Privacy Policy

Last Updated: 30 October 2024

Welcome to the Loyal Tilly website. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we handle your personal information, in compliance with applicable data protection laws.

About Us

Loyal Tilly (“we”, “us”, or “our”) is a cardless loyalty platform enabling location-based rewards across various retailers. For any questions about this policy, please contact us at:

Personal Data We Collect

We may collect the following types of personal data:

  • Contact Information: Information provided when you contact us via our website contact forms, including your name, email address, and message content.
  • Analytics Data: Data collected by Google Analytics, such as IP address, device information, browsing actions, and usage patterns.
  • Newsletter Information: If you sign up for our newsletter, we collect your email address and relevant preferences through Mailchimp.

How We Use Your Personal Data

We use your personal data for the following purposes:

  • To respond to enquiries: Using the contact information provided in our forms to respond to your queries.
  • Analytics: We use Google Analytics to better understand visitor interactions with our site and improve user experience.
  • Newsletter Subscriptions: To send you relevant updates if you opt in to our mailing list.

Data Sharing and Disclosure

We do not share or sell your personal data to third parties. However, we rely on reputable third-party service providers for data processing:

  • Google Analytics: Used for tracking and analytics to understand website usage.
  • Mailchimp: Our email marketing provider for newsletter distribution.
  • AWS: Our app databases are hosted on Amazon Web Services (AWS), which ensures high standards of data security.

Legal Basis for Processing

We process your personal data based on your consent (e.g., signing up for our newsletter), or as required for the performance of a contract with you. Where applicable, you may withdraw your consent at any time by contacting us at info@loyaltilly.com.

Your Data Protection Rights

Under data protection laws, you have rights including:

  • Right of Access: You can request copies of your personal data.
  • Right to Rectification: You can ask us to correct information you believe is inaccurate.
  • Right to Erasure: You may ask us to delete your personal data in certain circumstances.
  • Right to Object: You have the right to object to our processing of your data.

To exercise any of these rights, please contact us at info@loyaltilly.com.

Data Security

We are committed to securing your data. While we rely on third-party providers (such as AWS, Google Analytics, and Mailchimp) to uphold data protection, we strive to ensure that all partnerships maintain high levels of security in handling personal data.

Retention of Personal Data

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or as required by law.

Policy Updates

This privacy policy is kept under regular review to reflect any updates to our services or data handling practices. Please refer to this page for the latest version of our privacy policy.

Data Storage, International Transfers and AI Processing

Data Storage

Our primary application data is hosted using Google Cloud Platform (Google Cloud). Our production infrastructure is located in Google Cloud’s europe-west1 region in Belgium.

This infrastructure may store and process information relating to both retailers using our platform and customers who interact with participating retailers. Our users may be located in Ireland, the United Kingdom, and other jurisdictions.

Use of Artificial Intelligence Services

Certain features of our platform use artificial intelligence services provided by OpenAI. To provide these features, we may transmit limited information to OpenAI for processing.

For retailer users, this may include retailer-related information that is necessary to provide the relevant AI-powered functionality.

Where customer information is processed using OpenAI, we minimise the information transmitted and remove direct identifiers before it is sent. Customer information sent to OpenAI for these purposes does not directly identify individual customers.

OpenAI acts as a service provider/data processor in connection with our use of its API services. Information processed through OpenAI may be processed outside the country in which the user is located. Where required by applicable data protection law, appropriate safeguards are used for international transfers of personal data.

We do not use OpenAI to make solely automated decisions that produce legal or similarly significant effects for customers unless we specifically inform users otherwise.

International Data Transfers

Although our primary application infrastructure is hosted in Belgium, some of the third-party service providers we use may process information in other countries.

Where personal data originating in the European Economic Area or the United Kingdom is transferred to a country that is not recognised as providing an adequate level of data protection, we rely on appropriate safeguards where required, such as the European Commission’s Standard Contractual Clauses or the applicable UK international data transfer safeguards.

We take reasonable steps to ensure that service providers processing personal data on our behalf provide appropriate protections for that information.

Contact Us

If you have any questions or concerns about this policy, please contact us at info@loyaltilly.com.