Privacy Policy

Version: 1.0
Effective Date: 13 July 2026

1. Introduction

Welcome to ShopEarn. ShopEarn is a digital customer loyalty platform designed to help businesses reward their customers through digital loyalty programmes, barcode scanning, QR code scanning, reward points, promotional offers, and customer engagement tools.
 
At ShopEarn, protecting your privacy is one of our highest priorities. We are committed to processing personal information fairly, lawfully, transparently, and securely in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.
 
This Privacy Policy explains:
  • The types of personal information we collect.
  • Why we collect your personal information and the lawful basis for doing so.
  • How we use your personal information.
  • When and with whom we may share your personal information.
  • How long we retain your personal information.
  • Your rights in relation to your personal information.
  • How you can contact us with any questions or requests regarding your personal information.
 
By using the ShopEarn website, mobile application, or any ShopEarn services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Privacy Policy applies to:
  • The ShopEarn website (https://shopearn.co.uk/)
  • The ShopEarn mobile application
  • Merchant accounts and dashboards
  • Customer accounts and dashboards
  • Barcode and QR code scanning functionality
  • Loyalty rewards and reward point transactions
  • Promotional offers and campaigns
  • Customer support services
  • Marketing and promotional communications
  • All other products, services, and features operated under the ShopEarn platform
 
This policy applies only to users located within the United Kingdom unless otherwise stated.

3. Definitions

  • Account means your registered ShopEarn account.
  • Barcode means a machine-readable code (such as UPC, EAN, or Code 128) used to record customer visits, purchases, and reward transactions.
  • Customer means any individual who uses the ShopEarn mobile application or participates in a loyalty programme operated through ShopEarn.
  • Merchant means a business registered with ShopEarn to operate a loyalty programme.
  • Platform means all ShopEarn services including the website, mobile applications, and merchant dashboard.
  • Personal Data means any information relating to an identified or identifiable individual.
  • Processing means collecting, recording, organising, storing, using, sharing, or deleting personal information.
  • QR Code means a unique machine-readable 2D code used to record customer visits, purchases, and reward transactions.
  • Reward Points means loyalty points earned by customers through participating merchants.
  • Services means all digital products and services supplied by ShopEarn.
  • UK GDPR means the United Kingdom General Data Protection Regulation.

4. Our Commitment

ShopEarn is committed to protecting every user’s privacy. We follow the principles of UK GDPR by ensuring that personal data is:
  • Processed lawfully, fairly, and transparently.
  • Collected only for specified, explicit, and legitimate purposes.
  • Limited to the information necessary for the intended purpose (data minimisation).
  • Accurate and kept up to date where required.
  • Retained only for as long as necessary.
  • Protected using appropriate technical and organisational security measures.
  • Processed responsibly and securely.

5. Information We Collect

Depending on how you use ShopEarn, we may collect the following information:
 
5.1 Information You Provide
  • Full name
  • Email address
  • Mobile number
  • Business name & Company information (for Merchants)
  • Postal address
  • Date of birth (where required for age-restricted rewards)
  • Password (stored in encrypted/hashed form)
  • Profile photograph (optional)
  • Customer and Marketing preferences
 
5.2 Merchant Information
  • Business name & Trading name
  • Business registration details & VAT number (if applicable)
  • Registered office address & Store locations
  • Contact details & Website address
  • Subscription plan & Billing information
  • Business category & Merchant account settings
 
5.3 Customer Information
  • Name, Email address, Telephone number
  • Loyalty account details
  • Favourite businesses
  • Reward history & Reward redemptions
  • QR and Barcode scan history
  • Preferences
 
5.4 Automatically Collected Information
When you access ShopEarn, we may automatically collect technical information including:
  • IP address, Browser type, Device model, Operating system
  • Screen resolution, Time zone, Login times
  • Pages viewed, Referral source, Device identifiers
  • Crash reports, App version (This information helps us improve security, diagnose issues, and enhance the user experience.)
 
5.5 Loyalty Programme Data
  • Barcode and QR code scans
  • Visits and Purchases (where integrated with Merchant POS)
  • Reward points earned, redeemed, and bonus rewards
  • Promotional offers claimed
  • Loyalty balances and Customer activity history
 
5.6 Location Data
Where enabled by the user, ShopEarn may process approximate location information to help customers discover nearby participating merchants, improve location-based services, and support relevant offers. Location services are optional and can be disabled within your device settings.
 
5.7 Marketing Preferences
We maintain records of your communication preferences, including whether you have opted in to receive promotional emails, SMS messages, push notifications, special offers, and newsletters. You can update or withdraw your preferences at any time.

6. How We Use Your Information & Lawful Basis (UK GDPR)

Under the UK GDPR, we must have a valid “lawful basis” to process your Personal Data. We use your information for the following purposes and legal bases:

  • Providing the Platform
    • Purpose: Managing your account, processing barcode and QR code scans, tracking loyalty points, and facilitating rewards.
    • Lawful Basis: Performance of a Contract (processing is necessary to provide the services you have requested).
  • Platform Improvement
    • Purpose: Analysing app crashes, fixing technical issues, and improving the user interface and overall platform experience.
    • Lawful Basis: Legitimate Interests (to ensure our platform operates correctly, efficiently, and securely).
  • Fraud Prevention and Security
    • Purpose: Monitoring suspicious scanning activity, preventing fraudulent transactions, and protecting accounts from unauthorised access.
    • Lawful Basis: Legitimate Interests (to protect our platform, Merchants, and Customers).
  • Marketing Communications
    • Purpose: Sending promotional emails, SMS messages, push notifications, and other marketing communications.
    • Lawful Basis: Consent (you may withdraw your consent at any time through app settings or by using unsubscribe options).
  • Legal and Tax Compliance
    • Purpose: Retaining billing information, transaction records, and other required documentation for HMRC and regulatory purposes.
    • Lawful Basis: Legal Obligation (to comply with UK tax, accounting, and legal requirements).

