Privacy Notice

Last updated 14 October 2026 · Written against the Personal Data Protection Act 2010 (Malaysia)

This notice explains what personal data Loyalty Cards collects, why, who sees it and what you can do about it. It is given under the Notice and Choice Principle of the Personal Data Protection Act 2010 ("PDPA").

The data user under the PDPA is Aivolux Technologies (Business Registration No. JM1051832-K), Malaysia, which operates Loyalty Cards. Questions about your data, and any request to see, correct or delete it, go to support@loyaltycards.click.

The short version. We hold two different kinds of personal data and we are in a different legal position for each. Your shop's account details are ours to look after. Your customers' details belong to the shop — we only hold them on the shop's behalf. We do not sell personal data to anyone, ever, and we do not market to your customers.

On this page

Who we are
The two roles
What we collect
Why we collect it
Whether it is obligatory
Who we share it with
Where it is kept
How long we keep it
How we protect it
Your rights
Cookies
If something goes wrong
Changes and contact
Notis Privasi — Bahasa Malaysia

1. Who we are

Loyalty Cards, Kuala Lumpur, Malaysia. We make software that lets a shop run a digital stamp card. You can reach us about anything in this notice at support@loyaltycards.click.

2. The two roles

The PDPA distinguishes a data user — who decides why and how personal data is processed — from a data processor, who only processes it on the data user's behalf. Which one we are depends on whose data it is.

Shop owners and staff — we are the data user

When you sign up, the details you give us are collected for our own purposes: running your account, taking payment and supporting you. Everything in this notice applies to that data directly.

Shop customers — the shop is the data user, we are the data processor

When someone scans a shop's QR code and joins its card, the name and phone number they give belong to that shop. The shop decides why it is collected and what happens to it. We hold and process it only to run the service for the shop, and only on the shop's instructions.

If you are a customer of a shop and want your data accessed, corrected or deleted, ask the shop. If you ask us, we will pass your request to them and tell you we have done so.

As a data processor we act on the shop's instructions. The shop is responsible for having collected the data lawfully, for telling its customers what it is used for, and for answering their requests. We pass on anything that reaches us and help where we reasonably can; sustained assistance beyond that may be chargeable.

3. What we collect

From a shop owner or staff member

Name, email address and (if given) phone number and year of birth.
Your business's name, branch names and addresses.
A hash of your password. We never store the password itself and cannot read it.
Billing records — what you were charged and when. Card numbers are handled by Stripe and never reach us.
Technical records of use: sign-in times, IP address, and an audit record of actions taken in the app, kept so an account can be investigated if it is misused.

From an affiliate

Name, email address and mobile number. The mobile is required: screening an application and sorting out a payment that did not arrive both happen over the phone.
Your town and country, and the social handles or sites you tell us you post on — Instagram, TikTok, Threads, Facebook, YouTube, a website, or anywhere else you name. We store the handle, not your account.
The figure you give for how many people you reach. It is your own estimate and we do not verify it.
What you wrote about how you will find shops.
Your answers to the five knowledge questions, and the score. These are kept so a person can screen the application by reading what you said rather than by sorting on a number, and afterwards so we know which help to send you first. There is no pass mark and the answers are never published.
A hash of your password, and the date and version of the affiliate terms you accepted.
Your bank name, account name and account number, once you add them, so we can pay you. The account number is shown back to you as the last four digits only.
Records of clicks on your link — a one-way hash of the visitor's IP address and the channel tag, never the visitor's identity — and the commission ledger.

An affiliate sees a shop's name, town, plan and renewal date. An affiliate never sees a shop's customers, their cards or their stamps, and cannot reach that data at all. See the affiliate terms.

From a shop's customer (held for the shop)

The name and phone number they enter when they join a card. The form asks for nothing else.
An email address, only where the shop adds or imports one itself — the join form does not ask for it and a customer is never required to give one.
Their stamps, the dates they were given, which branch gave them, and any rewards claimed.

