Last updated: 6 March 2026 · Effective: 6 March 2026
The short version: We collect only the data needed to run your loyalty program. We never sell your data or your members' data to third parties. You own your data and can export or delete it at any time.
Keeper Loyalty Ltd ("we", "us", "our") is the data controller for personal data collected through our merchant platform. We are based in London, United Kingdom.
Account data (merchants):
Usage data:
We use your data to:
We will only send marketing emails if you have explicitly opted in, and you can unsubscribe at any time.
When your customers join your loyalty program, they provide data (name, phone number, email) directly to you through your join page. You are the data controller for this data. We process it only as your data processor.
As a merchant using our platform, you are responsible for:
We provide you with tools to export and delete member data at any time from your dashboard.
We do not sell, rent, or share your data or your members' data with third parties for their marketing purposes.
We work with a limited number of trusted service providers:
All processors are bound by data processing agreements and may only use your data to provide their service to us.
We retain your account data for as long as your account is active. If you cancel, your data is retained for 30 days during which you can reactivate or export, then permanently deleted.
Member data (your customers) is retained until you delete it or close your account. You can delete individual members or all member data at any time from your dashboard.
We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and access controls. Passwords are hashed using a strong one-way algorithm.
However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at security@businessloyaltycards.com.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email us at privacy@businessloyaltycards.com. We will respond within 30 days.
We use essential cookies to keep you logged in and maintain your session. We do not use advertising or tracking cookies.
You can disable cookies in your browser settings, but this may affect the functionality of the dashboard.
Our Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice in your dashboard at least 14 days before the changes take effect.
For privacy-related questions or to exercise your rights:
If you are in the UK or EU and are not satisfied with our response, you have the right to lodge a complaint with your supervisory authority (in the UK: the ICO at ico.org.uk).