Last updated: [DATE]
This policy explains how [COMPANY NAME] ("we") handles data in the loyalty app for Lightspeed Retail X-Series (the "App"). The App connects a merchant's Lightspeed store to the merchant's own Happy Rewards loyalty program. The merchant decides which customers take part; for customer data, we act on the merchant's behalf.
To find a customer's loyalty card, the App reads the customer's name, phone number and email from Lightspeed and searches Happy Rewards with them while the cashier has the loyalty popup open. These contact details are not saved by the App, and the popup shows phone numbers and emails only partially.
When a cashier creates a customer, the App sends the entered details or the selected Lightspeed customer's details to Happy Rewards to create the customer and issue a card. This may include a date of birth, gender and any extra fields required by the merchant's card template. The App does not save this customer profile.
We don't sell data or use it for advertising.
Completed loyalty activity is deleted after [365] days and the security log after [730] days. Interrupted customer and card requests awaiting review are kept until resolved or the store disconnects. When a merchant disconnects their store, its connection details, keys and activity are deleted immediately; the security log entry recording the disconnection is kept until it expires. Encrypted backups are kept for 14 days.
Data is sent over HTTPS only, secrets are encrypted at rest, and access to the server is restricted. Card balances and customer profiles stay in the merchant's Happy Rewards account.
Merchants can disconnect at any time from their merchant page. Customers who want to access, correct or delete their loyalty data should contact the store, which manages their Digital Wallet card, or write to us at [PRIVACY EMAIL].
[COMPANY NAME], [ADDRESS], [PRIVACY EMAIL]