How XEQT Loyalty handles personal information

XEQT (Pty) Ltd operates XEQT Loyalty. The information officer is Erik Bester (privacy@xeqt.co.za). This notice is written for South Africa’s Protection of Personal Information Act, and the same controls are meant to be usable under the UK GDPR and the EU GDPR. It is not a legal opinion.

A shop is responsible for its own customers’ loyalty records. XEQT processes those records to run the programme. XEQT is responsible for merchant logins, invoices, and support.

We keep your name, email, an optional phone number, stamp times, and the rewards you earn. We do not collect ID numbers or card numbers. Paystack collects card details on its own page when a shop pays an invoice.

You can download your data and delete your account from the app. Deletion removes your name and email. Tax invoices stay, because the law requires us to keep them, and they no longer carry your name.

Hosting region recorded for this installation: ZA. Subprocessors: Hostinger (hosting); Cloudflare (DNS/CDN when enabled). Marketing email is off unless you tick the box.