GDPR & CCPA

Last updated: April 21, 2026 · Pilot-stage draft.

Pilot-stage draft. A full Data Processing Addendum (DPA) is available on request for merchants operating in the EU/UK/California.

Your rights

Access — request a copy of the personal data we hold about you.
Correction — update inaccurate data.
Deletion ("right to be forgotten") — request full erasure.
Portability — receive your data as CSV or JSON.
Restriction & objection — limit or opt out of specific processing.
Do Not Sell/Share (CCPA) — we never sell personal data.

How to exercise them

Email privacy@loyaltychips.com with a subject line including the right you wish to exercise. We respond within 30 days. If you are a customer of a merchant using our platform, you may also contact that merchant directly — they are the controller of the data they collect.

Legal basis for processing (GDPR)

Contract — to deliver the reward tied to a chip you scan.
Consent — for SMS/email marketing by the merchant (revocable at any time).
Legitimate interest — for platform security, fraud prevention, and aggregate analytics.