LocalPerks Privacy Policy

This Privacy Policy applies to personal data processed by LocalPerks in relation to:

• visitors to the LocalPerks website;
• customers and prospective customers of the LocalPerks rewards platform;
• representatives of participating business partners, suppliers and service providers;
• people who contact LocalPerks, subscribe to updates, request information or engage with promotions; and
• users of LocalPerks mobile applications, customer dashboards, partner tools and support channels.

For the purposes of UK data protection law, LocalPerks Ltd is the controller of the personal data described in this Privacy Policy unless stated otherwise. Privacy information should identify the controller and provide contact details.

Controller details

• LocalPerks Ltd
• 124 City Road, London, EC1V 2NX
• Email: datagdpr@lovelocalperks.com
• Website: lovelocalperks.com

If LocalPerks appoints a data protection officer or other specific privacy contact, those details will also be included here.

Depending on how the website or platform is used, LocalPerks may collect and process the following categories of personal data:

3.1 Identity and contact data — This may include name, date of birth, username, business name, postal address, email address, telephone number and other profile or registration details.

3.2 Account and loyalty data — This may include account identifiers, login details, points balance, rewards activity, redemption history, referral history, offer preferences, participation records and customer support interactions.

3.3 Transaction and commercial data — This may include details of qualifying purchases, redemptions, partner interactions, billing records, settlement records, subscription records and records of services requested or provided.

3.4 Technical and usage data — This may include IP address, browser type, device type, operating system, app version, identifiers, login records, page visits, timestamps, clickstream information and other website or app usage information.

3.5 Marketing and communications data — This may include marketing preferences, consent records, opt-in and opt-out status, email interactions, SMS interactions, push notification settings and records of promotional engagement where permitted.

3.6 Verification and security data — This may include fraud-prevention indicators, account verification information, device security information and records relating to suspected misuse or abuse.

Personal data may be collected:

• directly from individuals when they create an account, complete forms, make enquiries, contact support, subscribe to communications or interact with the Platform;
• from participating partners when they submit or validate transaction activity linked to a rewards account;
• automatically through website, app or platform use, including through cookies and similar technologies where permitted;
• from service providers, analytics providers, fraud-prevention tools or publicly available sources where lawful and appropriate; and
• from referrals or promotional campaigns where an individual engages with a LocalPerks sign-up or reward journey.

LocalPerks may process personal data for the following purposes and on the following lawful bases under UK GDPR.

Organisations should tell individuals the purposes of processing and the lawful bases they rely on.

LocalPerks may use personal data to send information about rewards, promotions, offers, partner campaigns, platform developments and other marketing communications where permitted by law. Organisations must consider both UK GDPR lawful basis requirements and PECR rules for electronic marketing such as email and text messages.

Where consent is required, LocalPerks will seek that consent separately and record it. Individuals can opt out of marketing communications at any time by using the unsubscribe link, managing their settings, replying as instructed in a message, or contacting LocalPerks.

Service communications relating to account security, password resets, transaction confirmations, important platform changes or legal notices are not treated in the same way as promotional marketing and may still be sent where necessary.

LocalPerks may use cookies, software development kit technologies, pixels, tags and similar technologies on the website and applications. Non-essential cookies, including analytics and advertising cookies, generally require consent under PECR, while strictly necessary cookies do not. Users should be told clearly what cookies are used, what they do, and be given control before non-essential cookies are set.

Our Cookie Notice and preference centre explain:

• what cookies and similar technologies are used;
• which cookies are strictly necessary;
• which cookies are used for analytics, personalisation or advertising;
• which third parties set cookies; and
• how consent can be given, refused or withdrawn.

LocalPerks may share personal data with:

• participating partners, where reasonably necessary to validate transactions, honour rewards, investigate customer issues or operate the loyalty programme;
• hosting providers, software providers, analytics providers, communications providers, CRM providers and support providers who help operate the website or platform;
• payment processors, fraud-prevention providers, identity verification providers and security vendors where relevant;
• professional advisers, auditors, insurers and financiers;
• regulators, law enforcement agencies, courts or other authorities where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims; and
• a purchaser, investor or successor entity in connection with a merger, acquisition, restructuring, financing or disposal of business or assets, subject to appropriate confidentiality safeguards.

If LocalPerks transfers personal data outside the UK, it will do so only where permitted by Applicable Law and where appropriate safeguards are in place, such as adequacy regulations, approved contractual mechanisms or other lawful transfer tools. Individuals should be told about international transfers and the safeguards relied on where relevant.

LocalPerks will keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, administer the loyalty programme, maintain records, resolve disputes, prevent fraud, enforce legal rights and comply with legal, tax, accounting or regulatory obligations.

Retention periods may vary depending on the category of data and the reason for processing. For example:

• account records may be kept while the account remains active and for a defined period afterwards;
• transaction and loyalty records may be retained for audit, fraud prevention, tax, accounting and dispute-resolution purposes;
• suppression records may be retained to ensure that marketing opt-out requests are respected; and
• technical security logs may be retained for appropriate monitoring and security purposes.

LocalPerks uses appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

No method of transmission over the internet or method of electronic storage is completely secure, and for that reason LocalPerks cannot guarantee absolute security.

Subject to applicable law, individuals may have rights to:

• be informed about how personal data is used;
• request access to personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing in certain circumstances, including direct marketing;
• request portability of certain personal data; and
• withdraw consent at any time where processing is based on consent.

Requests may be made using the contact details set out in this Privacy Policy.

If an individual has concerns about how LocalPerks handles personal data, that person may contact LocalPerks using the contact details above. Individuals may also have the right to complain to the Information Commissioner’s Office. Information about how to contact the ICO is available on the ICO website.

The LocalPerks platform is intended for adults unless LocalPerks expressly states otherwise for a specific service. If LocalPerks becomes aware that it has collected personal data from a child in circumstances not permitted by law or policy, LocalPerks may delete that data or take other appropriate action.

If LocalPerks carries out automated decision-making or profiling that produces legal or similarly significant effects, LocalPerks will explain that clearly and provide the additional information required by data protection law. If no such processing currently takes place, LocalPerks does not currently use personal data for solely automated decisions producing legal or similarly significant effects.

The website or platform may contain links to third-party websites, applications or services. LocalPerks is not responsible for the privacy practices of those third parties, and individuals should review the privacy notices of those third parties separately.

LocalPerks may update this Privacy Policy from time to time to reflect changes in law, guidance, operations, technology or business practice. Where appropriate, material changes will be notified through the website, the Platform, email or other suitable communication methods.

Questions, requests and complaints relating to this Privacy Policy or to the handling of personal data may be sent to:

• LocalPerks Ltd
• 124 City Road, London, EC1V 2NX
• Email: datagdpr@lovelocalperks.com
• Website: lovelocalperks.com
• Support: lovelocalperks.com/privacy