PerQ Customer Privacy Notice

Contact Details

Retail Geek Ltd
14 Upper Park Street, Cheltenham, GL52 6SB
Email: support@retailgeek.co.uk
ICO Registration Number: ZC000582

1. What Information We Collect, Use, and Why

To provide services and goods

• Names and contact details
• Purchase or account history
• Account information
• Information relating to loyalty programmes
• Website user information (including user journeys and app usage)

For the operation of customer accounts and guarantees

• Names and contact details
• Purchase history
• Account information, including registration details
• Information used for security purposes
• Marketing preferences

For service updates or marketing purposes

• Names and contact details
• Marketing preferences
• Website and app user journey information
• Records of consent, where appropriate
• Device tokens for wallet pass notifications

For dealing with queries, complaints or claims

• Names and contact details
• Account information
• Purchase or service history
• Relevant information from previous investigations
• Customer or client accounts and records
• Correspondence

2. Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. You can find out more about lawful bases on the ICO's website.

Your data protection rights include:

• Right of access - you can ask us for copies of your personal information.
• Right to rectification - you can ask us to correct or delete personal information you think is inaccurate or incomplete.
• Right to erasure - you can ask us to delete your personal information.
• Right to restriction of processing - you can ask us to limit how we use your personal information.
• Right to object to processing - you can object to the processing of your personal data.
• Right to data portability - you can ask us to transfer your personal information to another organisation, or to you.
• Right to withdraw consent - where we rely on consent, you can withdraw it at any time.

If you make a request, we will respond within one month. Contact us at support@retailgeek.co.uk.

Lawful bases we rely on

Providing services and goods:
Contract - we need your information to provide you with the PerQ digital loyalty card service.
Legitimate interests - we collect device and platform information to ensure your wallet pass functions correctly and updates when your stamp count changes.

Operation of customer accounts:
Contract - maintaining your loyalty account, stamp count and rewards is part of the service you signed up for.
Legitimate interests - we store authentication tokens and security information to verify your wallet pass is genuine and prevent fraudulent use.

Service updates and marketing:
Consent - we only send you SMS marketing messages if you have given us your explicit permission. You can withdraw consent at any time by replying STOP to any message we send you.

Queries, complaints and claims:
Contract - resolving queries and complaints is part of our obligations to you.
Legitimate interests - it is in both your and our interest to properly investigate and resolve any issues with your loyalty account.

3. Where We Get Personal Information From

Directly from you. You provide your name and phone number when signing up for a retailer's loyalty card through the PerQ platform. We do not obtain your personal information from any other source.

4. How Long We Keep Information

We keep your personal information for as long as the retailer whose loyalty card you signed up for remains an active PerQ customer, plus 12 months after that retailer cancels their subscription with us.

If you request deletion of your personal information at any time, we will remove your data within 30 days of receiving your request. Email support@retailgeek.co.uk to make a deletion request.

We may retain certain records for longer where we are legally required to do so.

5. Who We Share Information With

Data processors

We use the following third-party services to operate the PerQ platform:

• Google Firebase (Google LLC, USA) - provides cloud database and storage services. Stores all customer personal data collected through the PerQ platform, including names, phone numbers, loyalty programme data and device tokens.
• Apple Inc. (USA) - operates Apple Wallet, through which loyalty passes are delivered to customers. Device push tokens are shared with Apple to enable pass updates.
• Google LLC (USA) - operates Google Wallet, through which loyalty passes are delivered to customers on Android devices.
• Twilio Inc. (USA) - processes customer phone numbers to deliver SMS marketing messages where the customer has provided explicit consent.

Other parties

Customer names, phone numbers and loyalty programme data are shared with the retailer whose loyalty card you signed up for, to enable them to manage their loyalty programme and communicate with their customers.

6. Sharing Information Outside the UK

Where necessary, we transfer personal information outside the UK. All transfers comply with UK GDPR and adequate safeguards are in place.

• Google LLC - USA - UK-US Data Bridge (adequacy regulations)
• Apple Inc. - USA - UK-US Data Bridge (adequacy regulations)
• Twilio Inc. - USA - UK-US Data Bridge (adequacy regulations)

For further information or to obtain a copy of the safeguards in place, contact us at support@retailgeek.co.uk.

7. How to Complain

If you have concerns about how we use your personal information, contact us first at support@retailgeek.co.uk.

If you remain unhappy after raising a complaint with us, you can complain to the ICO:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint