Information processed
LoyalFlow processes account and business information needed to operate a workspace, including user identity, roles, business settings, branches, programme rules, and configuration. Customer loyalty records may include name, phone number, membership details, balances, visits, rewards, offers, referrals, and activity history. Technical security and operational records may also be processed to protect access and diagnose service issues.
Why information is used
Information is used to provide the requested loyalty service, authenticate users, enforce role and tenant boundaries, operate cards and rewards, maintain activity evidence, deliver configured account emails, support users, protect the service, and improve reliability. LoyalFlow does not currently claim an activated marketing-analytics or advertising-tracking provider.
Service providers and access
Access is limited according to the user's role and business workspace. Infrastructure, database, cache, hosting, storage, and configured email providers may process the minimum information required to deliver their service. A final subprocessor disclosure will be published only after the production provider set and legal identity are approved.
Cookies and local device storage
The current product uses necessary session and security mechanisms, a bounded language preference, and limited presentation preferences. Customer-card features may store limited device state, such as dismissed new-item notices or install guidance, to avoid repeated prompts. A marketing cookie banner will be added only if the final analytics or advertising tooling requires one.
Retention and deletion
Records are retained while needed to operate the workspace, preserve authorised activity history, meet security needs, or satisfy applicable obligations. Business deletion and scoped customer export exist. Individual customer records currently support editing and deactivation/reactivation; a final erasure or anonymisation policy remains an owner and legal decision before public launch.
Questions and data requests
Customers should first contact the business whose loyalty programme they joined because that business controls its customer relationship and programme rules. Business users can use the published LoyalFlow support path for account or workspace requests. The final legal and privacy email will appear here only after it is verified and approved.