Legal · GDPR

A simple GDPR overview for Loyaltree.

This page explains in plain language how Loyaltree relates to GDPR, data rights, and privacy requests. For full details, read the Privacy Policy, Terms, and Cookies notice.

GDPR
Note

A plain-language overview for transparency, not legal advice or a replacement for agreements.

Roles

Loyaltree’s role depends on the use case.

What matters is who decides why and how personal data is used. For a business loyalty program, the business usually has the main control. For the website, accounts, security, support, and billing, Loyaltree usually has its own role.

Controller

When Loyaltree decides why data is used

For the website, owner sign-up, account security, billing support, and direct contact requests, Loyaltree usually has its own role in the processing.

Processor

When a business runs the loyalty program

For loyalty programs run by a business, the business usually has the main control and Loyaltree processes data on its behalf.

Rights

Data rights in plain language.

Depending on the case, you may have rights to access, correct, delete, or take another action with your personal data. How those rights apply depends on the type of data, identity verification, and legal requirements. More detail is available in the Privacy Policy.

Access
Rectification
Erasure
Restriction
Objection
Portability
Withdraw consent
Complain to a supervisory authority
Data use

Data is used to run the service.

Loyaltree may process data for accounts, wallet passes, scans, rewards, store locations, notifications, billing, support, and security.

01

Account and business setup

User accounts, business details, access roles, subscription records, and basic service settings.

02

Loyalty program operation

Wallet passes, points, rewards, scans, redemptions, guest cards, and customer activity.

03

Service communication

Verification messages, invites, billing updates, support replies, and notifications configured by the business.

04

Security and reliability

Account sign-in, session protection, abuse prevention, technical checks, and incident handling.

Responsibility

Practical measures, partners, and requests.

§

Processing terms

The Terms include a summary for cases where Loyaltree processes data on behalf of a business.

§

Service partners

Loyaltree uses providers for hosting, account sign-in, storage, email, billing, wallet passes, and abuse protection.

§

Data requests

For privacy requests, you can contact support@loyaltree.io. If the request concerns a specific business loyalty program, that business may need to be involved.

Have a privacy or GDPR question?

Send us the context and we will route the request to the right privacy, support, or business path.