We are committed to protecting your personal data in full compliance with the EU General Data Protection Regulation (GDPR).
November 2026
Regulation: GDPR (EU) 2016/679
This Privacy Policy explains how LoyalOffers ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or make a purchase. It has been drafted in accordance with Regulation (EU) 2016/679 (GDPR), the EU Consumer Rights Directive 2011/83/EU, and the ePrivacy Directive 2002/58/EC. Please read it carefully before using our services.
Data Controller
The data controller responsible for your personal data is:
LoyalOffers
For any questions or requests regarding the processing of your personal data, you can contact us at the email address above. We will respond within 30 days as required by the GDPR.
Personal Data We Collect
We collect different categories of personal data depending on how you interact with us:
| Category | Data Collected | When |
|---|---|---|
| Identity Data | First name, last name | At checkout or registration |
| Contact Data | Email address, phone number | At checkout, contact form, newsletter |
| Delivery Data | Shipping address, country, postcode | At checkout |
| Transaction Data | Order details, products purchased, order value, payment method used | When placing an order |
| Technical Data | IP address, browser type, device type, operating system, pages visited | Automatically when visiting the site |
| Communication Data | Messages sent via contact form or email | When you contact us |
| Marketing Data | Email address, marketing preferences | When you opt into the newsletter |
Legal Basis for Processing
Under Article 6 of the GDPR, we process your personal data only when we have a valid legal basis to do so. The following legal bases apply:
| Legal Basis | When We Rely on It |
|---|---|
| Contract (Art. 6(1)(b)) | Processing your order, arranging delivery, managing your account, handling returns and refunds |
| Legal Obligation (Art. 6(1)(c)) | Compliance with EU tax and accounting laws, responding to legal requests from authorities |
| Legitimate Interests (Art. 6(1)(f)) | Fraud prevention, website security, analysing site performance, improving our services. Our legitimate interest does not override your fundamental rights. |
| Consent (Art. 6(1)(a)) | Sending marketing emails and newsletters, placing non-essential cookies. You may withdraw consent at any time. |
How We Use Your Personal Data
We use your personal data only for the specific purposes listed below. We never use your data for purposes incompatible with those stated.
- Processing and fulfilling your orders, including dispatch, tracking, and delivery
- Sending order confirmation emails, shipping notifications, and delivery updates
- Handling customer service enquiries, complaints, and return requests
- Processing refunds and managing any disputes
- Sending marketing emails and promotional offers, only with your explicit consent
- Detecting and preventing fraud, abuse, or unauthorised access
- Complying with legal and regulatory obligations (tax, accounting, EU Consumer Law)
- Analysing website usage to improve user experience and site performance
- Enforcing our Terms and Conditions
Sharing Your Data with Third Parties
We do not sell, rent, or trade your personal data. We only share data with the following categories of third-party service providers who process data on our behalf, under strict data processing agreements:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Shipping carriers (e.g. GLS, DHL, BRT) | Delivering your order | Name, delivery address, phone number |
| Payment processors (e.g. Stripe, PayPal) | Processing payments securely | Name, email, order value |
| Website hosting (Hostinger) | Hosting website and storing data | All data stored on our servers |
| Email service provider (e.g. Mailchimp, Klaviyo) | Sending transactional and marketing emails | Name, email address |
| Analytics provider (e.g. Google Analytics) | Understanding site usage | Anonymised/pseudonymised usage data |
We require all third parties to respect the security of your data and to treat it in accordance with the law. We do not allow third parties to use your data for their own marketing purposes.
International Data Transfers
Some of our third-party service providers may process data outside the European Economic Area (EEA). Whenever we transfer personal data outside the EEA, we ensure a similar degree of protection by relying on one of the following safeguards:
- Transfers to countries that have received an EU adequacy decision (e.g. UK, Switzerland, Japan)
- Use of Standard Contractual Clauses (SCCs) approved by the European Commission (Decision C(2021)914)
- Transfers to US-based providers that participate in the EU-US Data Privacy Framework
How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Order & transaction data | 10 years | EU accounting and tax legal obligations |
| Customer account data | Until account deletion + 2 years | Service provision and dispute resolution |
| Support correspondence | 3 years from last contact | Legitimate interests (dispute history) |
| Marketing emails | Until you unsubscribe | Based on your consent |
| Technical / analytics data | Up to 26 months | Website performance analysis |
After the applicable retention period, data is securely deleted or anonymised.
Your Rights Under the GDPR
As a data subject under the GDPR, you have the following rights. You can exercise any of these rights free of charge by contacting us at privacy@loyaloffers.com. We will respond within 30 days.
Right of Access (Art. 15)
Request a copy of all personal data we hold about you, along with information about how we process it.
Right to Rectification (Art. 16)
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Art. 17)
Request deletion of your personal data ("right to be forgotten"), subject to our legal retention obligations.
Right to Restriction (Art. 18)
Request that we restrict processing of your data in certain circumstances (e.g. while accuracy is contested).
Right to Portability (Art. 20)
Receive your data in a structured, machine-readable format and transfer it to another controller.
Right to Object (Art. 21)
Object to processing based on legitimate interests or direct marketing at any time.
Withdraw Consent (Art. 7)
Withdraw any consent you have given at any time, this will not affect the lawfulness of prior processing.
Right to Complain
Lodge a complaint with your national Data Protection Authority (DPA) if you believe we have violated GDPR.
Cookies & Tracking Technologies
Our website uses cookies and similar technologies. In accordance with the ePrivacy Directive (2002/58/EC), we obtain your consent before placing non-essential cookies.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Shopping cart functionality, session management, security | No, essential for the site to function |
| Functional | Remembering your language and preferences | Yes |
| Analytics | Understanding how visitors use our site (e.g. Google Analytics) | Yes |
| Marketing | Showing relevant ads, retargeting (e.g. Facebook Pixel, Google Ads) | Yes |
You can manage or withdraw your cookie consent at any time via our Cookie Settings banner or through your browser settings. Note that disabling certain cookies may affect the functionality of the website.
Minors
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@loyaloffers.com and we will delete the data promptly.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure, in accordance with Article 32 GDPR.
- SSL/TLS encryption on all pages of our website
- Access controls, only authorised staff can access personal data, on a need-to-know basis
- Secure servers, data is hosted on servers compliant with GDPR requirements
- Payment security, card data is processed by PCI-DSS compliant payment processors
- Data breach procedure, in the event of a breach affecting your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify registered customers by email where required
- Display a notice on our website
We encourage you to review this page periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.
Contact & Complaints
For any questions, data subject requests, or concerns about how we process your personal data, please contact us:
Data Privacy Contact
If you are not satisfied with our response, you have the right to lodge a complaint with your national Data Protection Authority (DPA). A full list of EU DPAs is available at edpb.europa.eu.
Write to support@loyaloffers.com or use our contact form. We reply within 24–48 hours, Monday to Friday.