Privacy

How your details are used when you add a loyalty card.

Who holds your details

The business whose card you added (the café, shop or restaurant named on the card) decides how its card works and can see your details. CustomerCard runs the service for that business.

What is stored

• Your first name, email address, mobile number and, if the card asked for it, your date of birth — all as you entered them.
• Your card's activity: each scan, reward, item used, top-up and correction, with the time and the staff member who recorded it.
• Which ways of being contacted you agreed to — text message, email, WhatsApp — and when you agreed to each. They are separate: agreeing to one is not agreeing to another.
• Whether a message was delivered, and whether an email was opened. Not what you did afterwards.
• If you use Apple Wallet or Google Wallet, the identifiers those services give us so we can update your card: a code for your device and a token to send the update to. They do not tell us your name, your phone model, where you are, or anything else on your phone.
• Roughly what kind of phone you added the card on — "iPhone" or "Android" and the system version, nothing more precise.
• If you bought the card: what you paid, when, and the reference number the payment company gave the business. We never see or store your card number — you type that on the payment company's own page, not ours. If you used a discount code, which code it was.
• If the business turned it on, roughly where its own till was when a visit was recorded — to tell its branches apart. That is the location of the shop's device, not yours. We never ask your phone for its location, and we could not read it if we wanted to.

What it is used for

• Keeping your card and its balance, so it follows you if you add it again.
• Letting the business contact you about your card itself — that it was updated, or a note on the card.
• Sending you offers from that business by text, email or WhatsApp only on the channels you ticked a box for. Every one of them carries a way to stop, it applies to that channel alone, and it takes effect immediately.
• If you gave your date of birth, the business may include you in a birthday offer — on a channel you agreed to.
• If you have not been in for a while, the business may send one reminder — again, only on a channel you agreed to, and not repeatedly.
• Showing the business when it is busy, and how its branches and staff are doing. These are counts and times, not a record of any one person's movements.

Your details are not sold, and are not shared with other businesses on the service. Each business sees only its own customers.

How long it is kept

Your card and its history are kept while the card exists, because the balance is the history. Message delivery records are kept for 30 days. Wallet device identifiers are deleted when you remove the card from your Wallet, since there is then nothing to send. Abandoned purchases are cleared after an hour.

Removing your card

Deleting the card from your Wallet stops updates to it. To have your details deleted, ask the business that issued the card. You can also ask it what it holds about you, and to correct it.