7. How We Share Your Information

We do not sell your personal data. We only share your data with trusted third parties under strict data processing agreements:
  1. Merchants: When you scan a barcode or QR code at a participating store, we share relevant transaction data (e.g., points earned, visit timestamp) with that specific Merchant so they can fulfil your reward.
  2. Service Providers: Cloud hosting providers (e.g., AWS/Azure), payment gateways (for Merchant subscriptions), and SMS/Email delivery services.
  3. Analytics Providers: To help us understand app usage (data is anonymised where possible).
  4. Legal Authorities: If required by law, court order, or to prevent fraud and illegal activities.

8. International Data Transfers

ShopEarn is a UK-based platform. Your data is primarily stored on secure servers located within the United Kingdom or the European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy regulations approved by the UK Secretary of State.

9. Data Retention

We will only retain your Personal Data for as long as is necessary to fulfil the purposes we collected it for:
  • Active Accounts: Retained for as long as your account is active.
  • Loyalty & Transaction Data: Retained for the duration of the loyalty programme, plus 6 years to comply with UK tax and accounting regulations.
  • Marketing Data: Retained until you withdraw consent or request deletion.
  • Deleted Accounts: Upon account deletion, personal identifiers are erased or anonymised within 30 days, except where we are legally required to retain transaction logs.

10. Data Security

We implement robust technical and organisational measures to protect your data, including:
  • Encryption: All passwords are hashed, and data in transit (between your device and our servers) is encrypted using TLS/SSL protocols.
  • Access Controls: Strict role-based access controls for ShopEarn staff.
  • Secure Scanning: Barcode and QR code tokens are encrypted and time-sensitive to prevent fraudulent scanning or duplication.

11. Your Legal Rights Under UK GDPR

Depending on your location and applicable laws, you have the following rights regarding your Personal Data:
  1. Right of Access: Request a copy of the personal data we hold about you.
  2. Right to Rectification: Request correction of inaccurate or incomplete data.
  3. Right to Erasure (‘Right to be Forgotten’): Request deletion of your data, subject to certain legal exceptions (e.g., pending financial transactions).
  4. Right to Restrict Processing: Request that we limit how we use your data.
  5. Right to Data Portability: Request your data in a structured, machine-readable format.
  6. Right to Object: Object to processing based on legitimate interests or direct marketing.
  7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
 
To exercise any of these rights, please contact us using the details in Section 14.

12. Cookies and Tracking Technologies

ShopEarn uses cookies and similar tracking technologies to improve website functionality, provide secure services, analyse performance, and enhance user experience.

Cookies are small text files stored on your device when you visit our website. They help us recognise your device, remember your preferences, maintain secure sessions, and understand how users interact with our platform.

 

Types of Cookies We Use
12.1 Strictly Necessary Cookies

These cookies are essential for the operation of the ShopEarn platform. They enable core functions such as:

  • User login and account authentication
  • Maintaining secure sessions
  • Protecting against fraudulent activity
  • Remembering essential website settings

These cookies cannot be disabled because the website may not function properly without them.

 

12.2 Functional Cookies

These cookies allow ShopEarn to remember choices you make and provide enhanced features, including:

  • User preferences
  • Account settings
  • Language or display preferences

 

12.3 Analytics and Performance Cookies

These cookies help us understand how visitors use our website and improve our services.

They may collect information such as:

  • Pages visited
  • Time spent on pages
  • Browser and device information
  • Website performance data

We use this information only for improving platform performance and user experience.

 

12.4 Marketing and Advertising Cookies

Where you provide consent, ShopEarn may use marketing cookies to:

  • Measure advertising effectiveness
  • Provide relevant offers and promotions
  • Understand customer interests and preferences

You can withdraw your consent at any time through our cookie settings.

 

Third-Party Cookies

Some cookies may be placed by trusted third-party service providers that help us operate and improve our platform, such as:

  • Analytics providers
  • Security services
  • Payment providers (where applicable)
  • Communication and marketing services

These third parties process information according to their own privacy policies.

 

Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality and performance of the ShopEarn platform.

Where required by law, ShopEarn will request your consent before placing non-essential cookies on your device.

 

Cookie Consent

When you first visit our website, you may be asked to choose your cookie preferences. You can:

  • Accept all cookies
  • Reject non-essential cookies
  • Manage cookie preferences

Your cookie preferences can be updated at any time.

13. Children's Privacy

The ShopEarn Platform is not intended for children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services (e.g., new scanning technologies) or legal requirements. We will notify you of any material changes via the App, email, or a prominent notice on our website prior to the change becoming effective.

15. Contact Us & Your Right to Complain

Data Controller:
Shop Earn
Office 7186 58, Peregrine Road
Ilford
IG6 3SZ
United Kingdom
www.shopearn.co.uk
 
Data Protection Contact:
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
 
Right to Complain to the ICO:
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s supervisory authority: Information Commissioner’s Office (ICO)
  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF