The Loyalty Club

Privacy Policy

Your privacy matters. Here's how we protect it.

Last updated: 21 January 2026

1. Introduction

Welcome to The Loyalty Club ("TLC"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services. Our goal is to provide a simple, effective digital loyalty platform for local businesses while respecting your privacy.

This service is operated by The Loyalty Club, which is a trading name of BEYONDSERVICEAI LTD, a company registered in England and Wales.

Company Name: BEYONDSERVICEAI LTD
Company Number: 15915040
Registered Office: 12 Trindles Road, South Nutfield, Redhill, England, RH1 4JN

This policy applies to all users of our services, including the businesses who subscribe to our platform ("Merchants") and their customers who participate in the loyalty programs ("End-Customers").

2. Definitions

Platform: The TLC digital loyalty system, including the WhatsApp service, iOS App Clip, merchant dashboard, and related technologies.

Merchant: A business that subscribes to the TLC Platform to offer a loyalty program to its customers.

End-Customer: An individual who participates in a Merchant's loyalty program by scanning a QR code, tapping an NFC tag, or interacting with the TLC Platform via WhatsApp or our App Clip.

App Clip: Our iOS App Clip that allows End-Customers to collect loyalty stamps instantly without downloading a full app.

3. What Information We Collect

We collect different types of information depending on whether you are a Merchant or an End-Customer.

3.1. Information We Collect from Merchants

When you sign up as a Merchant, we collect information necessary to provide you with our service:

Account Information: Your name, email address, phone number, and business name.
Business Profile Information: Information you provide to customize your loyalty program, such as your business logo, brand colours, and background images for your digital stamp cards.
Payment Information: We use the third-party payment processor Stripe to handle all subscription payments. We do not store your full credit card details on our servers. Stripe processes your payment details on our behalf and provides us with information such as your billing details and a token representing your account.
Usage Data: Information about how you interact with the TLC dashboard, such as login times and features used.

3.2. Information We Collect from End-Customers

When you participate in a loyalty program as an End-Customer, we collect information solely to operate that program:

Phone Number: Your mobile phone number, used to identify your loyalty account. This is collected when you use our App Clip or send a WhatsApp message.
Loyalty Program Data: A record of your stamps earned, rewards collected, and vouchers issued for each Merchant's program you participate in. This includes the date and time of each stamp.
Device Information: When using our App Clip, we collect basic device identifiers to provide security and prevent fraud. This does not include your name or other identifying information beyond your phone number.
Digital Wallet Information: If you choose to add your loyalty card to Apple Wallet, we generate a unique digital pass. To update this pass, we may collect and store a push token and serial number associated with the pass. We do not access any other information in your digital wallet.

3.3. Information We Do NOT Collect

We want to be clear about what we do NOT collect from End-Customers:

Location Data: We do not track your location or collect GPS data. We only know which store you visited based on which Merchant's NFC tag or QR code you scanned.
Browsing History: We do not track websites you visit outside our service.
Contacts: We do not access your phone contacts.
Photos/Media: We do not access your photos, camera roll, or media files.

3.4. Information We Collect Automatically

When you visit our website (the-loyalty-club.com) or use our dashboard, we may collect technical information automatically:

Log Data: IP address, browser type, operating system, and pages visited. This helps us monitor, secure, and improve our services.

4. How We Use Your Information

Our use of your data is strictly tied to providing and improving the TLC Platform.

4.1. For Merchants

To create and manage your account
To process your subscription payments via Stripe
To allow you to create and customise your visual loyalty cards
To provide you with the merchant dashboard to track and approve stamps
To communicate with you about service updates, support, and billing

4.2. For End-Customers

To create and manage your digital stamp card for a specific Merchant
To send you real-time confirmations and updates on your stamp progress via WhatsApp, including visual stamp card images
To automatically issue a digital voucher when you have collected the required number of stamps
To update your loyalty pass in your Apple Wallet when a new stamp is approved
To enable Merchants to validate your stamps and redeem your vouchers
To prevent fraud and abuse of the loyalty system

6. Who We Share Your Information With

We do not sell your personal data. To provide our Platform, we rely on a number of trusted third-party companies who act as our service providers and sub-processors. These companies are essential for running our service, for example by providing the physical servers, database infrastructure, and payment processing. We only share the minimum information necessary for them to perform their function.

