Privacy policy

Last updated: November 2026

Loyalty Spot provides digital loyalty cards to businesses. This policy explains which personal data we process, why, and what your rights are.

Who we are

The Loyalty Spot. Contact: hello@loyaltyspot.com.

Customers of a business (card holders)

When you sign up for a business's loyalty card, that business is responsible for your data. Loyalty Spot processes it on the business's behalf (as a processor).

• What: your name, email address, card number, stamps and rewards, the date and time of your visits and, if you add the card to Apple Wallet, a technical device code used to update your card. If you send a suggestion, we store your name and message.
• Why: to make your loyalty card work: keeping track of stamps, giving rewards and updating your card. The business sees your name, email, card number and stamps.
• Legal basis: your consent, given when you sign up. You can withdraw it at any time.
• Retention: as long as your card is active. If the business cancels, we delete your data within 90 days.
• Sharing: we never sell your data. We only use services needed to run the card: hosting (Railway), Apple Wallet and, for business payments, Stripe.

Businesses

For businesses we process account and billing data (name, email, company details, payment status) to deliver and invoice the service. Invoices are kept as long as the law requires.

Your rights

You can access, correct or delete your data and object to processing. As a card holder, contact the business or us at hello@loyaltyspot.com and we will help the business. You may also complain to your data protection authority.

Security

Connections are encrypted (https). Passwords and PINs are only stored hashed. Each business only sees its own customers.

Cookies

We only use functional cookies to keep you logged in and find your card again. No tracking or advertising cookies.