Privacy Policy

LOYO Rewards acts as an operator (processor) on behalf of participating shops, and as a responsible party for its own platform accounts. Each participating shop is the responsible party for the loyalty data of its own customers. Our information officer can be reached at support@loyorewards.app.

• Account information: name, surname, email address and password (stored in encrypted form).
• Optional profile information: mobile number, town or city, date of birth (used for birthday rewards) and, where you choose to provide it, your South African ID number for identity verification at participating shops.
• Loyalty information: your unique loyalty code, points balances, scans, rewards earned and redeemed, and the shops you are a member of.
• Business account information: shop name, trading address, contact details, logo, and staff or manager email addresses.
• Technical information: device and browser information and log data necessary to keep the service secure.

We do not collect payment card details for loyalty transactions. All purchases are paid for in-store, directly with the participating shop.

We process your personal information to create and manage your account, issue and scan your loyalty code, award and redeem points and rewards, deliver birthday gifts where a shop offers them, show you promotions from shops you belong to, provide shops with aggregated analytics on their own loyalty programme, prevent fraudulent point claims, and comply with South African law.

Our lawful bases under POPIA include your consent (which you may withdraw at any time), the performance of our agreement with you, our legitimate interests in operating and securing the platform, and compliance with legal obligations.

Your South African ID number and date of birth are optional and are used only for verification and birthday rewards. LOYO Rewards is not intended for children under 18. Where a child uses the service, a parent or guardian must provide consent, and we will delete any child's information on request.

• The participating shops where you have joined a loyalty programme — they can see your name, loyalty code, points, rewards and, where provided, contact details and birthday.
• Service providers who host, secure and operate the platform on our behalf, including cloud hosting and, where a shop enables it, Google Sheets for that shop's own analytics export.
• Law enforcement or regulators where required by law.

We do not sell your personal information to third parties.

Some of our service providers store data on servers outside South Africa. Where information is transferred cross-border, we take reasonable steps to ensure it receives a level of protection substantially similar to POPIA, as required by section 72 of POPIA.

We apply appropriate technical and organisational safeguards, including encrypted connections, password hashing and role-based access controls, so that shop staff only see the data of their own shop. We keep your information for as long as your account is active, and thereafter only as long as required for legal, accounting or dispute-resolution purposes.

You have the right to access the personal information we hold about you, to request correction or deletion, to object to processing, to withdraw consent, and to lodge a complaint. You can update your details and delete your account from your profile in the app, or contact us at support@loyorewards.app.

You may also complain to the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, or by email to complaints.IR@justice.gov.za.

We may update this Privacy Policy from time to time. Material changes will be communicated in the app or by email, and the "last updated" date above will change.