Privacy

If you are a customer of a business using Loyalti, that business is the data controller. We process your data on their instructions. Requests to see or delete your data can go to either of us, and we will make sure they are honoured.

If you are a business using Loyalti, we are the controller for your account and billing data.

An email address, and only what else you choose to give: a name, a phone number, a birthday. None of those are required to hold a loyalty card. We also record your loyalty transactions — the stamps and points you collect — because that is the service.

We do not sell personal data. We do not market to a business’s customers. We do not use one business’s customer data to benefit another business on the platform.

Under UK GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Deletion removes your profile, your card and your wallet passes. Your past transactions are anonymised rather than erased, because they are the business’s operational record and our loyalty history is designed to be tamper-evident — we remove the link to you, not the business’s books.

Email privacy@loyalti.io. If you are not satisfied with our response you can complain to the Information Commissioner’s Office.