ReWardy Points LTD - UK GDPR Notice/Policy

Last Updated: 11/2023

1. Introduction

ReWardy Points LTD (hereinafter referred to as "we," "us," or "our") is committed to ensuring the privacy and security of personal data. This notice outlines our approach to data protection in compliance with the General Data Protection Regulation (GDPR) applicable in the United Kingdom.

2. Data Controller

ReWardy Points LTD is the data controller responsible for the processing of personal data obtained through our loyalty and reward scheme.

3. Types of Data Collected

We collect and process personal data necessary for the operation of our loyalty and reward scheme. This may include, but is not limited to, the following:

- Customer names

- Contact details (email, phone number, address)

- Transaction history

- QR Code usage data

4. Legal Basis for Processing

We process personal data based on the legal bases outlined in Article 6 of the GDPR, including the necessity of processing for the performance of a contract and compliance with legal obligations.

5. Purposes of Processing

We process personal data for the following purposes:

- Administering and managing our loyalty and reward scheme

- Providing customer support

- Ensuring the security of our digital QR Code system

- Complying with legal obligations

6. Data Security Measures

We implement appropriate technical and organizational measures to ensure the security of personal data, including encryption, access controls, and regular security assessments.

7. Data Sharing and Disclosure

We may share personal data with third-party service providers only when necessary for the fulfillment of our services. We ensure that these third parties comply with data protection laws.

8. Data Retention

Personal data is retained only for as long as necessary for the purposes outlined in this notice or as required by applicable laws. We have defined retention periods for different categories of data.

9. Data Subject Rights

Data subjects have the right to access, rectify, and erase their personal data. They also have the right to object to processing and the right to data portability. Requests can be made by submitting a support ticket.

10. Changes to this Notice

We reserve the right to update this notice to reflect changes in our data processing practices. Any updates will be communicated to data subjects.

11. Contact Information

For any inquiries related to data protection or to exercise your rights under the GDPR, please contact us by submitting a support ticket.