Privacy Policy
Favezy remembers customers so local businesses can look after them. That only works if we look after your data. Here's exactly what we hold, why, and the control you have — in plain English.
Who's responsible for your data
For your Favezy wallet account, Favezy, operated in the United Kingdom, is the data controller. When you join a specific business, that business is also a controller for the record of your relationship with them (your visits, points and their notes). Contact us at privacy@favezy.app.
What we collect
- What you give us: your first name (optional), email (optional), and birthday (optional, so a business can treat you on the day).
- Your loyalty activity: which businesses you've joined, your points balance, rewards you've earned or redeemed, and the items in a basket when a business rings up a sale linked to you (this is what powers "your usual").
- Technical basics: a secure session cookie to keep you signed in, and standard log data needed to run and secure the service.
We don't collect payment card details in the wallet, and we don't ask you to. Where a business takes payment, that happens on the business's own card machine or processor.
Why we use it (and our lawful basis)
- To provide your wallet, points and rewards — this is necessary to deliver the service you asked for (contract).
- To help the businesses you've joined recognise you and tailor rewards and offers to you (legitimate interests in running a loyalty relationship you opted into; you can leave any business at any time).
- To keep Favezy secure and working, and to meet legal obligations (legitimate interests / legal obligation).
- Any separate marketing (e.g. Favezy news) only with your consent, which you can withdraw at any time.
Who sees it
The businesses you choose to join see your relationship with them — your name, points, and what you buy from them — so they can look after you. That's the point of joining. Businesses do not see your activity at other shops. We do not sell your personal data. We use trusted service providers (for example hosting and database infrastructure) who process data on our behalf under contract.
Age-restricted businesses
If you join a business that sells age-restricted products, we record that you confirmed you are 18 or over. Favezy does not sell these products; the business does.
How long we keep it
We keep your account and loyalty data while your account is active. If you close your account or ask us to delete it, we delete or anonymise your personal data within a reasonable period, except where we must keep some records to meet legal obligations. Note that your points ledger is an append-only record used to calculate balances honestly.
Your rights
- Access a copy of your data, correct it, or ask us to delete it.
- Object to or restrict certain processing, and withdraw consent for marketing at any time.
- Leave any individual business from your wallet at any time.
- Ask for your data in a portable format.
To exercise any of these, email privacy@favezy.app. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Cookies
Favezy uses a single essential, first-party cookie to keep you securely signed in. We don't use advertising or third-party tracking cookies.
Changes
If we change this policy we'll update the date above and, for material changes, let you know.