Legal · BeLoyal Studio
Privacy Policy
A clear explanation of the information used to provide BeLoyal’s business accounts and digital loyalty programs.
Last updated: August 21, 2026
1. About this policy
This policy explains how BeLoyal handles information when businesses use the platform and when customers join a loyalty program operated by a café, barbershop, or another participating business.
2. Our role and the business’s role
The participating business decides how its loyalty program operates, which customers may join, and how rewards are offered. BeLoyal provides the technology used to run that program. Depending on the activity, the business and BeLoyal may have different responsibilities under applicable data-protection law. Questions about a specific loyalty membership should normally be directed to that business first.
3. Information we collect
Business-account information may include names, email addresses, login and authentication records, business details, branding, subscription information, and platform settings. Loyalty-member information may include a name, phone number, birthday, member number, digital-card identifier, stamps or visits, reward and redemption activity, ratings, optional feedback, and timestamps. We may also process technical information such as IP address, browser or device details, security events, and essential session information.
4. How information is collected
Information is provided directly by business account holders and loyalty members, created when staff record activity or redeem rewards, and generated when the platform is used. QR codes identify the relevant join page or loyalty card; they do not themselves expose the full customer record.
5. How we use information
We use information to create and secure accounts, operate digital loyalty cards, record eligible purchases or services, calculate reward progress, process redemptions, show business analytics, collect star ratings, provide support, prevent misuse, maintain the platform, and comply with legal obligations. If messaging features are enabled, contact details may also be used to deliver loyalty-related messages requested by the participating business.
6. Cookies and local storage
BeLoyal uses essential cookies or similar browser storage to maintain signed-in sessions, remember a customer’s loyalty card on their device, preserve security, and avoid repeatedly showing the same introductory rating prompt. Disabling essential storage may prevent parts of the platform from working correctly.
7. When information is shared
We do not sell personal information. Information may be available to the business operating the relevant loyalty program and to service providers that support hosting, databases, authentication, analytics, security, communications, or customer support. We may also disclose information when required by law, to protect users or the platform, or as part of a lawful business transfer.
8. Storage, transfers, and retention
Information may be processed using service providers located outside the customer’s country. Where required, appropriate safeguards should be used for cross-border processing. We retain information while it is needed to provide the loyalty program, maintain legitimate business and security records, resolve disputes, or satisfy legal obligations. The exact period may depend on the participating business and the type of record.
9. Your choices and rights
Subject to applicable law, individuals may request information about their personal data and ask for access, correction, deletion, restriction, or withdrawal of consent where relevant. A loyalty member may contact the participating business or BeLoyal. We may need to verify identity before completing a request, and some records may be retained when legally required.
10. Children’s information
BeLoyal is not intended for children to use independently. Businesses must ensure that they have any permission required before collecting a child’s information. A parent or guardian may contact the participating business or BeLoyal regarding a child’s record.
11. Security
We use reasonable technical and organizational measures designed to protect information, including authenticated business access and restricted customer-card identifiers. No online service can guarantee absolute security, and account holders must protect their credentials.
12. Updates and contact
We may update this policy when the platform or legal requirements change. The current date will appear at the top of this page. Privacy questions and requests can be sent to begad.ahmed124@gmail.com.