Privacy Policy

What this policy covers?

MyPromoPal recognises the importance of personal privacy and security and has developed this privacy statement in order to demonstrate our company commitment to privacy. In order to comply with the new General Data Protection Regulation (EU) 2016/679 and the Privacy and Electronic Communications (EC Directive) Regulations, or any revision or iteration as applicable, the following policy has been designed to give you a clear understanding of how your data is used, shared and protected. It also highlights the tools that can be deployed to protect your privacy and the rights you have, and how you can contact MyPromoPal. By visiting or making use of the MyPromoPal website, apps, services or features the user agrees to the policy below. MyPromoPal is a Limited registered in Northern Ireland (Company Number: NI708058) with a registered address at 22 Dalboyne Park, Lisburn, BT28 3BU.

Scope of this policy

By using our site, in subscribing to our service, or filling in any online forms on our website, or other sites owned by MyPromoPal you agree and accept that we process, store and use the personal data submitted in accordance with the policy below. You can review your rights in the “Your Rights” section.

MyPromoPal may act as either the Data Controller or the Data Processor depending on how you interact with the website, apps or services. Where it exists as the Data Controller we ensure that any Data Processors that we use are fully compliant and only use the data as set forth in this agreement.

Information We Collect

We collect information about you when you provide it to us, when you use our products, or when other services provide it to us.

Account information: When you register for an account on MyPromoPal, we collect your name, gender, age bracket and email address when you create an account. This information is used for account management and to personalise your experience by displaying your name within the app.

Website visitors (Consumers): If you are one of our website, or other domains registered to MyPromoPal, visitors, we may collect non-personally-identifying information such as the browser type you are using, the referring site and date and time of each visit. We collect information when you register on our site, subscribe to our newsletter or fill out a form.

Automatically collected information: Upon usage or interaction with our services we may track certain information about you. This includes information about the product features you use, web pages you visit, your location to serve relevant content and frequency of platform usage. We use this information in aggregate form only for statistical purposes.

Encrypted Passwords: Your password is stored in an encrypted format using industry-standard encryption methods ensuring that it remains secure.

Location Data: With your explicit consent, we collect your device's location data. This is used to recommend venues and promotions that are near your current location. You can opt-in or opt-out of sharing your location at any time through your device’s settings.

Venue Clients (Customers): Upon registration we will request your bank account details to make reimbursement.

Cookies: MyPromoPal and our third-party partners, such as Google Analytics, use cookies and other tracking technologies, such as pixels and tags, to recognise you to provide you with content relevant to you.

Information Usage

We process information (either personally-identifiable or not) we collect, that has either been provided directly or in-directly by you or automatically collected for certain business legitimate interests which may include some or all of the following:

Account Management: To create and maintain your user account.

Personalising your experience: your information and preferences helps us to serve you content relevant to your individual needs.

Improving our website and products: we continually strive to improve our website offerings based on the information, usage and feedback from our users

Improving customer service: your information helps us to more effectively respond to your customer service requests and support needs.

Taking or making payment: if you are a venue client then we will use this information to make to and take payments from you.

To provide you with notifications: we may send you push notifications on your tablet or device to provide tailored recommendations for nearby venues and promotions based on your location. You can opt in or out of these communications at any time.

Security: To ensure that your password is stored securely in accordance with best practices.

To administer, process or run any contests, promotions, surveys or other site features that might be running at the time

To send periodic emails: The email addresses you provide may be used to send you information about upcoming offers, promotions and other things we believe that may be of interest to you. You will receive an automated email when completing sign up where you can easily opt-out immediately of these communications, or it will be in the footer of all communication.

Reporting to our clients: aggregated non-identifiable statistical information may be shared with our partners to gain insight into how our service is working or could further benefit them.

In all cases where we use legitimate interests to process your Personal Data we have conducted Legitimate Interest Assessments to ensure that your rights and privacy are held in the highest regard. We also commit to constantly re-evaluating our stances and decisions when it comes to Legitimate Interests and anything else in this policy.

Data Storage and Protection

Your data is stored securely on our servers. We take appropriate measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Passwords are stored in an encrypted format using Laravel's built-in encryption system, ensuring the highest level of protection.

