Privacy
What we hold, and why we hold it.
A loyalty card is a record of somebody visiting a shop. This is what that record contains and what happens to it.
Who is responsible for what
Two relationships run through this product and they are governed differently. For the merchant who buys Stamp, we are the controller of the account data we hold about that business. For the loyalty members of that merchant, the merchant is the controller and we process on their behalf.
- Registered name
- Matias Varela Cousillas
- Company number
- not filled in yet
- Address
- 8001 Zürich, CH
What is collected
- Account data for the merchant: business name, contact name, email address, billing details.
- Loyalty data for a member: the pass identifier, the visits recorded against it, and the rewards issued.
- Technical data: the requests the service receives, kept for security and to keep the service working.
A loyalty pass does not require a customer name, an email address or a phone number, and the fields a merchant may add to one are listed in the product before they are turned on.
On what basis
Account and billing data is processed to perform the contract with the merchant and to meet Swiss accounting obligations. Loyalty data is processed on the merchant instruction, under the agreement between them and us. Technical data is processed on a legitimate interest in operating a secure service.
Who else sees it
A pass added to Apple Wallet or Google Wallet is delivered through Apple and Google respectively, and their own terms govern what the device does with it once it is there. Payment processing, hosting and email delivery are carried out by service providers under contract.
How long it is kept
Loyalty data is kept while the merchant account is open and deleted with it. Billing records are kept for the statutory retention period. Technical logs are kept for a short operational window and then discarded.
Your rights
Under the Swiss Federal Act on Data Protection, and under the GDPR where it applies, you may ask for a copy of the data held about you, ask for it to be corrected or deleted, and object to processing. A member of a merchant loyalty programme should address that request to the merchant, and we will support them in answering it.