Privacy Policy

1. Introduction

Feedloopy (“Feedloopy”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Feedloopy platform, available at www.feedloopy.com and app.feedloopy.com, and all associated QR-powered experiences and services (the “Service”).

Please read this Policy carefully. By using the Service, you acknowledge you have read and understood it.

2. Data Controller Information

The data controller responsible for your personal data is:

If you have any questions about how we handle your data, or wish to exercise your rights, please contact us at the address above.

3. Information We Collect

We may collect and process the following categories of personal data:

• Identity data: First name, last name.
• Contact data: Email address, phone number.
• Demographic data: Date of birth.
• Location data: Approximate location inferred from QR code interactions or device settings.
• Device and technical data: IP address, browser type, device identifiers, operating system.
• Usage data: How you interact with the Service, pages visited, features used, timestamps.
• QR interaction data: Scans, QR codes used, associated business and location.
• Loyalty and engagement data: Points accumulated, stamps, rewards earned and redeemed, programme participation history.
• Content data: Reviews, ratings, survey responses, and feedback you submit.
• Transactional data: Records of purchases or receipts submitted as part of participation flows.

4. How We Collect Information

• Directly from you when you register, participate in campaigns, or contact us.
• Through platform usage as you navigate and interact with the Service.
• Through QR code interactions when you scan a Feedloopy-powered QR code at a participating business.
• Through participating businesses who may share relevant customer data with us in accordance with their own privacy notices and applicable law.
• Through cookies and tracking technologies as described in Section 11 below.

5. Purposes of Processing

We process your personal data for the following purposes:

• Creating and managing your account and user profile.
• Administering loyalty programmes, stamps, and reward fulfilment.
• Enabling participation in sweepstakes, giveaways, and instant reward experiences.
• Processing and validating receipts and purchases.
• Providing customer support and responding to enquiries.
• Analysing usage to improve the Platform and user experience.
• Detecting and preventing fraud, abuse, and security incidents.
• Sending transactional communications related to your account or participation.
• Sending marketing communications where you have provided consent or where a legitimate interest applies.
• Complying with legal obligations.

6. Legal Bases for Processing (GDPR Article 6)

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide the Service, manage your account, and fulfil rewards.
• Legitimate interests (Art. 6(1)(f)): Fraud prevention, platform security, analytics, and improving the Service, where such interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies, where we have obtained your prior consent.
• Legal obligation (Art. 6(1)(c)): Where processing is required to comply with applicable laws or regulations.

7. Sharing of Information

We may share your personal data with:

• Participating businesses: To enable loyalty programme administration, reward fulfilment, and campaign participation. Businesses receive only the data necessary for these purposes.
• Service providers: Third-party vendors who assist us in operating the Platform (e.g. cloud hosting, email delivery, analytics), under strict data processing agreements.
• Analytics providers: To help us understand usage patterns and improve the Service.
• Legal authorities: Where required by law, court order, or to protect the rights and safety of Feedloopy or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to equivalent protections.

We do not sell your personal data to third parties for their own marketing purposes.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms in accordance with GDPR Chapter V.

9. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. In general:

• Account data is retained for the duration of your relationship with Feedloopy and for a reasonable period thereafter.
• Loyalty and engagement data is retained in accordance with the relevant programme rules.
• Legal and compliance records are retained for the periods required by applicable law.

When data is no longer required, we securely delete or anonymise it.

10. Your Rights Under GDPR

If you are located in the EEA or the UK, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal obligations.
• Right to restriction: Request that we restrict the processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@feedloopy.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and analyse usage. These may include:

• Essential cookies: Required for the Service to function. Cannot be disabled.
• Analytics cookies: Help us understand how users interact with the Platform.
• Functional cookies: Remember your preferences and settings.

Where required by law, we will request your consent before placing non-essential cookies. You may withdraw consent or manage cookie preferences at any time through your browser settings.

12. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you become aware that a child has provided us with personal data without consent, please contact us and we will take steps to delete such information promptly.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, through in-app or email notification. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.

15. Contact Information

For any privacy-related questions, requests to exercise your rights, or concerns, please contact: