Privacy Policy

1. Who We Are

NovaPass is a digital loyalty card platform. We provide businesses with digital loyalty cards delivered via Apple Wallet and Google Wallet.

Email: contact@getnovapass.com
Phone: 020 7164 0034
Website: getnovapass.com

2. Controller vs Processor

When you interact with us as a business owner (visiting our website, signing up, using the dashboard), we act as a data controller and this Privacy Policy applies to you.

When you use NovaPass to run your own loyalty programme and issue cards to your customers, we process your customers' data on your behalf. In that context, we act as a data processor, and you (the business) are responsible for your own privacy notices to your customers. If one of your customers wants to exercise their data rights, they should contact you directly.

3. What Data We Collect

We collect data in two contexts:

• Business owners: name, email, phone number, business name, branding assets (logos, images), and account credentials.
• End customers (cardholders): device identifiers, stamp counts, wallet push tokens for notifications, and pass registration data. We do not collect names, emails or payment information from cardholders.

4. How We Use Your Data

We use data to:

• Provide and maintain the loyalty card service
• Send push notifications to wallet cards (stamp updates, reward alerts, messages)
• Allow businesses to manage their loyalty programme via the dashboard
• Improve and develop the platform
• Respond to support requests and enquiries

5. Data Storage & Security

All data is stored securely using Google Firebase (Firestore and Firebase Storage), hosted within Google's cloud infrastructure. Card assets are stored in Firebase Cloud Storage.

We use appropriate technical and organisational safeguards to protect your data. However, no online system can guarantee complete security. You are responsible for keeping your account credentials and passwords confidential. If you believe your account has been compromised, contact us immediately at contact@getnovapass.com.

6. Data Retention

We retain personal data only for as long as necessary to provide the service and meet our legal obligations. When a business account is closed or data is no longer needed, we will delete or anonymise it. Customer card data is retained for the duration of the loyalty programme and deleted upon request.

7. Data Sharing

We do not sell your data. We share data only with:

• Google Firebase — infrastructure, database and storage provider
• Apple — for Apple Wallet pass delivery and push notifications
• Google — for Google Wallet pass delivery

All third-party providers are required to handle data securely and only as instructed by us.

8. Cookies

Our customer-facing join pages use a single functional cookie (digi_device) solely to prevent duplicate loyalty card creation when a customer scans a QR code. No tracking, advertising or analytics cookies are used on these pages.

Our dashboard and website may use essential cookies required for login sessions and basic functionality.

9. Children

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental consent, please contact us and we will delete it promptly.

10. Your Rights (UK GDPR)

If you are based in the UK or EEA, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us at contact@getnovapass.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via the dashboard. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

For any privacy questions or to exercise your rights:

Email: contact@getnovapass.com
Phone: 020 7164 0034
Website: getnovapass.com