This Privacy Policy explains how your personal information is collected, used, shared, and protected when you visit or use this website and its related loyalty and rewards services (together, the "Services").
In this Policy, "this website" means the website and Services on which this Policy is published. "We", "us", and "our" refer to the operator of this website — the business or organization that provides these Services and that is named in this website's contact details where shown. "You" means any person who accesses or uses this website, including registered members and guests.
Please read this Policy carefully. If you do not agree with it, please do not use this website.
Who Is Responsible for Your Information
The operator of this website is responsible for the personal information handled through the Services and acts as the data controller for that information.
Where this website hosts the loyalty programs of more than one business, each participating business is separately responsible for the personal information relating to its own program and members. In that case, this website provides the technical platform on their behalf, and the relevant business determines how your information is used within its own loyalty program. This Policy applies in addition to any privacy notice a participating business may provide to you directly.
Information We Collect
We only collect information that is needed to operate the loyalty program, keep your account secure, and improve the Services.
Information You Provide
- Account details — your name and, when you register, your email address.
- Optional profile details — a display name, date of birth, gender, phone number, profile photo, language, and time zone, where you choose to provide them.
- Security credentials — a password (if you set one) and, where enabled, two-factor authentication settings. Passwords are stored only in encrypted (hashed) form and are never visible to us.
- Communication preferences — whether you agree to receive emails or other messages.
- Messages you send us — the content of any support request, feedback, or other communication.
Information Created Through Your Use of the Services
- Loyalty activity — the loyalty cards, stamp cards, vouchers, prepaid passes, rewards, and membership tiers associated with your account.
- Transactions — points and stamps earned or redeemed, rewards claimed, and, where a business records it, the related purchase amount and currency.
- Referrals — referral codes you use or share and their status.
Information Collected Automatically
- Device and connection data — your IP address, browser type, device, and operating system.
- Usage and security logs — pages and features used, dates and times of access, and a record of important account actions (such as logging in, exporting your data, or deleting your account) kept for security and audit purposes.
- Cookies and similar technologies — see the "Cookies and Similar Technologies" section below.
Guest (Anonymous) Use
You can use parts of the loyalty program without creating a full account. In that case, you are identified by a code or identifier stored on your device rather than by your name or email. If you later choose to register, that activity can be linked to your account.
How We Use Your Information
We use your information to:
- Provide, operate, and maintain the loyalty program and your account.
- Credit and redeem points, stamps, vouchers, passes, and rewards.
- Verify your identity and sign you in, including by sending one-time login codes.
- Send service messages (such as login codes, account notices, and reward updates) and, where you have opted in, promotional messages.
- Respond to your questions and provide support.
- Personalize your experience, such as showing your balances, rewards, and preferred language.
- Protect the Services, detect and prevent fraud or abuse, and keep accounts secure.
- Improve the Services and understand how they are used.
- Comply with our legal obligations and enforce our terms.
Where data protection law applies, we rely on one or more of the following legal bases: performing our agreement with you, your consent (for example, marketing messages), our legitimate interests in operating and securing the Services, and compliance with legal obligations. You can withdraw consent at any time where consent is the basis.
How We Share Your Information
We share personal information only as described below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
With the Business Behind the Loyalty Program
When you take part in a loyalty program offered through this website, the relevant business can access the information needed to run that program. Typically, staff who serve you at checkout see only limited details needed to credit or redeem your rewards, such as your name and membership code. The business's authorized administrators may also see your email address, your communication preferences, and your activity within their own program. A business cannot see your activity with other, unrelated businesses on this website.
Service Providers
We may use trusted third parties to help operate the Services — for example, hosting and infrastructure providers and email delivery providers. They may process your information only on our instructions and only to the extent needed to provide their service.
Optional Integrations
Some features are optional and only involve a third party if this website enables them and you choose to use them:
- Digital wallet — if you add a card or pass to a mobile wallet, the information needed to create and update that wallet pass is shared with the wallet provider.
- Connected stores — if this website is linked to an online store, order and reward information may be exchanged with that store to award or redeem benefits.
- Payment providers — where a paid feature is offered, payment is handled by a third-party payment processor; this website does not store full payment card details.
Legal and Safety
We may disclose information where we believe in good faith that it is necessary to comply with the law, a court order, or a lawful request; to enforce our terms; or to protect the rights, property, or safety of any person.
Business Transfers
If the operator of this website is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
Cookies and Similar Technologies
This website uses cookies and similar technologies that fall into two main categories:
- Essential cookies — required for the website to work, such as keeping you signed in, securing forms against fraud, and identifying your device for guest use. These cannot be switched off.
- Functional and preference cookies — remember your choices, such as your language, time zone, and display preferences.
By default, this website does not use cookies for advertising or third-party behavioral tracking. Where the operator has enabled it, a cookie banner lets you record your preference. If the operator adds optional analytics or integrations, those may set additional cookies and will be subject to the relevant provider's terms.
You can control or delete cookies through your browser settings. Disabling essential cookies may prevent parts of this website from working.
Data Retention
We keep your personal information for as long as your account is active and as long as needed to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce our agreements.
When you delete your account, we remove or irreversibly anonymize your personal details so that the account can no longer be linked to you, while retaining limited non-identifying records where required for security, audit, or legal reasons. Guest profiles that are never used may be removed automatically after a period of inactivity.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights:
- Access and portability — request a copy of your personal information. You can download your data directly from the privacy and data section of your account settings.
- Correction — update or correct your details from your account profile.
- Erasure — delete your account and associated personal data from your account settings. This action is permanent.
- Remove a specific business — end your relationship with an individual business and delete the data held under its program, while keeping the rest of your account.
- Withdraw consent — unsubscribe from promotional messages at any time, using the link in those messages or your communication preferences.
- Restriction and objection — ask us to limit or stop certain processing of your information.
To exercise a right that is not available directly in your account, contact us using the contact form on this website, or by replying to an email you have received from us. To protect your account, we may ask you to verify your identity — for example, with a one-time code — before acting on a request. If you believe your rights have not been respected, you may also contact your local data protection authority.
Data Security
We use appropriate technical and organizational measures to protect your information, including encrypted (hashed) password storage, one-time login codes, optional two-factor authentication, encrypted connections (HTTPS) for production sites, restricted access, and security logging.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your login details confidential and contact us immediately if you believe your account has been compromised.
International Data Transfers
Your information may be processed in a country other than the one in which you live. Where information is transferred internationally, we take steps to ensure it remains protected in line with this Policy and applicable law.
Children's Privacy
This website is not directed to children under 16, or the minimum age of digital consent in your country if that age is lower. We do not knowingly collect personal information from children below that age without verifiable parental or guardian consent. If you believe a child has provided personal information without the required consent, please contact us so we can remove it.
Third-Party Links
This website may contain links to other websites or services that we do not control. We are not responsible for their content or privacy practices, and we encourage you to review their privacy policies.
Changes to This Policy
We may update this Policy from time to time. The current version is effective as of the date it is published on this website. When we make material changes, we will update this page and, where appropriate, notify you. Please review this Policy periodically.
Contact Us
If you have questions about this Policy or how your information is handled, please reach out using the contact form on this website, or by replying to an email you have received from us. The operator of this website is responsible for responding to privacy requests relating to the Services.