Privacy Policy

Data Controller: New World Loyalty Ltd
Website: loyalty-fit.com
Contact for privacy matters: iain@newworldloyalty.com

If you have any questions about how your personal data is handled, please contact us at the address above.

We collect only the information you choose to provide when using LoyaltyFit. Depending on which form you use, this may include:

• Your name
• Work email address
• Company or brand name
• Programme details — how you engage with customers today, current technology, and your procurement objective
• Message content — if you contact us via the contact form
• Consent preferences — whether you have opted in to supplier contact and agreed to this policy

We do not collect payment information, government identifiers, or special category data. We do not use tracking cookies beyond those strictly necessary for the website to function.

We process your personal data for the following purposes:

We retain personal data submitted through LoyaltyFit for a maximum of 24 months from the date of submission, unless you request earlier deletion or we are required by law to retain it longer.

If you opt in to supplier contact sharing, your details may be retained by the relevant suppliers subject to their own privacy policies, which we are unable to control after disclosure. We recommend reviewing the privacy policy of any supplier you engage with.

We do not sell your personal data. We do not share your data with third parties for advertising purposes.

We may disclose your data in the following limited circumstances:

• Matched loyalty suppliers — only if you explicitly opt in on the Brief form. We share your name, company name and work email address only.
• New World Loyalty team — our analysts and consultants who review briefs and produce reports have access to your submission data.
• Technology service providers — we use Convex (database) and email infrastructure to store and process submissions. These providers act as data processors under contractual arrangements that require them to protect your data.
• Legal obligation — we may disclose data where required to do so by law or regulatory authority.

Our primary data storage and processing infrastructure is operated by providers based in the United States. Where data is transferred outside the UK, we rely on standard contractual clauses (SCCs) or equivalent mechanisms to ensure an adequate level of protection.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restriction — to ask us to pause processing while a dispute is resolved
• Right to portability — to receive your data in a machine-readable format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please email us at iain@newworldloyalty.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

LoyaltyFit uses only technically necessary cookies required for the website to function. We do not use advertising cookies, analytics cookies, or third-party tracking pixels. No consent banner is required for cookies that are strictly necessary.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. We recommend checking this page periodically.