Privacy policy

Who we are

Custback provides loyalty cards for local businesses. A shop signs up, and its customers join a loyalty program and save a card to their phone's wallet.

The shop that issued your card decides what to collect and why. Custback stores and processes that information on the shop's behalf.

What we collect

When you join a loyalty program we store:

• The name you give when you join.
• Your email address or phone number, if the shop asks for one. Neither is required to collect stamps.
• Your stamps and rewards: every stamp added, every reward earned and redeemed, when it happened, and which staff member did it.
• A reference to the pass on your phone, so we can update it when your stamps change.

We do not collect payment details, and we do not track your location.

Hearing from the shop

Joining a loyalty program does not sign you up for marketing. If you want offers and news from the shop there is a separate box to tick, and we record the moment you ticked it and which contact detail it applies to.

Leaving it unticked changes nothing about your stamps. If you tick it and later change your mind, ask the shop or write to us and we will remove it.

Your record is kept per shop

Each business sees only its own customers. A shop cannot see your name, your contact details, or your stamps at any other business.

We do give you a single membership code that works across every Custback card you hold, so you do not have to remember a different one for each shop. That code is linked to your cards but carries no personal information by itself, and it does not let one shop read another shop's records.

Why we hold it

To run the loyalty program you joined: count your stamps, issue your rewards, keep the card on your phone up to date, and give the shop an accurate history if a stamp is disputed. We keep a full record of stamp changes so mistakes can be traced and corrected.

We do not sell your information, and we do not use it for advertising.

Who else sees it

• The shop that issued your card, and its staff.
• Google, when you save a card to Google Wallet. We send Google what the pass shows — the shop, your stamp count and your membership code — so it can display and update the card. Google's handling of that data is covered by its own privacy policy.
• Our hosting and database providers, who store the data on our behalf and do not use it for anything else.

How long we keep it

For as long as your membership is active, and for a period afterwards so a shop can settle disputes about rewards. Ask us to delete it sooner and we will.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to support@custback.com. Deleting your record removes your stamps and any unredeemed rewards, so redeem them first if you want them.

Removing the card from your phone's wallet hides it, but does not delete your record. Write to us for that.

If you are in New Zealand and are not satisfied with how we have handled a privacy request, you can complain to the Office of the Privacy Commissioner.

Security

The code on your card cannot be used to add or redeem stamps by itself. Every change is made by signed-in staff and recorded against them.

Changes

If we change this policy we will update the date at the top. Contact us at support@custback.com with any question about it.