Privacy & data
A plain-language overview of how Stampaki handles personal data in the product.
This page summarises how the product works. It is not a substitute for the formal privacy policy and data-processing terms, which are provided to pilot businesses with their service agreement.
Who controls customer data
Each business decides why and how its loyalty program uses customer data. Stampaki processes that data on the business's behalf to run the program.
What we collect
For customers: a first name, optional email, phone and birthday, consent choices, and loyalty activity. For dashboard users: name, email and activity logs.
Consent
Privacy acknowledgement, program terms and marketing consent are recorded separately and with timestamps. Marketing consent can be withdrawn at any time.
QR codes and Wallet passes
QR codes hold a random identifier with a signature, never personal details. Location relevance stores only store coordinates; we never track where customers are.
Security
Passwords are hashed, stored credentials are encrypted, every business's data is isolated, and sensitive actions are recorded in an append-only audit log.
Your rights
Businesses can export a customer's data or erase it. Erasure removes personal data; anonymous loyalty records are kept for financial integrity. Inactive customers are erased after each business's retention period.
Website enquiries
When you contact us through this website, we store your details only to reply to you.