period.

Your requests

Depending on your location, you may request access, correction, deletion, restriction, portability or object to certain processing. Email support@althosp.com with “SH Scanner data request”. You do not need to sign in to make a request. We may verify your identity and explain records that must be retained for legal, security, safety, audit or legitimate operational reasons. See support and request instructions.