We do not ask for, and do not want, identity card numbers, full dates of birth, home addresses, or any of the sensitive personal data the PDPA treats specially — health, religion, political opinions, or criminal records. Please do not put any of that into a name field.

Where we ask an account holder for a year of birth it is optional, it is a year and never a full date, and it is asked once, on your own profile. We never ask a shop's customer for it, and a shop cannot record one against a cardholder.

Personal data is collected directly from the person it belongs to, at the moment they type it in. We do not buy data or collect it from third parties.

4. Why we collect it

To create and run your account, and to let your staff sign in.
To run the stamp card: recording stamps, tracking progress and rewards.
To take payment and send receipts.
To support you when you ask, and to contact you about your account, your billing, or a security matter.
To keep the service secure, to detect and prevent abuse, and to meet our own legal obligations.
To understand how the product is used in aggregate, so we can improve it.

We will not use personal data for a new purpose that is unrelated to these without asking you first.

5. Whether it is obligatory

The PDPA requires us to tell you which data you have to give. Your name, email and password are obligatory — without them we cannot create an account or let you sign in. Your phone number is optional; the signup flow lets you skip it, and skipping it changes nothing about the service you get.

For a shop's customers: the name and phone number are what make the card findable at the counter. A customer who would rather not give them simply does not join the programme, and can still buy from the shop as normal.

6. Who we share it with

We do not sell personal data and we do not share it for anyone else's marketing. We disclose it only to these classes of third party, and only as far as the job requires:

Who	What for
Payment processor	Stripe, to take subscription payments and store card details. We never see or hold the card number.
Email provider	Resend, to deliver account email such as password resets and receipts.
Hosting provider	Hostinger, which hosts the servers and database the service runs on.
Professional advisers	Accountants and lawyers, where they need it to advise us.
Authorities	Where we are required to disclose by Malaysian law, a court order, or a lawful request from a regulator.
A buyer of the business	If Loyalty Cards is ever sold or merged, data may transfer with it. We would tell you before that happened, and this notice would continue to apply until you were told otherwise.

A shop's customer data is never shared with another shop. Every business's data is separated at the database level and a staff login can only ever reach its own business.

7. Where it is kept

The service runs on servers provided by Hostinger. Some of our providers — Stripe and Resend in particular — process data outside Malaysia in the course of delivering payments and email.

Section 129 of the PDPA restricts transferring personal data out of Malaysia. We rely on your consent to this notice, and on the fact that these transfers are necessary for the performance of our contract with you. Where we can choose a region, we choose one as close to Malaysia as the provider offers.

8. How long we keep it

While your account is open — for as long as you use it.
After you stop paying — the account parks, and we keep it for 12 months so you can come back to it. After that we may delete it, and we will email you before we do.
Billing records — kept for seven years, because Malaysian tax law requires it.
Security and audit logs — 12 months.
On request — if you withdraw consent or ask us to delete your data, we delete it within 30 days — except for anything we are required to keep by law, and except for records we need to defend a legal claim.

9. How we protect it

Everything travels over HTTPS. The site refuses plain HTTP.
Passwords are stored as one-way hashes and cannot be read by us or recovered.
Every business's data is separated by a tenant identifier applied on the server from the signed-in session — never from anything the browser sends — so one business cannot reach another's records.
Staff logins see only the stamping screen. Billing, settings and exports are restricted to the owner.
Access to the production database is limited to the people who need it, and actions in the app are recorded in an audit log.
Backups are taken regularly.

No system is perfectly secure, and we will not pretend otherwise. What we can say is that we take the practical steps the PDPA's Security Principle requires, and that we would rather tell you quickly about a problem than quietly about a fix.

10. Your rights

Under the PDPA you may:

Access the personal data we hold about you, and be told how it is being processed.
Correct anything that is inaccurate, incomplete, misleading or out of date.
Withdraw your consent to processing. We will tell you plainly if withdrawing it means we can no longer provide the service.
Limit processing, including telling us to stop processing your data for direct marketing. We do not market to shop customers at all, and every email we send a shop owner about the product has an unsubscribe link — account, billing and security email is not marketing and will still be sent.

