Privacy Policy

1. What We Collect

LetLoyal collects your name, mobile phone number, email address, and optionally your date of birth and gender when you register as a customer. Merchants provide their business name, email, and business details during onboarding.

2. How We Use Your Data

Customer data is used solely to operate your loyalty card account — tracking visits, calculating rewards, and enabling redemption. We never sell your personal data to third parties. Merchants see only your first name and a masked phone number (e.g. 98••••666).

3. Data Storage

All data is stored securely on servers. Passwords are hashed using bcrypt and never stored in plain text. We use industry-standard encryption for data in transit (HTTPS/TLS).

4. Your Rights

Under the Digital Personal Data Protection Act 2023 (DPDP Act), you have the right to access, correct, and delete your personal data. You may also request deletion of your account and all associated personal data by visiting your Account settings or by contacting us. To exercise these rights, contact us at hello@letloyal.com.

5. Cookies

We use essential cookies to maintain your login session. We do not use advertising or tracking cookies.

6. Contact

For privacy-related questions, email hello@letloyal.com.

7. Data Breach Notification

In the event of a personal data breach likely to result in risk to your rights or freedoms, LetLoyal will notify affected users and the Data Protection Board of India within the timeframe prescribed under the DPDP Act 2023. Notifications will be sent to the email address registered on your account.

8. Data Storage & International Transfers

Your personal data is hosted on secure servers located in the European Union. Some service providers we rely on (for example, optional usage-analytics tools) may process data on servers outside India. Under the Digital Personal Data Protection Act 2023, personal data may be transferred to any country that has not been restricted by the Government of India; no such restriction currently applies to the jurisdictions we use. We do not sell your personal data, and all transfers are carried out consistent with the DPDP Act 2023.

9. Your Rights Under DPDP Act 2023

Under the Digital Personal Data Protection Act 2023, you have the right to: (a) access information about your personal data processed by us; (b) correction and erasure of inaccurate or incomplete data; (c) grievance redressal; (d) nominate a representative. To exercise these rights, use the “Delete My Account” option in the My Rewards app or contact us at hello@letloyal.com.

10. Grievance Contact

LetLoyal is currently operating as an invite-only beta pilot and is in the process of formal incorporation. During this period, all data-related grievances, requests, and concerns are handled directly by the founding team.

Email: hello@letloyal.com
Response time: Grievances will be acknowledged within 48 hours and resolved within 30 days.
Note: Legal entity name, CIN, and registered address will be updated on this page upon incorporation.