Privacy Regulations and Compliance
Which privacy regulations does BrandWallet comply with?
Which privacy regulations does BrandWallet comply with?
BrandWallet complies with all major international privacy regulations, including:
How we maintain compliance:
- Data protection by design — privacy is built into the platform from the ground up
- Regular privacy impact assessments
- Ongoing compliance audits
- Transparent data practices and clear user consent management
BrandWallet operates globally. If your business operates in a jurisdiction not listed above, contact our support team to discuss your specific compliance requirements.
Data Protection Measures
What security measures protect customer data?
What security measures protect customer data?
BrandWallet implements industry-standard security measures across every layer of the platform:
- Encryption — all data is encrypted in transit (TLS) and at rest, so it’s never exposed in readable form
- Access controls — role-based permissions combined with multi-factor authentication ensure that only authorized users can access sensitive data
- Regular security audits — the platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities
- Incident response — a comprehensive breach response procedure is in place to detect, contain, and report any security incidents in accordance with regulatory requirements
- Staff training — all BrandWallet employees receive regular privacy and security training
Customer Data Rights
What rights do my customers have over their data?
What rights do my customers have over their data?
Under GDPR, CCPA, PIPEDA, and similar regulations, your customers have the following rights regarding their personal data:
BrandWallet provides tools to help you:
- Manage and respond to incoming customer data requests
- Export individual customer records
- Delete customer data upon request
- Update privacy preferences and consent settings
When a customer exercises one of these rights, you are responsible for responding within the timeframes required by applicable law (e.g., 30 days under GDPR). BrandWallet’s tools are designed to help you fulfill these requests efficiently.
Privacy Policy Summary
What data does BrandWallet collect — and what does it not collect?
What data does BrandWallet collect — and what does it not collect?
Data we collect (only what is necessary):
- Customer information required to operate your loyalty program (e.g., name, email address, phone number)
- Transaction data for program management and reporting
- Usage analytics to improve platform functionality
- Contact information for customer support purposes
- Personal information that isn’t necessary for the service
- Sensitive financial data beyond what’s required to process loyalty transactions
- Data intended for third-party marketing purposes
- Any information collected without explicit customer consent
What is customer data used for — and what is it not used for?
What is customer data used for — and what is it not used for?
We use your data only to:
- Provide and operate the BrandWallet loyalty platform
- Improve platform features and reliability over time
- Offer customer support and technical assistance
- Comply with our own legal obligations
- Sell customer data to any third party, ever
- Use your data for marketing unrelated to your BrandWallet account
- Share your data with other businesses without your explicit consent
- Retain data beyond the period necessary for the stated purposes
Terms of Service Highlights
What are the key points of BrandWallet's Terms of Service?
What are the key points of BrandWallet's Terms of Service?
By using BrandWallet, you agree to the following core terms:Your responsibilities as a merchant:
- Use the platform in compliance with all applicable laws and regulations
- Respect your customers’ privacy rights and handle their data appropriately
- Maintain accurate account information
- Not misuse the platform, its features, or the data accessible through it
- BrandWallet targets 99.9% platform uptime — your loyalty program should be accessible to customers at virtually all times
- Scheduled maintenance is communicated in advance with as much notice as possible
- Regular platform updates and security patches are deployed to keep the service secure and current
- Customer support is available during business hours, with extended support for higher-tier plans
- See the Support page for full details on response times and contact channels
The full Terms of Service, Privacy Policy, Data Processing Agreement, and Cookie Policy are available in your account dashboard. We recommend reviewing these documents when you first set up your account.