To exercise any of these, email support@loyaltycards.click. We will respond within 21 days, as the PDPA requires. We may ask you to confirm who you are first — we will not hand someone's data to a stranger who claims to be them. We do not charge for a first request. The PDPA permits a prescribed fee and we reserve the right to charge it for a repeated or excessive one.

11. Cookies and similar storage

We use as little of this as the product can work with.

On the app — your sign-in token is kept in your browser's local storage so you stay signed in. Clearing it signs you out. This is strictly necessary for the service to function.
On a customer's card — their card is a link. Nothing is stored on their device beyond what the browser keeps for any page, and they are never asked to install anything or create a password.
On the marketing site — no advertising or tracking cookies, and no third-party analytics that profile you across other sites.

12. If something goes wrong

If personal data we hold is lost or exposed in a way that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and the people affected, as the PDPA requires, without undue delay.

If you are not satisfied with how we have handled your data or your request, you can complain to the Personal Data Protection Commissioner (pdp.gov.my). We would rather you told us first, so we have a chance to fix it.

13. Changes and contact

If we change this notice in a way that materially affects you, we will email you and update the date at the top. The current version is always at loyaltycards.click/privacy.

Loyalty Cards
support@loyaltycards.click
Kuala Lumpur, Malaysia

Notis Privasi — Bahasa Malaysia

Seksyen 7(2) Akta Perlindungan Data Peribadi 2010 menghendaki notis ini dikeluarkan dalam Bahasa Inggeris dan Bahasa Malaysia. Versi Bahasa Malaysia diberikan di bawah. Jika terdapat percanggahan antara kedua-dua versi, versi Bahasa Inggeris di atas yang terpakai.

1. Siapa kami

Loyalty Cards, Kuala Lumpur, Malaysia. Kami menyediakan perisian yang membolehkan sesebuah perniagaan menjalankan kad setem digital. Hubungi kami mengenai apa-apa dalam notis ini di support@loyaltycards.click.

2. Dua peranan

APDP membezakan pengguna data — pihak yang menentukan tujuan dan cara data peribadi diproses — daripada pemproses data, yang hanya memproses data bagi pihak pengguna data.

Pemilik dan kakitangan kedai — kami ialah pengguna data. Butiran yang anda berikan semasa mendaftar dikumpulkan bagi tujuan kami sendiri: mengurus akaun anda, menerima bayaran dan memberikan sokongan.
Pelanggan kedai — kedai ialah pengguna data, kami pemproses data. Apabila seseorang mengimbas kod QR sesebuah kedai dan menyertai kad kedai itu, nama dan nombor telefon yang diberikan adalah milik kedai tersebut. Kami menyimpan dan memprosesnya semata-mata untuk menjalankan perkhidmatan bagi kedai itu, mengikut arahan kedai itu.

Jika anda pelanggan sesebuah kedai dan ingin mengakses, membetulkan atau memadamkan data anda, sila hubungi kedai berkenaan. Jika anda menghubungi kami, kami akan menyampaikan permintaan anda kepada mereka dan memberitahu anda bahawa kami telah berbuat demikian.

3. Data peribadi yang kami kumpulkan

Daripada pemilik atau kakitangan kedai:

Nama, alamat e-mel dan (jika diberikan) nombor telefon serta tahun kelahiran.
Nama perniagaan anda, nama dan alamat cawangan.
Cincangan (hash) kata laluan anda. Kami tidak menyimpan kata laluan itu sendiri dan tidak dapat membacanya.
Rekod pengebilan — apa yang dicaj dan bila. Nombor kad dikendalikan oleh Stripe dan tidak pernah sampai kepada kami.
Rekod teknikal penggunaan: masa log masuk, alamat IP, dan rekod audit tindakan dalam aplikasi.