Storage Duration

How long we keep information we collect about you depends on the type of account and information that we hold. We will only retain your personal information for as long as necessary to fulfil the reasons that we collected it for, including satisfying legal requirements, reporting purposes, and accounting requirements. We always consider the type of information that we hold, the amount collected, and how sensitive it may be. We will always minimise the risk from anyone using or sharing this information without your permission. After the time period is exceeded all data will either be securely deleted or some may be retained in non-personally identifiable aggregated form, in these instances we will be able to use this information without further notice to you.

Customers: We will hold your account information for as long as your account remains active. We may retain your information for up to 3 years from the financial year end in the year that you deactivate your account in order to comply with the HMRC’s recommended guidelines

If you delete, or request to have your account deleted, then your personal information (other than what is required to be kept by law) will be securely and irreversibly deleted, and your remaining information made anonymous and we will be able to use this information without further notice to you. Please note some information is required to be kept for legal and accounting reasons (see above).

Cookies

We use cookies on our services (Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser) to enable our systems to recognise your browser and capture and remember certain information. We may use cookies to understand and save your preferences for future visits and social media cookies in order to tailor advertising. You can view our full cookie policy here.

Further information

Personal Information is a key component of our business and we do not rent, sell, trade, or otherwise transfer your personally identifiable information to anyone. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We will never pass on your information for marketing purposes, even to trusted third parties, without your explicit prior consent.

However, non-personally identifiable aggregate-level information may be provided to our clients or other parties for marketing, advertising, analysis, or other uses.

Your Rights

You have the right to request:

Access to your personal data

Electronic copies of your personal data

Have your data corrected if it is incorrect or has changed

Deletion or restriction in certain circumstances by applicable law

Where we have asked for consent, you have the right to withdraw at any time.

Children’s Online Privacy Protection Act Compliance

We are fully compliant with the requirements of COPPA (Children’s Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. To the best of our ability all of our website, products and services are all directed to people who are at least 18 years old or older.

Third Party Data Processors

We are affiliated with a variety of organisations (commercial and non-commercial), with some of them functioning as Data Processors. We may supply you with information on behalf of our clients, however these will always come directly from us unless you have directly consented to be shared with them. We may also make use of other business to undertake processing for us, such as for hosting or other service providers, and therefore have a requirement to share your date with them. However, this will always only be for the purposes laid out in our contract with them and will not be for marketing purposes unless it is coming directly form us. All of our Third Parties have committed to the new GDPR regulations and have legal contracts with us and only process any data they receive for us for specific reasons as laid out in the contract, although we are not in control of their Privacy Policies, but we remain the Data Controller under these circumstances.

Below you can find a list of our sub-processors and the reason for using them:

Xero (for managing our accounting processes)

Google Inc. (for anonymised analytics, for sending email)

Squarespace (for sending email and newsletters)

In some circumstances, we may decide to buy or sell business assets. In the unlikely event that MyPromoPal ceases to trade, is acquired by another business or enters bankruptcy, this privacy policy in relation to this data would become in the purchaser’s control. However, it would only be for the purposes and uses as laid out in this policy.

Google Analytics

This website uses Google Analytics as a Data Processor for MyPromoPal, a web analytics service provided by Google to track and evaluate web and app performance. Google Analytics uses the aforementioned cookies in order for MyPromoPal to evaluate how users interact with our platforms. You can find out more about Google Analytics and its practices here.

Remarketing

We may use Google’s remarketing products in order to display you ads across the Google Display Network (GDN). This enables us to let Google deliver our ads on sites across the web which are relevant to your behaviour on our website. This is done by creating visitors lists based on stored cookies in your browser. This is produced and conducted by Google and is not linked to your personal information in relation to the ads served. You can opt out of Google's use of Google Ads across the Google by modifying you “Ads Preferences Manager” to not serve you relevant ads.

Alternatively, there are other ways of not receiving targeted advertising by either surfing the web anonymously (via private browsing) or by visiting the Network Advertising Initiative and opting-out of these types of adverts.

Changes to our Privacy Policy

MyPromoPal may change this policy periodically and will carefully monitor industry or government mandated changes and their impacts on this policy. We will always inform you of any amendments made to our policies.

Contacting Us

Your information is controlled by MyPromoPal.

For all other queries regarding this policy and your personal data please get in touch with us at info@ mypromopal.com. If you would like to remove all of your personally-identifiable information from our servers, please get in touch with the addresses above and MyPromoPal will respond within 30 days