Privacy Policy

LoyaltyPass (“we”, “us”, or “our”) operates the LoyaltyPass platform and marketing website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read it carefully. If you disagree with its terms, please discontinue use of the site.

1. Information We Collect

We may collect the following categories of personal data:

• Account data: name, email address, and password when you register or join a waitlist.
• Business data: business name, logo, and loyalty programme configuration entered by business operators.
• Usage data: pages visited, features used, click events, session duration, and referring URLs collected automatically when you interact with our platform.
• Device data: IP address, browser type, operating system, and screen resolution.
• Cookies and similar technologies: see Section 4.

2. How We Use Your Information

We use collected data to:

• Provide, operate, and maintain the LoyaltyPass platform.
• Communicate with you about your account, updates, and support requests.
• Understand how users interact with our product in order to improve it.
• Send marketing communications where you have given consent (you may opt out at any time).
• Comply with legal obligations.

Our legal basis for processing under the GDPR is one of: performance of a contract, legitimate interests (product improvement, fraud prevention), compliance with a legal obligation, or your explicit consent.

3. Sharing Your Information

We do not sell your personal data. We may share it with trusted third-party service providers who act as data processors on our behalf, subject to confidentiality agreements. We may also disclose data where required by law or to protect the rights and safety of LoyaltyPass and its users.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect usage data and improve your experience. Specifically, we use:

• Google Tag Manager / Analytics: collects anonymised traffic and behaviour data to help us understand how visitors use the site.
• Microsoft Clarity: session replay and heatmap tool that records mouse movement, clicks, and scroll depth to identify usability issues.
• Essential cookies: required for authentication and core platform functionality; these cannot be disabled.

You can manage your cookie preferences at any time using the consent banner displayed when you first visit the site, or by clearing cookies in your browser settings.

5. Third-Party Services

We work with trusted third-party service providers to operate the platform. These providers act as data processors on our behalf and are bound by data processing agreements. Categories of providers include:

• Digital wallet providers: used to issue loyalty passes to customers’ mobile devices (e.g. Google Wallet).
• Cloud infrastructure & hosting providers: used to store data and serve the platform. Data is stored within the European Economic Area or in countries with an adequate level of data protection.
• Analytics providers: used to measure site traffic and user behaviour in aggregated, anonymised form.

You can request a current list of our sub-processors by contacting us at loyaltypass.co@gmail.com.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymise your personal data within 30 days, unless we are required to retain it for a longer period under applicable law (for example, financial records may be kept for up to 7 years).

7. Your Rights (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data (“right to be forgotten”).
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to restrict processing: request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at loyaltypass.co@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Contact Us

If you have questions or concerns about this Privacy Policy, please contact our Privacy Team at: loyaltypass.co@gmail.com.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website before they take effect.