Data Processing Addendum

This addendum forms part of our Terms of service. It applies when we process personal data of your customers on your behalf. You are the Data Fiduciary; we are your Data Processor under the DPDP Act, 2023.

1. What we process

• People: customers who join your loyalty card, and your staff.
• Data: first name, optional mobile number and birthday (day and month), stamps, rewards, visit times, join source, feedback and wallet or push identifiers.
• Purpose: issuing and updating loyalty cards, delivering your messages and offers, and showing you statistics.
• Duration: while your account is active, then deleted as set out below.

2. Your instructions

We process the data only to provide LoopinCard as you configure it, or as Indian law requires. We never use it for our own marketing, never sell it and never combine it with another shop's data.

3. Confidentiality

Only people who need access to run or support the service can reach the data, and they are bound to keep it confidential.

4. Security

We apply the safeguards described on our Trust page, including HTTPS everywhere, hashed passwords and PINs, signed sessions, secret card tokens, role-based access, rate limits and nightly backups in India.

5. Sub-processors

You authorise the providers listed on our Trust page. We will email you at least 14 days before adding a new one; you may object and close your account if you disagree.

6. Personal data breaches

We will tell you without undue delay, and within 72 hours of becoming aware, of any breach affecting your customers' data, with what we know and what we are doing about it, so you can meet your duties to the Data Protection Board and affected people.

7. Helping with customer requests

We help you answer customers who ask to see, correct or erase their data or to withdraw consent. Requests we receive directly about your customers are passed to you or handled as you instruct.

8. Deletion at the end

When your account closes we keep the data for 30 days so you can request a copy, then delete it. Backups roll off within a further 14 days.

9. Information and audits

On reasonable written request, we will give you the information needed to show we meet this addendum.

10. Contact

Use our contact form or call +91 85559 67330.