Daripada pelanggan kedai (disimpan bagi pihak kedai):

Nama dan nombor telefon yang dimasukkan semasa menyertai kad. Borang itu tidak meminta apa-apa lagi.
Alamat e-mel, hanya jika kedai itu sendiri menambah atau mengimportnya — borang penyertaan tidak memintanya dan pelanggan tidak pernah diwajibkan memberikannya.
Setem yang diperoleh, tarikh ia diberikan, cawangan yang memberikannya, dan ganjaran yang dituntut.

Kami tidak meminta, dan tidak mahu, nombor kad pengenalan, tarikh lahir penuh, alamat kediaman, atau apa-apa data peribadi sensitif yang dilayan secara khusus oleh APDP — kesihatan, agama, pandangan politik atau rekod jenayah.

Tahun kelahiran yang kami minta daripada pemegang akaun adalah pilihan, ia adalah tahun dan bukan tarikh penuh, dan ia ditanya sekali sahaja di profil anda sendiri. Kami tidak sekali-kali memintanya daripada pelanggan kedai, dan kedai tidak boleh merekodkannya terhadap seseorang pemegang kad.

Data peribadi dikumpulkan terus daripada individu berkenaan pada masa ia dimasukkan. Kami tidak membeli data dan tidak mengumpulnya daripada pihak ketiga.

4. Tujuan pengumpulan

Membuka dan mengurus akaun anda, dan membolehkan kakitangan anda log masuk.
Menjalankan kad setem: merekodkan setem, kemajuan dan ganjaran.
Menerima bayaran dan menghantar resit.
Memberikan sokongan, dan menghubungi anda mengenai akaun, pengebilan atau keselamatan.
Memastikan perkhidmatan selamat, mengesan dan mencegah penyalahgunaan, serta mematuhi kewajipan undang-undang kami.
Memahami penggunaan produk secara agregat bagi tujuan penambahbaikan.

Kami tidak akan menggunakan data peribadi bagi tujuan baharu yang tidak berkaitan dengan perkara di atas tanpa bertanya kepada anda terlebih dahulu.

5. Sama ada wajib atau sukarela

Nama, alamat e-mel dan kata laluan anda adalah wajib — tanpanya kami tidak dapat membuka akaun atau membenarkan anda log masuk. Nombor telefon dan tahun kelahiran adalah pilihan, dan tidak memberikannya tidak mengubah apa-apa tentang perkhidmatan yang anda terima.

Bagi pelanggan kedai: nama dan nombor telefon adalah apa yang membolehkan kad dicari di kaunter. Pelanggan yang tidak mahu memberikannya tidak menyertai program itu, dan masih boleh berurus niaga dengan kedai seperti biasa.

6. Pihak ketiga yang menerima data

Kami tidak menjual data peribadi dan tidak berkongsi data bagi tujuan pemasaran pihak lain. Kami mendedahkannya hanya kepada kelas pihak ketiga berikut, setakat yang diperlukan sahaja:

Pemproses pembayaran — Stripe, untuk menerima bayaran langganan.
Penyedia e-mel — Resend, untuk menghantar e-mel akaun.
Penyedia pengehosan — Hostinger, yang mengehos pelayan dan pangkalan data.
Penasihat profesional — akauntan dan peguam, di mana perlu.
Pihak berkuasa — di mana kami dikehendaki mendedahkan oleh undang-undang Malaysia, perintah mahkamah, atau permintaan sah sesebuah pengawal selia.
Pembeli perniagaan — jika Loyalty Cards dijual atau digabungkan, data mungkin dipindahkan bersamanya. Kami akan memberitahu anda terlebih dahulu.

7. Pemindahan ke luar Malaysia

Perkhidmatan ini beroperasi di pelayan yang disediakan oleh Hostinger. Sebahagian penyedia kami — khususnya Stripe dan Resend — memproses data di luar Malaysia dalam melaksanakan pembayaran dan penghantaran e-mel.

Seksyen 129 APDP mengehadkan pemindahan data peribadi ke luar Malaysia. Kami bergantung pada persetujuan anda terhadap notis ini, dan pada hakikat bahawa pemindahan tersebut perlu bagi melaksanakan kontrak kami dengan anda. Di mana kami boleh memilih wilayah pelayan, kami memilih yang terdekat dengan Malaysia.

