Privacy Policy

Privacy Policy

This Privacy Policy explains how Gurkha Loyalty collects, uses and protects personal information when you use our website and platform. It applies to business users of the platform and to the customers whose data merchants store with us.

1. Information we collect

• Account details such as your name, email address, phone number, business name and billing information.
• Programme data you store with us, such as customer names, contact details, points, stamps and redemption history.
• Payment information, which is processed securely by our third-party payment providers and never stored in full on our systems.
• Usage data such as IP address, browser type, device information, pages visited and actions taken in the platform.

2. How we use your information

• To provide, maintain and improve the platform and its features.
• To process transactions, issue receipts and send service-related messages.
• To communicate product updates, security alerts and support responses.
• To detect, prevent and address fraud, abuse and security threats.
• To comply with legal and regulatory obligations.

3. Legal bases for processing

Where the UK and EU GDPR apply, we rely on one or more of the following bases: performance of a contract with you, our legitimate interests in operating and securing the platform, compliance with a legal obligation, and your consent where it has been given.

4. How we share information

We only share personal information with:

• service providers who help us operate the platform, such as hosting, payment, email and analytics partners, under written data processing agreements;
• professional advisers, regulators or law enforcement where we are legally required to do so;
• a new owner of the business, if we are involved in a merger, acquisition or asset sale.

We never sell your personal information.

5. Cookies and similar technologies

We use essential cookies to keep you signed in and to remember your preferences, and optional analytics cookies to understand how the platform is used. You can control optional cookies through your browser settings.

6. Data retention

We keep personal information for as long as your account is active and for the period afterwards that is required for accounting, tax or legal purposes. Merchant customer data is retained according to the merchant's instructions and is deleted when a merchant closes their account, subject to any legal holds.

7. Data security

We protect information using encryption in transit and at rest, role-based access controls, logging and monitoring, regular security reviews and secure, audited data centres.

8. International transfers

Some of our service providers operate outside the UK and the EEA. Where personal information is transferred internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.

9. Your rights

Depending on your location, you may have the right to access, correct, export, restrict or delete your personal information, to object to certain processing, and to withdraw consent at any time. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner's Office.

10. Children's privacy

The platform is intended for business use and is not directed at children under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the date shown above, and we will notify you of material changes where required by law.

12. Contact us

Questions about this Privacy Policy can be sent to [email protected], or by post to Gurkha Loyalty, 182-184 High Street North, London, E6 2JA.