Privacy Policy

Welcome to The Loyalty Club ("TLC"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services. Our goal is to provide a simple, effective digital loyalty platform for local businesses while respecting your privacy.

This service is operated by The Loyalty Club, which is a trading name of BEYONDSERVICEAI LTD, a company registered in England and Wales.

This policy applies to all users of our services, including the businesses who subscribe to our platform ("Merchants") and their customers who participate in the loyalty programs ("End-Customers").

Platform: The TLC digital loyalty system, including the WhatsApp service, merchant dashboard, and related technologies.

Merchant: A business that subscribes to the TLC Platform to offer a loyalty program to its customers.

End-Customer: An individual who participates in a Merchant's loyalty program by scanning a QR code or tapping an NFC tag and interacting with the TLC Platform via WhatsApp.

We collect different types of information depending on whether you are a Merchant or an End-Customer.

3.1. Information We Collect from Merchants

When you sign up as a Merchant, we collect information necessary to provide you with our service:

3.2. Information We Collect from End-Customers

When you participate in a loyalty program as an End-Customer, we collect information solely to operate that program:

3.3. Information We Collect Automatically

When you visit our website (the-loyalty-club.com) or use our dashboard, we may collect technical information automatically:

Our use of your data is strictly tied to providing and improving the TLC Platform.

We process personal data based on the following legal grounds:

Performance of a Contract: Most of our data processing is necessary to fulfill our contractual obligations to our Merchants (to provide the loyalty platform) and to provide the loyalty service requested by End-Customers.

Legitimate Interests: We process some data for our legitimate interests, such as for security monitoring, fraud prevention, and analysing service usage to make improvements. We only do this when our interests are not overridden by your data protection rights.

Consent: When you, as an End-Customer, choose to scan a QR code and send the initial WhatsApp message, you consent to us processing your information to provide the loyalty service. You also provide consent when you optionally choose to add the pass to your digital wallet.

We do not sell your personal data. To provide our Platform, we rely on a number of trusted third-party companies who act as our service providers and sub-processors. These companies are essential for running our service, for example by providing the physical servers, database infrastructure, and payment processing. We only share the minimum information necessary for them to perform their function.

Our key third-party providers include:

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected.

Merchant Data: We retain Merchant data for as long as you have an active account with us and for a reasonable period thereafter to comply with legal and accounting obligations.

End-Customer Data: We retain your stamp and voucher data for as long as you are an active participant in a loyalty program. If a Merchant cancels their subscription, the associated End-Customer data will be scheduled for deletion. You can also request the deletion of your data at any time (see Section 8).

Under UK law, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at stevenkyeesa@live.com. We will respond to your request within one month.

Some of our third-party processors (such as Stripe, Twilio, Supabase, and Vercel) may be based outside the UK. When we transfer your data internationally, we ensure it is protected through legally-recognised mechanisms such as the UK's adequacy decisions or Standard Contractual Clauses (SCCs), which guarantee a similar level of data protection to that in the UK.

We take the security of your data very seriously. We implement robust technical and organisational measures to protect it, including:

The Loyalty Club platform is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it as soon as possible.

Our website and dashboard may use "strictly necessary" cookies to provide core functionality, such as keeping you logged in. We may also use analytical cookies to understand how our services are used so we can improve them. You can manage your cookie preferences through your browser settings.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please do not hesitate to contact us.