8. Tempoh penyimpanan

Semasa akaun aktif — selagi anda menggunakannya.
Selepas anda berhenti membayar — akaun dijeda dan disimpan selama 12 bulan. Selepas itu kami mungkin memadamkannya, dan kami akan menghantar e-mel terlebih dahulu.
Rekod pengebilan — disimpan selama tujuh tahun, kerana undang-undang cukai Malaysia menghendakinya.
Log keselamatan dan audit — 12 bulan.

9. Keselamatan

Semua trafik melalui HTTPS. Kata laluan disimpan sebagai cincangan sehala. Data setiap perniagaan diasingkan oleh pengecam penyewa yang ditentukan di pelayan daripada sesi yang telah log masuk — bukan daripada apa-apa yang dihantar oleh pelayar — supaya satu perniagaan tidak dapat mencapai rekod perniagaan lain. Akses kepada pangkalan data produksi dihadkan, dan tindakan dalam aplikasi direkodkan dalam log audit.

Tiada sistem yang sepenuhnya selamat dan kami tidak akan berpura-pura sebaliknya. Kami mengambil langkah praktikal yang dikehendaki oleh Prinsip Keselamatan APDP.

10. Hak anda

Di bawah APDP, anda boleh:

Mengakses data peribadi yang kami simpan tentang anda, dan diberitahu bagaimana ia diproses.
Membetulkan apa-apa yang tidak tepat, tidak lengkap, mengelirukan atau sudah lapuk.
Menarik balik persetujuan anda terhadap pemprosesan. Kami akan memberitahu anda dengan jelas jika penarikan itu bermakna kami tidak lagi dapat menyediakan perkhidmatan.
Menghadkan pemprosesan, termasuk menghentikan pemprosesan bagi tujuan pemasaran langsung.

Untuk melaksanakan mana-mana hak ini, e-mel support@loyaltycards.click. Kami akan membalas dalam tempoh 21 hari, sebagaimana dikehendaki APDP. Kami mungkin meminta anda mengesahkan identiti terlebih dahulu. Kami tidak mengenakan bayaran bagi permintaan pertama; APDP membenarkan fi yang ditetapkan dan kami berhak mengenakannya bagi permintaan berulang atau berlebihan.

11. Kuki dan storan serupa

Dalam aplikasi, token log masuk anda disimpan dalam storan tempatan pelayar supaya anda kekal log masuk; ini perlu bagi perkhidmatan berfungsi. Pada kad pelanggan, tiada apa-apa disimpan pada peranti melebihi apa yang disimpan pelayar bagi mana-mana halaman. Di laman pemasaran, tiada kuki pengiklanan atau penjejakan.

12. Jika berlaku pelanggaran

Jika data peribadi yang kami simpan hilang atau terdedah dengan cara yang berkemungkinan menyebabkan kemudaratan ketara, kami akan memaklumkan Pesuruhjaya Perlindungan Data Peribadi dan individu yang terjejas, sebagaimana dikehendaki APDP, tanpa kelewatan yang tidak wajar.

Jika anda tidak berpuas hati dengan cara kami mengendalikan data anda, hubungi kami dahulu. Anda juga berhak membuat aduan kepada Jabatan Perlindungan Data Peribadi (JPDP), Kementerian Digital Malaysia.

13. Perubahan dan hubungan

Jika kami mengubah notis ini dengan cara yang memberi kesan material kepada anda, kami akan menghantar e-mel dan mengemas kini tarikh di bahagian atas. Versi semasa sentiasa berada di loyaltycards.click/privacy.

Loyalty Cards
support@loyaltycards.click
Kuala Lumpur, Malaysia

Nota. Terjemahan ini disediakan dengan teliti tetapi belum disemak oleh peguam yang bertutur dalam Bahasa Malaysia. Ia memenuhi kehendak seksyen 7(2) bahawa notis dikeluarkan dalam kedua-dua bahasa; semakan profesional masih disyorkan sebelum pergantungan penuh.