Privacy Policy

1. Who we are

Eazistamp is operated by Eazistamp S.L., registered in Spain. We operate the Eazistamp loyalty stamp card platform, accessible at eazistamp.com and via the Eazistamp iOS and Android apps.

For data protection purposes, we act as:

• Data Controller for data relating to our direct customers (business owners and staff who use Eazistamp)
• Data Processor on behalf of our business customers, for data relating to their end customers (loyalty card holders)

Contact for data protection matters: privacy@eazistamp.com

2. What data we collect and why

For business owners and staff (our direct customers):

• Name and email address — to create and manage your account
• Phone number — for two-factor authentication
• Business name and address — to configure your loyalty program
• Payment information — processed by Stripe; we do not store card details
• Usage data — to improve the platform (pages visited, features used)

For loyalty card holders (end customers of businesses using Eazistamp):

• Phone number or email address — to identify the customer and link their stamp card
• Stamp and reward history — to operate the loyalty program on behalf of the business

3. Legal basis for processing (GDPR)

• Performance of contract — processing necessary to provide the Eazistamp service to you
• Legitimate interests — analytics and platform improvement, fraud prevention
• Legal obligation — tax records, compliance with applicable law
• Consent — push notifications (you can withdraw at any time in your device settings)

4. Third-party services and international transfers

We use the following third-party services which may process your data:

All international transfers rely on Standard Contractual Clauses approved by the European Commission.

5. How long we keep your data

• Account data: for the duration of your account, plus 30 days after deletion request
• Loyalty card data: for the duration of the business's subscription, plus 30 days
• Payment records: 7 years (Spanish tax law requirement)
• Backup exports: 30 days

6. Your rights

Under GDPR and Spanish law (LOPDGDD), you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Withdraw consent at any time (where processing is based on consent)

To exercise any right, email privacy@eazistamp.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD), aepd.es.

7. Cookies and tracking

Our website uses cookies to improve your experience. You can accept or decline non-essential cookies via the banner shown on your first visit. The Eazistamp mobile apps do not use browser cookies but may use device identifiers for analytics (Firebase Analytics). You can opt out of analytics in your device settings.

8. Changes to this policy

We will notify you of material changes by email or in-app notification at least 14 days before they take effect.