Privacy Policy

1. Policy Updates and Notifications

Loyaltymaster holds the role of a data controller for the personal information of its European Union users. The company may revise the Privacy Policy occasionally, and any modifications are communicated to users by updating the date at the policy’s commencement and possibly providing additional notifications.

2. Information Collection

2.1. User-Provided Information

Loyaltymaster collects and processes user information offered through the service, including account registration, purchase orders, and customer support communication. The information may encompass names, email addresses, company names, postal addresses, and phone numbers. However, the credit card information is collected and processed by third-party payment processors, namely Paypal and Payfast, following their individual privacy policies.

2.2. Automatic Information Collection

Loyaltymaster automatically records information regarding users’ utilisation of the services. The stored data in log files includes the browser type, access times, pages viewed, IP address, and the previous page visited. Additionally, the company uses cookies and web beacons to accumulate information. Users are offered the choice to accept or reject this during their initial site visit.

The trial form uses an approximate location derived from the request IP address to rank nearby business suggestions. A visitor may separately choose “Use my precise location”. Precise browser location is requested only after that action, used once to bias the current business search, and is not stored in a URL, cookie, analytics event, lead record, email, or database.

2.3. Information from Other Sources

Loyaltymaster may acquire information from external sources such as Google Apps and Facebook profiles for advertising and user authentication. This data is then merged with the information collected through their services.

3. Usage, Sharing, and Processing of Information

3.1. Utilisation of Collected Information

The assembled information is employed for various purposes, including enabling access to services, enhancing and maintaining services, processing transactions, sending updates and alerts, answering queries, creating user accounts, transmitting promotional materials, analysing usage trends, detecting fraud, and personalising the user experience. The data also comes into play for employment considerations and other objectives described during the information collection process.

3.2. Information Sharing

The collected personal information may be shared with approved vendors, consultants, and service providers, who require it for work on Loyaltymaster’s behalf. Information may also be shared under legal requirements, during company mergers or acquisitions, with affiliates of Loyaltymaster, and with analytics and search engine providers. The user’s consent is necessitated for information sharing.

With your consent, we use Microsoft Clarity to understand how visitors use and interact with the website through behavioural metrics, heatmaps, and session replay. Clarity is blocked until analytics consent is granted, advertising storage remains denied, and sensitive lead-form fields are masked. This setup does not include Microsoft Advertising or Microsoft UET.

With your consent, we use Plerdy to understand website interactions through heatmaps and usage analytics. Plerdy is blocked until analytics consent is granted, and we do not intentionally enable form-input recording.

We also use Vercel Web Analytics and Vercel Speed Insights for aggregate website traffic and performance measurement. You can withdraw optional analytics consent at any time through Cookie settings in the website footer. Please refer to the Cookie Policy for current details about the tools, purposes, consent behaviour, and browser storage.

GetTerms provides the website consent banner, preference controls, consent records, cookie scanning, and the live embedded Cookie Policy. The website reads only the GetTerms Analytics category to decide whether optional analytics scripts may load.

The trial form uses Google Maps Platform Places API to display business suggestions. The typed search, country, and an approximate or visitor-authorised precise location bias are sent through Loyaltymaster’s server to Google for this purpose. Suggestion ranking is influenced by the text entered, proximity, regional context, and Google Maps business data. Loyaltymaster stores a selected Google Place ID, but does not intentionally retain the Google-derived address or coordinates. A business address that the visitor types or edits manually is stored as information supplied by that visitor. Google’s processing is also governed by the Google Privacy Policy and Google Maps Platform Terms.

Vercel hosts the website and supplies approximate country, city, and coordinate signals derived from the incoming IP address. Google and Vercel may process information in countries outside South Africa or the visitor’s country, subject to the contractual and legal transfer safeguards applicable to those providers.

3.3. Lawful Basis for Information Processing

The policy recognises the lawful basis for personal data processing, such as obtaining prior consent, compliance with legal obligations, and pursuing legitimate interests like promoting business and ensuring website security.

Approximate location is used for the legitimate operational purpose of improving the relevance of a business lookup requested by the visitor. Optional precise location is processed only after the visitor’s specific affirmative request and can be refused without preventing signup or manual address entry. This functional choice is separate from analytics-cookie consent.

4. Additional Policy Components

The policy includes external links, log-in features, advertising services, and customer information collection. Users are offered the choice to opt out of marketing communications.

5. Security Measures, Data Retention, and International Data Transfer

Loyaltymaster uses server-side credentials, access controls, data minimisation, encrypted transport, rate limits, and restricted vendor permissions to protect the business lookup. Precise device coordinates are held only in browser memory for the active lookup and passed through the server without persistence. Google Place IDs may be retained with the lead; Google-derived addresses and coordinates are not intentionally retained. Manually supplied addresses follow the lead-retention period.

Where personal information is transferred internationally, Loyaltymaster assesses the relevant provider terms and safeguards and applies the requirements of POPIA, the GDPR where applicable, and other applicable law.

6. Rights and Choices of Users

European Union users are entitled to specific rights concerning their personal data processed by Loyaltymaster. These rights include requesting access, rectification, erasure, and withdrawal of consent. Options regarding account information, cookie settings, and promotional communications are also provided to users.

Visitors may decline browser location permission and continue with approximate search or manual entry. Because precise location is not retained, stopping its use requires no account setting: do not grant the permission, revoke it in the browser, or reload the page.

For account-related requests, users can reach out to support@loyaltymaster.com.

Conclusion

The Privacy Policy of Loyaltymaster is designed to maintain the utmost transparency and fairness in handling user data. It emphasises user consent, security, and rights, laying down a clear pathway for information management. As users, understanding and adhering to this policy ensure an enjoyable and secure experience with Loyaltymaster’s services.

The version is current as to the date edited below.

Last Edited: 25/07/2026

E&O.E.