Privacy notice

Last updated 29 October 2026

This notice explains what information is collected when you use a digital loyalty card on LoyaltyPlatform, why it’s collected, how long it’s kept and what you can do about it.

Who is responsible

Each shop runs its own loyalty programme and decides how your points and rewards work. The shop is responsible for the information it holds about you as its customer. LoyaltyPlatform provides the software and stores that information on the shop’s behalf.

What we collect

Your name and email address, so you can sign in and the shop can recognise you.
Your customer ID and the QR code on your card, so staff can find you at the till.
Your birthday (day and month only, never the year), if you choose to add it, so the shop can give you a birthday treat.
Your points history: when you earned or spent points, how much, at which location and which staff member did it.
Messages you send to the shop and problems you report about your points.
Your choices: whether you accepted the programme terms and whether you want marketing emails.
Which of the shop’s links (for example its review page) you open, without your IP address or device details.

We never ask for payment card details and your QR code doesn’t contain any personal information.

Why we use it

To run the loyalty card you joined: adding points, showing your balance and giving you rewards.
To stop mistakes and misuse, such as the same points being given twice.
To send emails you need, like a password reset link.
To send offers from the shop, only if you said yes. You can change this any time.

How long we keep it

Your account and points history: while your card is active, so your balance stays correct.
Link click records: 13 months.
Messages, feedback and audit records of staff actions: 24 months.
Sign-in sessions: removed as soon as they expire.

If you delete your account, your name and email are removed straight away. A record of past points with no personal details may be kept so the shop’s accounts still add up.

Your rights

You can, at any time:

Download a copy of your information, change your marketing choices or delete your account on the Your data page.
Ask the shop to correct something that’s wrong, using the “Something not right?” link on your card.
Complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Cookies

We use one essential cookie to keep you signed in. It’s encrypted and contains no personal information. We don’t use advertising or tracking cookies.

Changes

If this notice changes in a way that affects you, we’ll show the new version here with a new date.