Privacy Policy

Loyalty Apps Ltd t/a TrendBite (“TrendBite”, “we”, “us”, “our”) is a company registered in England and Wales under company number 08169690. Our registered office is at 86-90 Paul Street, 3rd Floor, London, EC2A 4NE. We operate as a data controller in relation to the personal data we collect and process through our platform, applications, and services (collectively, the “Services”).

For any privacy-related queries or to exercise your rights, you may contact us at: hello@trendbite.com

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you:

• —Visit or use our website, mobile applications, or any other digital product we operate;
• —Register for or use our loyalty or rewards platform;
• —Interact with us via email, telephone, or other channels;
• —Apply for a job with us or otherwise engage with us.

Please read this policy carefully. If you do not agree with its terms, please discontinue use of our Services. This policy supplements, and should be read alongside, any other notices or terms we provide to you.

Under the UK GDPR and the Data Protection Act 2018, we process your personal data on the following legal bases:

• —Performance of a contract: where processing is necessary to provide the Services you have requested or to take steps at your request before entering into a contract;
• —Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and interests. Our legitimate interests include operating and improving our platform, preventing fraud, and marketing our Services to existing customers;
• —Compliance with a legal obligation: where processing is required to comply with applicable law;
• —Consent: where you have given us clear, specific consent to process your data for a particular purpose. You may withdraw your consent at any time by contacting us at the address below, although this will not affect the lawfulness of processing carried out before withdrawal.

We use your personal data for the following purposes:

• —To register you as a user and manage your account;
• —To deliver, personalise, and improve our loyalty and rewards Services;
• —To process transactions and manage rewards, points, or offers;
• —To communicate with you regarding your account, including transactional and service-related messages;
• —To send you marketing communications where you have opted in or where we have a legitimate interest to do so (you may opt out at any time);
• —To conduct analytics, research, and product development to enhance our Services;
• —To detect, investigate, and prevent fraudulent transactions or other illegal activities;
• —To comply with our legal and regulatory obligations;
• —To respond to your enquiries and resolve complaints.

Where permitted by law, we may contact you with information about our products, services, and promotions. We will always offer you the ability to opt out of receiving marketing communications. You may update your preferences at any time by:

• —Clicking the "unsubscribe" link in any marketing email;
• —Logging into your account and adjusting your notification settings;
• —Contacting us directly at hello@trendbite.com.

We will not share your personal data with third parties for their own marketing purposes without your explicit consent.

We use cookies, pixels, and similar tracking technologies to operate and improve our Services, to analyse usage patterns, and to deliver relevant content and advertising. You can control cookie settings through your browser; however, disabling certain cookies may affect the functionality of our Services.

Full details of the cookies we use and how to manage them are set out in our Cookie Policy, which forms part of this Privacy Policy.

We are based in the United Kingdom. Where we transfer personal data to countries outside the UK or the European Economic Area (EEA) that do not provide an equivalent level of data protection, we will ensure appropriate safeguards are in place, such as:

• —The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses;
• —An adequacy decision by the UK Secretary of State;
• —Binding Corporate Rules, where applicable.

You may request further information about international transfer safeguards by contacting us.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. The criteria we use to determine retention periods include:

• —The nature of the data and the purpose for which it is processed;
• —The duration of your relationship with us;
• —Our legal obligations and any applicable limitation periods for claims.

When your personal data is no longer required, we will securely delete or anonymise it. For example, we typically retain account data for up to six years after closure of your account to comply with our financial and legal record-keeping obligations.

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff training.

While we take reasonable steps to protect your data, no system of data transmission or storage can be guaranteed to be completely secure. If you believe your account has been compromised, please contact us immediately.

As a data subject under UK GDPR, you have the following rights in relation to your personal data:

• —Right of access: you may request a copy of the personal data we hold about you (a Subject Access Request);
• —Right to rectification: you may request that inaccurate or incomplete personal data is corrected;
• —Right to erasure ('right to be forgotten'): you may request deletion of your personal data in certain circumstances;
• —Right to restriction of processing: you may request that we restrict the processing of your data in certain circumstances;
• —Right to data portability: you may request to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible;
• —Right to object: you may object to processing based on legitimate interests or carried out for direct marketing purposes;
• —Rights related to automated decision-making and profiling: you have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

To exercise any of your rights, please contact us in writing at hello@trendbite.com or at our registered address. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

You will not usually need to pay a fee to exercise your rights, although we may charge a reasonable fee or decline to act if a request is manifestly unfounded, excessive, or repetitive.

If you are unhappy with the way in which we process your personal data, you have the right to lodge a complaint with the UK’s supervisory authority:

We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please get in touch with us first.

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through our platform.

Our Services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it as soon as reasonably practicable. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where we make material changes, we will notify you by email or by a prominent notice on our platform prior to the change taking effect, and we will update the “Last updated” date at the top of this policy.

Your continued use of our Services following notification of changes constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: