Loopy Loyalty In-App Privacy Notice

1. Who is responsible for your data?

Your digital loyalty pass (for example, a digital stamp card in Apple Wallet or Google Wallet) is issued by the merchant or business you received it from (the "Merchant"). They decide why and how your loyalty data is used.

Loopy Loyalty is a loyalty service operated by PassKit. Loopy Loyalty provides the technology that powers the pass. When we handle your loyalty data, we do so on behalf of the Merchant and only according to their instructions. In data protection terms, the Merchant is the "controller" and Loopy Loyalty/PassKit is a "processor" or "service provider".

2. What information is processed?

When you add and use a digital loyalty pass powered by Loopy Loyalty, the following types of information may be processed:

• Pass identifier stored on your device (a unique ID for your loyalty pass).

• Stamp / visit history (for example, how many stamps you have and when they were added).

• Reward information (for example, when a reward is unlocked or redeemed).

• Date and time of loyalty activity (such as stamps or redemptions).

• Non-personal technical information needed to deliver and update the pass (such as device type or wallet platform).

Loopy Loyalty/PassKit does not collect payment card numbers or other sensitive financial information through your loyalty pass. Any payment you make to the Merchant is handled through their chosen payment provider, not through Loopy Loyalty.

3. Why your data is processed

Your loyalty data is processed for purposes such as:

• Running the loyalty programme - tracking your stamps or visits.

• Issuing and managing rewards - unlocking and redeeming rewards when criteria are met.

• Fraud prevention and security - helping prevent misuse or manipulation of the programme.

• Service operation and improvement - keeping the loyalty service running reliably and improving it over time.

• Communications from the Merchant - contacting you about the loyalty programme, but only where the Merchant has permission to do so.

Loopy Loyalty/PassKit may use aggregated or de-identified information (which does not identify you personally) to analyse service performance and improve the platform.

4. How long your data is kept

Loyalty data is kept for as long as needed to operate the Merchant's loyalty programme or as required by law. This typically means:

• While your loyalty pass is active on your device.

• For a reasonable period after your last activity, as determined by the Merchant's policy.

The Merchant may ask Loopy Loyalty/PassKit to delete or anonymise loyalty data in line with their own retention rules and legal obligations.

5. Your privacy rights

Your privacy rights (for example, rights of access, correction, deletion or objection) depend on the laws that apply where you live, such as GDPR/UK GDPR or US state privacy laws.

Because the Merchant is responsible for the loyalty programme, you should contact the Merchant who issued your pass to exercise your rights regarding loyalty data.

When the Merchant forwards a valid request to Loopy Loyalty/PassKit, we will support them as required under our agreement and applicable law.

6. Who to contact

For questions about your loyalty pass, stamps or rewards:
Please contact the Merchant who issued your pass. Their contact details should be available on the pass, in-store, or on their website.

For questions about Loopy Loyalty/PassKit’s role as a processor:

PassKit - Loopy Loyalty Privacy Team
Email: privacy@loopyloyalty.com

7. About Loopy Loyalty

Loopy Loyalty is a digital stamp card and loyalty pass platform operated by PassKit. If you run a business and would like to create similar digital loyalty passes for your own customers, you can learn more at loopyloyalty.com.