A full Data Processing Addendum (DPA) is available on request for merchants operating in the EU/UK/California.
Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — update inaccurate data.
- Deletion ("right to be forgotten") — request full erasure.
- Portability — receive your data as CSV or JSON.
- Restriction & objection — limit or opt out of specific processing.
- Do Not Sell/Share (CCPA) — we never sell personal data.
How to exercise them
Email privacy@loyaltychips.com with a subject line including the right you wish to exercise. We respond within 30 days. If you are a customer of a merchant using our platform, you may also contact that merchant directly — they are the controller of the data they collect.
Legal basis for processing (GDPR)
- Contract — to deliver the reward tied to a chip you scan.
- Consent — for optional email or SMS marketing by the merchant, stored separately by channel and revocable at any time.
- Legitimate interest — for platform security, fraud prevention, and aggregate analytics.