LoopyLoopyHome

Privacy Policy

Last updated 9 July 2026

GDPR & UK GDPR aligned

1. Who we are

Loopy ("we", "us") operates a digital loyalty wallet that lets guests collect stamps and rewards from participating restaurants and cafés. This policy explains what personal data we collect, how we use it, and the rights you have over it.

2. Data we collect

  • Account data — email, name, and optionally date of birth for the birthday club.
  • Loyalty activity — the brands you join, stamps you collect (with time and location) and rewards you earn or redeem.
  • Device data — basic technical information (browser, IP, session) needed to keep you signed in and to prevent fraud.
  • Communications — messages you send us and your notification preferences.

3. How we use your data

  • To run your account, wallet, stamps and rewards.
  • To share stamp and reward activity with the Brand whose card you have joined, so they can honour your rewards.
  • To send transactional messages (reward ready, expiring soon, security alerts) and, with your consent, marketing from a Brand you follow.
  • To detect and prevent fraud or abuse of loyalty programmes.
  • To improve the product and produce anonymous, aggregated analytics.

4. GDPR & UK GDPR — legal bases

We rely on: performance of contract (running your account), legitimate interests (security, product improvement), consent (marketing communications, optional birthday data) and legal obligation (tax, fraud, regulatory requests).

5. Sharing your data

We share personal data only with:
  • The Brand whose loyalty card you have joined, limited to your loyalty activity with them.
  • Trusted infrastructure providers (hosting, database, email delivery, payments) acting as processors on our behalf.
  • Authorities where required by law.
We never sell your personal data.

6. Retention

We keep account and loyalty data for as long as your account is active. If you delete your account, we remove or anonymise your personal data within 30 days, except where we must retain records to comply with legal obligations (e.g. accounting, fraud).

7. Your rights

You can access, correct, export or delete your data at any time from your profile, or by emailing us. See how to delete your account for step-by-step instructions. UK/EU users additionally have the right to object to or restrict processing, and to complain to their local data-protection authority (in the UK, the ICO).

8. Cookies

We use only the cookies and local-storage entries needed to keep you signed in and to operate the service. We do not use third-party advertising cookies.

9. International transfers

Some of our processors operate outside your country. When personal data is transferred, we rely on appropriate safeguards (such as the UK IDTA or EU Standard Contractual Clauses).

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified in the app or by email.

11. Contact

For privacy questions or to exercise your rights, email privacy@loopyrewards.com.