"RewardServe / We / Us / Our" relates to RewardServe Ltd trading as RewardServe. "User / You / Your" relates to anyone using the RewardServe website ("Site").
This policy explains how we collect, use, store, and protect your personal data when you use our Site and services. This policy complies with the General Data Protection Regulation (GDPR) Regulation EU2016/679 and applies to all users, including those located in the European Union (EU), European Economic Area (EEA), and United Kingdom (UK).
- Data Controller: RewardServe Ltd / RewardServe
- Purpose: We act as the data controller, meaning we determine how and why your personal data is processed.
We may collect and process the following personal data:
- Account Information: Name, email address, username, password, contact details, and profile information.
- Usage Data: Information about how you use the Site (e.g., pages visited, time spent, device type, IP address, browser details).
- Transaction Data: If applicable, payment details, purchase history, and information related to rewards or services you use.
- Communications Data: Records of emails, messages, or other communications you send to us.
We only collect data that is necessary to provide our Services, comply with legal obligations, or improve your user experience.
Under GDPR, we process your personal data only if we have a valid legal basis. These include:
- Performance of a Contract: To provide the Services you request (e.g., managing your account, processing transactions).
- Legitimate Interests: To operate and improve our business (e.g., analysing usage data, ensuring Site security) — where these interests do not override your rights and freedoms.
- Legal Obligation: To comply with laws, regulations, or legal requirements.
- Consent: Where you have given explicit consent (e.g., receiving marketing communications). You may withdraw consent at any time.
We use your personal data for the following purposes:
- To create and manage your user account;
- To provide, maintain, and improve our Services;
- To process transactions and deliver rewards/services;
- To communicate with you (e.g., respond to queries, send important updates);
- To ensure the security and functionality of the Site;
- To comply with legal and regulatory requirements;
- To send marketing communications (only if you have consented).
We do not sell, rent, or share your personal data with third parties for their marketing purposes without your explicit consent. We may share data only in the following cases:
- Service Providers: Trusted third-party partners who assist us in operating the Site or providing Services (e.g., payment processors, hosting providers, analytics tools). These partners are contractually required to protect your data and use it only for agreed purposes.
- Legal Requirements: If required by law, court order, or government request, or to protect our rights, property, or safety, or the rights, property, or safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction — we will notify you of any such change.
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These measures include encryption, secure servers, access controls, and regular security reviews. While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure — we cannot guarantee absolute security.
As a data subject, you have the following rights:
1. Right of Access: You can request a copy of the personal data we hold about you.
2. Right to Rectification: You can ask us to correct inaccurate or incomplete data.
3. Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data, where legally permitted.
4. Right to Restrict Processing: You can ask us to limit how we use your data (e.g., while we verify information).
5. Right to Data Portability: You can request your data in a structured, machine-readable format for transfer to another service.
6. Right to Object: You can object to processing based on legitimate interests or direct marketing.
7. Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time (this does not affect the lawfulness of processing before withdrawal).
To exercise these rights, please contact us at [Your Email Address]. We will respond to valid requests within 1 month (extended by 2 months if the request is complex).
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. For example:
- Account data is retained while your account is active;
- Transaction data is retained for 5 years to comply with tax / legal requirements;
- Marketing data is retained until you withdraw consent.
When data is no longer needed, we securely delete or anonymise it.
If we transfer your data outside the EU/EEA/UK (e.g., to service providers in other countries), we ensure such transfers comply with GDPR. This includes using approved safeguards like Standard Contractual Clauses (SCCs) or ensuring the country has an adequate data protection regime.
Our Site uses cookies and similar technologies to improve user experience, analyse usage, and personalise content. You can manage cookie settings through your browser.
We may update this GDPR Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page, and the “Last Updated” date will be revised. We encourage you to review this policy regularly.
If you have concerns about how we have processed your data, you may contact us first. You also have the right to lodge a complaint with your local data protection authority, for example, the Information Commissioner’s Office (ICO) in the UK (ico.org.uk).
We may change this Privacy & GDPR Policy from time to time (for example, if the law changes). Any changes will be immediately posted on this page and RewardServe website users will be deemed to have accepted the terms of the Privacy & GDPR Policy on their first use of the RewardServe website following the alterations. We recommend that you check this page regularly to keep up to date. If you have any questions, please
contact us.