Our key third-party providers include:

The Merchant: As an End-Customer, your phone number and stamp history are visible to the Merchant whose loyalty program you have joined, so they can manage stamp approvals and voucher redemptions.
Stripe: We use Stripe for processing all subscription payments from Merchants.
Twilio: We use Twilio's API to power our WhatsApp communications. Twilio processes your phone number and message content to send and receive messages on our behalf.
Supabase: Our core infrastructure, including our databases, user authentication systems, and file storage (for logos and card backgrounds), is hosted with Supabase.
Vercel: Our website and merchant dashboard application are hosted on Vercel's servers.
Apple: If you use the digital wallet feature, data is exchanged with Apple to create and update your loyalty pass.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected.

Merchant Data: We retain Merchant data for as long as you have an active account with us and for a reasonable period thereafter to comply with legal and accounting obligations.

End-Customer Data: We retain your stamp and voucher data for as long as you are an active participant in a loyalty program. If a Merchant cancels their subscription, the associated End-Customer data will be scheduled for deletion. You can also request the deletion of your data at any time (see Section 8).

Inactive Accounts: If you have not participated in any loyalty program for 24 months, we may delete your account and associated data.

8. Your Data Protection Rights

Under UK law, you have the following rights regarding your personal data:

The right to be informed: To know how we use your data (which is the purpose of this policy).
The right of access: To request a copy of the personal data we hold about you.
The right to rectification: To request that we correct any inaccurate or incomplete data.
The right to erasure (the "right to be forgotten"): To request that we delete your data.
The right to restrict processing: To request that we limit the way we use your data.
The right to data portability: To request your data in a machine-readable format.
The right to object: To object to our processing of your data for certain purposes.

How to Exercise Your Rights:

To exercise any of these rights, please contact us at support@the-loyalty-club.com. We will respond to your request within one month.

Deleting Your Data:

If you wish to delete all your loyalty data and stop participating in all programs, you can request this by emailing support@the-loyalty-club.com with the subject "Data Deletion Request" and including your phone number. We will process your request within 30 days.

Note: Deleting your data will remove your stamps, vouchers, and participation history across all Merchants. This action cannot be undone.

9. International Data Transfers

Some of our third-party processors (such as Stripe, Twilio, Supabase, and Vercel) may be based outside the UK. When we transfer your data internationally, we ensure it is protected through legally-recognised mechanisms such as the UK's adequacy decisions or Standard Contractual Clauses (SCCs), which guarantee a similar level of data protection to that in the UK.

10. Security of Your Data

We take the security of your data very seriously. We implement robust technical and organisational measures to protect it, including:

Row-Level Security (RLS) in our database to ensure Merchants can only access their own data
End-to-End Encryption for communications where provided by WhatsApp
Secure Webhook Verification to ensure stamp requests are authentic
JWT-based Authentication for secure access to the merchant dashboard
Use of proven, secure cloud infrastructure
Regular security reviews and updates

11. Children's Privacy

The Loyalty Club platform is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it as soon as possible.

12. Cookies and Tracking Technologies

Our website and dashboard may use "strictly necessary" cookies to provide core functionality, such as keeping you logged in. We may also use analytical cookies to understand how our services are used so we can improve them. You can manage your cookie preferences through your browser settings. For more details, please see our Cookie Policy.

13. Merchant Data Responsibilities

Important Note for End-Customers:

When you participate in a Merchant's loyalty program, the Merchant may have their own privacy policy and data practices. We encourage you to review each Merchant's privacy policy.

The Loyalty Club acts as a "data processor" on behalf of Merchants for End-Customer loyalty data. Each Merchant is a "data controller" for their own customers' data collected through their loyalty program.

If you have concerns about how a specific Merchant handles your data through their loyalty program, you should contact that Merchant directly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please do not hesitate to contact us.

Email: support@the-loyalty-club.com
Legal Entity: BEYONDSERVICEAI LTD
Address: 12 Trindles Road, South Nutfield, Redhill, England, RH1 4JN

Questions About Privacy?

We're here to help with any privacy questions or concerns

Contact Us