Who holds your data
The shop named on your card is the controller. Its contact details are on the back of the card and on the join page. StoreWallet is the shop's processor: we store and process your data only on the shop's instructions and never for our own marketing. Apple and Google run the Wallet app on your phone under their own privacy policies; they decide when to show a card near a location, and they do not tell the shop or us when they do.
What the shop collects
| Data | Why | Required? |
|---|---|---|
| First name | To show on your card and greet you at the till | Yes |
| To issue your card, avoid duplicates, send you the card if you ask, and give you the self-service links | Yes | |
| Phone number | Only if the shop switched this on, to find you at the till | Optional |
| Birthday | Only if the shop switched this on, for a birthday reward; the programme refuses under-16s | Optional |
| Your language | To show the card in your language | Set by your phone |
| Visits, stamps, rewards | To run the programme and show the shop its numbers | Created by use |
| What you got on a visit | If staff tap it after your stamp (for example "Hot drink" or "Cut"), so the shop knows your usual | Created by use |
| Your consent choices | To prove what you agreed to | Created by use |
Not collected: your location, your movements, your payment details, anything about your health or beliefs. The card has your shop's location on it so your phone can show it nearby; the check happens on your phone and nobody is told.
Why the shop may use it
To run the loyalty programme you joined (the contract between you and the shop). To send you messages to your card only if you ticked the separate box for messages, which you can untick at any time from the back of the card. If you accept messages, the shop may pick which ones to send by what you usually get (its legitimate interest in sending offers you'd like). You can say no to that on the same page, and you'll still get its general messages.
How long it is kept
The shop sets a period: forever while your card is active, or 12, 24 or 36 months after your last visit, shown on the join page. After that your data is deleted automatically. Totals of visits survive without your name.
Your rights, from the back of the card
Open the card in your Wallet and turn it over. The links there let you, without logging in: see what is held about you, download it, change your name or email, turn messages off, and delete your account. Deleting removes the card from your Wallet and the shop's records within the hour. Full details on the your data rights page. You can also contact the shop directly, or complain to the Information Commissioner's Office at ico.org.uk.
Who else processes it
StoreWallet's sub-processors, all under contract, are listed on the sub-processors page. Your data is stored in the European Union (Frankfurt, Germany).