1. Who we are
Loytap is a digital loyalty platform for cafés, operated by Hilvy.io. In this policy, “Loytap”, “we”, “us” and “our” refer to the operator of the Loytap website and service.
For website enquiries, Loytap account administration, billing, security and our own service communications, Loytap acts as the data controller. You can contact us at info@loytap.com.
2. Information we collect
Information you give us
- Contact details such as your name, email address and optional phone number.
- Business details such as café name, business type, location and setup requirements.
- Messages, support requests, feedback and any information you include in them.
- Account, subscription and billing information when you become a Loytap customer.
- Details submitted when you ask to claim or correct a café directory listing.
Information handled through a café loyalty programme
Depending on how a café configures Loytap, the service may handle a loyalty member’s name, email address, account identifier, stamp and reward progress, visit history, reward redemptions, message preferences and interactions with loyalty messages.
Technical and directory information
We may process basic device, browser, log and security information needed to deliver and protect the service. Our café directory may also contain business information collected from café owners, public websites and other publicly available sources. Information about an identifiable sole trader, employee or owner may still be personal information.
3. How we use information
We use information only where we have a lawful reason to do so. Depending on the context, that is usually to perform a contract, take steps requested before a contract, pursue our legitimate interests in operating and improving Loytap, comply with law, or act on consent where consent is required.
- Set up and administer café accounts, loyalty cards, rewards and subscriptions.
- Add stamps, track reward progress and show cafés useful loyalty activity.
- Help cafés find members, understand repeat visits and contact relevant groups.
- Reply to enquiries, provide support and verify café directory claims.
- Deliver service messages, maintain security, prevent misuse and troubleshoot problems.
- Understand overall website and service performance and improve Loytap.
- Meet accounting, legal, regulatory and record-keeping requirements.
We do not make solely automated decisions that have legal or similarly significant effects. Loytap may automatically place loyalty members into practical groups such as “almost there” or “dormant” based on stamp and visit activity. These groups help a café decide who it may wish to contact; the café remains responsible for the message and decision to send it.
4. Café loyalty data
A participating café normally decides why and how its customer loyalty information is used. That café is the data controller for its loyalty programme, and Loytap processes the information on the café’s instructions to provide the service.
If you are a loyalty member and want to access, correct or delete information connected to a particular café, contact that café first. We will support the café in responding where required. Each café is responsible for providing its own privacy information, choosing a lawful basis for customer messages, respecting opt-outs and using Loytap lawfully.
6. How long we keep information
We keep information only for as long as it is needed for the purpose it was collected, including providing the service, responding to an enquiry, maintaining security, resolving disputes and meeting legal or accounting duties.
The exact period depends on the type of information, the café’s instructions, whether an account remains active and any legal retention requirement. When information is no longer needed, we delete it, anonymise it or securely isolate it until deletion is possible.
7. Your rights
Depending on the circumstances, UK data protection law may give you the right to:
- ask for a copy of your personal information;
- correct incomplete or inaccurate information;
- ask us to delete or restrict the use of information;
- object to certain uses, including direct marketing;
- receive certain information in a portable format; and
- withdraw consent where processing relies on consent.
These rights are not absolute and may depend on the reason we use the information. We may need to confirm your identity before acting on a request. There is no charge in most cases.
9. Contact, changes and complaints
We use reasonable technical and organisational measures to protect personal information. No online service can promise absolute security, so please use a strong password and tell us promptly if you suspect unauthorised access.
We may update this policy when our service or legal obligations change. We will post the updated version here and change the date above. If a change materially affects how we use information, we will take reasonable steps to draw attention to it.
For privacy questions or rights requests, email info@loytap.com. If you are unhappy with our response, you can complain to the Information Commissioner’s Office, the UK data protection regulator.