Privacy Policy

At LoyaltyStar we take care of your personal data. This policy explains what we collect, why we use it, who we share it with and how you can exercise your rights. It follows Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, where applicable, U.S. privacy laws.

1. Who we are

LoyaltyStar, operating the LoyaltyStar brand, located at Dakota No. 410, Colonia Nápoles, C.P. 03810, Ciudad de México, is responsible for processing your personal data. Privacy contact: [email protected].

2. Who this policy covers

• Visitors to loyaltystar.cc.
• Business customers who create an account at app.loyaltystar.cc.
• End customers of those businesses who use a digital loyalty card issued with LoyaltyStar.

3. Data we collect

Website visitors

• What you enter in the contact form: name, email, business, phone and message.
• Technical data: IP address, browser and device type, pages visited and referral source, through analytics cookies (see section 8).

Business customers

• Identification and contact details of the account owner or admin: name, email, phone, business name and industry.
• Billing and subscription data. Payments are processed by Stripe; LoyaltyStar does not store full card numbers.
• Configuration of your programs, cards, locations and team users.

End customers of businesses

• The data the business requests when issuing the card, such as name, phone, email or birthday.
• Card activity: visits, stamps, points and redeemed rewards.

We do not request sensitive personal data (health, ethnic origin, beliefs, sexual orientation, etc.). Please don't include it in messages or custom fields.

4. How we use your data

Necessary purposes

• Answer your information, sales or support requests.
• Create and manage your account, provide the service and issue digital cards in Apple Wallet and Google Wallet.
• Charge your subscription and issue receipts.
• Record stamps, points and rewards, and send the card notifications the business sets up.
• Keep the website and platform secure, prevent fraud and comply with legal obligations.

Additional purposes

• Send you LoyaltyStar news, content and offers.
• Measure and improve the website and service with aggregated statistics.

If you don't want us to use your data for the additional purposes, email [email protected] or use the unsubscribe link in any email. Opting out does not affect the service you signed up for.

5. End customers: the business is in charge

When a business uses LoyaltyStar for its loyalty program, the business is the controller of its customers' data and LoyaltyStar acts as a processor: we only process that data on the business's behalf and instructions, to run its program. We don't use it for our own marketing and we don't sell it. If you are an end customer and want to exercise your rights, contact the business that issued your card; if you contact us, we'll forward your request.

6. Who we share data with

We only share data with providers that help us deliver the service, under confidentiality and security obligations:

• Stripe: payment and subscription processing.
• Google: Google Analytics (website statistics) and Google Wallet (digital passes).
• Microsoft: Microsoft Clarity (website heatmaps).
• Cloudflare: content delivery and website security.
• Apple: Apple Wallet (digital passes and their notifications).
• Hosting, email and backup providers.

Some of these providers are located in the United States or other countries. Beyond that, we only disclose data when required by a competent authority or permitted by law. We do not sell or rent personal data.

7. Your rights

You can access, correct or delete your data, object to its use, withdraw your consent or limit its use. Send your request to [email protected] including:

• Your name and a way to reply to you.
• A copy of your ID or, if applicable, your representative's ID and proof of authority.
• A clear description of the data and the right you want to exercise.

We'll respond within 20 business days and, if applicable, carry out your request within the following 15 business days. It's free of charge. If you believe your request was not properly handled, you may contact the competent data protection authority.

8. Cookies and tracking

We use Google Analytics 4 to understand how many people visit the site, where they come from and which content works best. These cookies collect technical and browsing data. We don't use them to identify you personally.

We may also use Microsoft Clarity to create heatmaps and anonymous session recordings (clicks, scrolling and cursor movement) that help us spot confusing parts of the site. Clarity automatically masks what you type in forms.

You can disable or delete them in your browser settings, or install the Google Analytics opt-out add-on. The site will keep working.

9. Security and retention

We apply administrative, technical and physical safeguards: encrypted connections (HTTPS), restricted access and backups. We keep data while you have a relationship with us and, afterwards, only as long as needed to meet legal obligations or resolve disputes.

10. Children

LoyaltyStar is a service for businesses. We do not knowingly collect data from children through this website. Businesses that issue cards to minors are responsible for obtaining consent from their parents or guardians.

11. U.S. residents

We do not sell or share personal data for cross-context behavioral advertising. Depending on your state of residence, you may have the right to know what data we hold, to request its correction or deletion, and not to be discriminated against for exercising these rights. Email [email protected].

12. Changes to this policy

We may update this policy due to legal or service changes. The current version will always be on this page with its update date and, for material changes, we'll notify business customers by email.