Two kinds of people, two roles
Loyalito serves businesses, and those businesses serve customers. That means we handle two sets of personal data in two different roles.
- Your account data — the business owner and staff who log in. Here Loyalito is the data controller.
- Your customers’ data — the members of your loyalty program. Here you are the controller and Loyalito is your processor, acting on your instructions.
What we collect
For business accounts: name, email address, business name and address, phone number, chosen language and country, and billing details processed by Stripe. We never see full card numbers.
For loyalty members, on your behalf: the name and contact details they enter when joining, their visit and reward history, their card identifier, their wallet pass registration, and their marketing consent status. Birthdays are optional and only collected if you enable them.
Why we hold it
- To run the service — issuing wallet passes, counting visits, awarding rewards. Legal basis: contract.
- To send campaigns — only to members who gave marketing consent. Legal basis: consent, which can be withdrawn at any time.
- To keep the service secure and working — logs, fraud and abuse prevention. Legal basis: legitimate interests.
- To meet obligations — invoices and tax records. Legal basis: legal obligation.
Consent is unbundled
On the join form, becoming a loyalty member and agreeing to receive marketing are two separate choices. Membership is never conditional on marketing consent, and members can withdraw consent without losing their card or their collected stamps.
What we do not do
We do not market to your customers. We do not sell, rent or share your customer list. We do not use your customer data to train models for other businesses. Your list is yours.
Who else processes data
We use a small number of sub-processors to run the service: cloud hosting and database infrastructure, Stripe for payments, Apple and Google for wallet passes, Firebase for push delivery, and an email delivery provider. Each is bound by a data processing agreement. A current list is available on request from hello@loyalito.space.
How long we keep it
Loyalty member records are kept while your account is active and you choose to keep them. When you delete a member, their record and visit history are removed, their Google Wallet card is retired and their Apple Wallet card stops updating. When you close your account, you can export everything first; we then delete customer data within 30 days, keeping only what tax law requires us to keep (typically invoices).
Rights
Members can request access, correction, deletion, restriction, objection and portability. As the controller you can act on all of these from the customer’s profile page in the dashboard, including a full export and a permanent delete. If a request reaches us directly we will forward it to you rather than act on it ourselves.
Members also have the right to complain to their national supervisory authority.
Where data lives
Loyalito is operated for the European market and customer data is stored in the EU. Where a sub-processor transfers data outside the EEA, it does so under Standard Contractual Clauses.
Contact
Privacy questions, data processing agreements and deletion requests: hello@loyalito.space. See also our terms of service.