Privacy Policy — Loyalty Tag and Loyalty Customer Apps
The Loyalty Tag and the Loyalty Customer Apps collect some personal data as part of its operation. This data is essential to its operation and you agree to its collection when you first log into the app. This data includes:
- Registered email address.
- Unique device and user identification tokens
No additional personal data from a device (i.e. contacts, phone number etc) are accessed or stored as part of the apps normal operation.
Data Storage
Data collected by the app is stored as follows:
When you register with the Loyalty Tag or Loyalty Customer apps, your email address is stored for user access to the database. The app uses services provided by Google through the Firebase database service.
Linked to the registered email is tag id data, plan stamp/points and/or currency values and a recovery word or phrase as well as non-personal data required for the program to function. The recovery word or phrase can be used by a user to recover points from a lost tag. The word/recovery phrase is not encrypted on our database and no sensitive personal information should be used. When a tag is registed, a user a tick box on the app must be ticked to indicate the user has been made aware of this. Ticking the box indicates the user is aware and is taken as consent to store the recovery work/phrase with the tag data. No personally identifiable data apart from the recovery word/phrase is stored.
When registering with the Loyalty Customer app the same personal data is stored as registering with the Loyalty Tag app. A user registers their email address and a confirmation email with verification link is sent. Once the verification link has been clicked the email is registered and can be used to participate in loyalty programs using the app.
Personal Data Deletion
You have the right to delete have your personal data deleted from the Loyalty Tag or Loyalty Customer apps and associated databases at any time. Accounts can be deleted from within the app (menu – Delete Account) at any time. Accounts can also be deleted by sending an email to info [@] dualpeaks.co.uk from the address registered to the account you wish to delete. Set the subject line to ‘DELETE DATA’ and we will delete your data typically within 1-2 weeks of receiving your request.