Life Loyalty runs digital stamp cards for local businesses. This policy explains what personal data is involved, who is responsible for it, and the choices you have. It is written for three kinds of people: members who carry a card, the businesses that run a programme, and anyone who gets in touch through this website.
Life Loyalty is Life Loyalty Limited, a company registered in England and Wales. Our company details are on the legal notice.
The short version
- A business runs its loyalty programme and is responsible for what you share with it. We run the platform on its behalf.
- What you share with one programme stays with that programme. A business never sees what you have told another.
- Nobody is sold to, and nothing is shared with advertisers.
- You can see everything held about you, download it, correct it, leave a programme, or have your data deleted, all from your own account.
If you are a member of a loyalty programme
What is held
Your account, which is ours: your mobile number, which is how you sign in, and the code on your pass that a shop scans. Nothing else lives at account level.
Your profile with each programme you join, which belongs to that programme: your name, your email address if you give one, your birthday if you choose to share it, and your marketing choices. Each programme has its own copy. You can be a different name with a different email to your coffee shop and your barber, and changing one changes nothing anywhere else.
Your activity in each programme: the stamps you earn, the rewards you redeem, when, and at which of the business’s locations. Whether you have added the pass to Apple Wallet or Google Wallet, and the emails the programme has sent you.
From that activity we work out a segment, such as new, loyal or lapsing, from how often you visit compared with what is typical for that kind of business. It is derived, not something you told us, and it is included whenever you ask to see your data.
Who is responsible
The business whose card you carry is the controller of your profile and your activity in its programme. It decides what to offer you and whether to write to you. We process that data on its behalf, under contract, to run the card. We are the controller of your account itself, the mobile number and pass code that work across every programme you join.
What it is used for
Running the card: issuing stamps, showing your balance, unlocking rewards, and keeping the pass in your wallet up to date. This is necessary to provide the service you signed up for.
Service messages: a welcome when you join, a note when a reward is ready or has been used, and confirmation if you leave. These are sent regardless of marketing choices, because they are part of the service.
Marketing: only if you have said yes, for that programme, on that channel. Email and text messages are separate choices. You can change your mind at any time from your profile, and the change takes effect straight away.
Birthday offers: only if you have given your birthday, and only from the programme you gave it to.
What is never done
Your details are never sold, rented or traded. They are never shared between programmes. They are never used for advertising outside the programme you joined. A programme’s staff see your name, your stamps and your rewards when they serve you, and nothing about any other programme.
Your choices and rights
From your own account, without asking anyone, you can:
- Edit your name, email, birthday and marketing choices for each programme.
- Download everything held about you, across every programme, as a readable document and as a machine-readable file.
- Leave a programme. Your profile there is deleted, your pass is withdrawn, and your visits are kept only as anonymous totals in the business’s figures.
- Delete your data from one programme, or from all of them. Deleting from all of them closes your account.
These cover your rights of access, portability, rectification, erasure and objection under UK data protection law. If you want to exercise a right some other way, or you have a complaint, contact us. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
If you run a programme
If you are an owner, admin or team member of a programme, we hold your mobile number, which is how you sign in, and your name and email address. They are used to run your account, to send you sign-in codes and service emails, and to reach you about your programme. We are the controller of this data.
Each stamp and redemption records which team member issued it. That is part of the programme’s records, and is available to its owner and admins.
Your programme’s member data is yours. You are responsible for using it lawfully, and for honouring the choices members make. The platform is built so that members can exercise their rights themselves, and requests that reach you can be answered by pointing the member to their own account.
If you contact us through this website
The sign-up and contact forms collect your name, your email address, and, for sign-up, your business name, mobile number and what you tell us about your shop. They are used to reply to you and, if you go ahead, to set your programme up. This website sets no cookies.
We measure how this website and the Life Loyalty app are used with Rybbit, an analytics service that does not use cookies. It records the pages visited, how far down a page people read, and steps such as whether a form was sent or a card added to a wallet, never what was written. We do not use it to identify you. We use this to improve the website and the app.
Where data lives and who helps us
Everything is hosted with Amazon Web Services in its London region, in the United Kingdom. Sign-in codes, emails and text messages are sent through the same provider. Wallet passes are delivered through Apple and Google, who receive what is on the pass, such as the programme name and your stamp count, in order to display and update it. Each of these providers works under contract and only on our instructions.
Security
There are no passwords to leak. Everyone signs in with a one-time code sent to their phone, and codes are short-lived and single-use. Data is encrypted in transit, and access to it is limited to what each person’s role needs.
How long data is kept
Your account exists for as long as you belong to at least one programme. Your profile with a programme exists until you leave it or delete it. After you leave or delete, your stamps and redemptions remain only as anonymous records that no longer identify you. An enquiry through the website is kept for as long as it takes to deal with it, and, if you join, for the life of your account.
Changes to this policy
If this policy changes in a way that matters to you, the date at the top changes with it. Where a change affects how your data is used, members are told through the programme they belong to.
Contact
Questions about this policy or about your data: contact us.