GoLoyal Privacy Policy

1. Types of data we collect

We may collect and process the following categories of personal data:

Data about Merchants and account users

• Name and contact details (such as email address and phone number)
• Business name, address and industry
• Login details (username, password in hashed form)
• Usage information about how you access and use the dashboard

Data about loyalty customers

When a Merchant uses GoLoyal, we process data about their customers on the Merchant's behalf, such as:

• Loyalty card or instance identifiers
• QR codes and wallet pass identifiers
• Stamps, points and reward history
• Expiry dates and status of loyalty cards
• Basic contact details if collected by the Merchant (for example name or email address)

Merchants may also ask us to send messages (such as activation or reminder emails) to their customers.

Technical and usage data

When you visit our sites we may automatically collect:

• IP address and approximate location
• Browser type and version
• Device identifiers
• Pages viewed and actions taken
• Referring site or campaign information

We may collect this data using server logs, cookies and similar technologies.

2. How we use personal data

We use personal data for the following purposes:

• To provide, operate and maintain the GoLoyal Service
• To create and manage Merchant accounts
• To generate and manage digital loyalty cards and wallet passes
• To process loyalty events (stamps, points, redemptions)
• To respond to support requests and communicate about the Service
• To monitor and improve the Service and troubleshoot issues
• To comply with legal and regulatory obligations

We generally process Merchant account data as a data controller. When Merchants use GoLoyal to store information about their loyalty customers, we process that customer data as a data processor acting on the Merchant's instructions.

3. Legal bases for processing

Where the UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:

• Contract – processing is necessary to provide the Service under our agreement with you.
• Legitimate interests – for example to operate, secure and improve the Service, prevent misuse and communicate non-marketing information.
• Consent – for certain marketing activities or optional features where required by law.

Where Merchants collect data about their customers, they are responsible for identifying an appropriate legal basis and for providing any required privacy notices to those customers.

4. Sharing your information

We may share personal data with:

• service providers who process data on our behalf (such as hosting, email delivery and analytics providers);
• professional advisers such as lawyers, accountants and auditors;
• regulators, law enforcement or other authorities where required by law; and
• another organisation in connection with a business sale, merger or similar transaction.

We do not sell personal data.

Where we use third-party processors, we put in place contracts requiring them to protect personal data and use it only for the services they provide to us.

5. International transfers

Some of our service providers may be located outside the UK or European Economic Area. Where we transfer personal data internationally we will ensure that appropriate safeguards are in place, such as standard contractual clauses, or rely on adequacy regulations where available.

6. Data retention

We keep personal data for as long as necessary to:

• provide the Service;
• comply with our legal obligations;
• resolve disputes; and
• enforce our agreements.

Customer loyalty data is generally retained for as long as the Merchant's account remains active and for a reasonable period afterwards, unless the Merchant requests deletion sooner or applicable law requires longer retention.

We may anonymise data so that it can no longer identify individuals and use aggregated information for analytics and business reporting.

7. Cookies and similar technologies

We use cookies and similar technologies on our sites to:

• remember your preferences;
• keep you logged into the dashboard;
• understand how visitors use our marketing site; and
• help protect against fraud and misuse.

Where required by law, we will ask for your consent before setting non-essential cookies. You can manage cookie settings through your browser.

8. Your rights

Depending on your location and subject to certain limitations, you may have rights in relation to your personal data, including:

• the right to access a copy of your data;
• the right to correct inaccurate or incomplete data;
• the right to request deletion of your data;
• the right to object to or restrict certain processing; and
• the right to data portability.

If we process your data based on consent, you can withdraw that consent at any time.

To exercise these rights, contact us at info@goloyal.co.uk. We may need to verify your identity before responding.

If you are a customer of a Merchant using GoLoyal, please contact the Merchant first, as they control your loyalty data. We may refer your request to the relevant Merchant.

You also have the right to complain to your local data protection authority. In the UK this is the Information Commissioner's Office (ICO).

9. Google Wallet and third-party services

Where you choose to add a loyalty card to Google Wallet, Google's own terms and privacy policy apply to your use of Google Wallet. We do not control how Google processes data in its wallet products.

Our Service may link to other websites or services we do not operate. We are not responsible for the privacy practices of those third parties.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://goloyal.co.uk/privacy. If we make significant changes we will take reasonable steps to notify you.