Boosting engagement, loyalty, and revenue at zero upfront cost

Last updated: January 2025

1. Introduction

This Privacy Policy describes how Up Loyalty SAS (RCS Nanterre 891 486 177) processes data in connection with:

• The public website at www.up-loyalty.com
• The Up+ platform, including wallet engine, campaign engine, and redemption portal
• The Subsidiary Admin Portal (employees of Up Group subsidiaries)

Up Loyalty acts strictly as a Data Processor for Subsidiaries, which act as Data Controllers.

Up+ stores no directly identifiable user data.

2. Services Covered

• Transaction ingestion
• Campaign and points calculation
• Wallet management
• Redemption flows
• Subsidiary Admin Portal (employee login)
• Notification and validation APIs

3. Data We Process

3.1. End Users (Cardholders)

Up+ never receives personal data such as names, emails, or phone numbers.

Processed fields (tokenized/anonymized):

• userId / accountRefNo
• transactionRefNo
• merchantId, merchantName
• amount, date
• campaign rewards
• wallet balances & history

Identity verification is entirely performed by Subsidiaries.

3.2. Subsidiary Employees (Admin Portal Users)

For users logging into the Admin Portal, Up Loyalty processes:

• Login username (email or subsidiary credential)
• Password (hashed)
• Session identifiers
• Authorization roles
• Audit logs
• Activity logs (campaign creation/update, wallet adjustments)

4. Cookies

4.1. Public Website (www.up-loyalty.com)

No cookies are used.

No analytics, no tracking.

4.2. Admin Portal (Subsidiary Employees Only)

The Admin Portal uses three strictly necessary cookies, required for security and operation:

Cookie Name	Purpose	Type	Expiry
__RequestVerificationToken	Anti-forgery token to protect against CSRF	Strictly necessary	Session
.ASPXAUTH	Authentication session cookie for logged-in employees	Strictly necessary	Session
culture	Stores interface language preference	Functional	Persistent

No marketing or analytics cookies are used.

5. Purpose of Processing

• Perform reward and campaign calculations
• Maintain user wallets
• Support redemption flows
• Enable Subsidiary staff to create and manage campaigns
• Ensure platform security and integrity
• Maintain logs for auditing
• Process transactions and return results via API

6. Legal Basis

Defined by the Subsidiary acting as Data Controller.

Typically:

• Performance of contract (reward operations)
• Legitimate interest (security, auditing)

7. Sub-processors

• Eclit (EU) – Hosting
• Cloudflare – DNS and security edge
• Mandrill (Mailchimp) – Transactional emails (token-only)
• Grafana – Monitoring/logging

SCCs apply for non-EU infrastructure where required.

No PII is transferred outside the EU.

8. International Transfers

When third-country processing occurs (Cloudflare/Mandrill), Up Loyalty applies:

• Standard Contractual Clauses (SCCs)
• Data minimization (tokenized IDs only)
• Technical and organizational controls

9. Data Retention

As per DAP:

• Transactions: 6 years
• Campaign data: 6 years
• Wallet & reward logs: 6 years
• Tokenized user IDs: 6 years
• Access/operation logs: 6 months
• Backups: 14 days

10. Security

• No PII storage
• Encryption in transit
• OTP handled outside Up+
• Access logging & monitoring
• 99.5% uptime target

11. User Rights

End users must submit requests (access, deletion, correction, portability) to their Subsidiary, the Data Controller.

Up Loyalty assists controllers with token-based search and deletion.

12. Contact

Up Loyalty
27–29 Avenue des Louvresses, 92230 Gennevilliers, France
Email: [email protected]

13. Updates

Any updates will be posted on this page with a new effective date.

Last updated: January 2025

1. Definitions

• Up Loyalty: Up Loyalty SAS, provider of Up+.
• Subsidiary: Any Up Group company using Up+.
• Employee User: Subsidiary staff using the Admin Portal.
• End User: Cardholder accessing the redemption/wallet interface.
• Platform (Up+): Wallet engine, campaign engine, redemption portal, admin portal, and APIs.

2. Scope of Service

Up+ enables Subsidiaries to:

• Process transactions
• Manage campaigns
• Award points or rewards
• Manage multi-wallet balances
• Support redemption flows
• Monitor performance via dashboards and logs

End users access read-only wallet views and redemption flows.

No account creation is offered.

3. Access and Authentication

3.1. End Users

Access is via:

• Identity validation API (managed by Subsidiary)
• OTP (Up+ triggered, Subsidiary validated)

No accounts or cookies are used for end users.

3.2. Subsidiary Admin Portal

Employee Users access via:

• Username (email or subsidiary credential)
• Password (hashed)
• Session cookies (.ASPXAUTH, __RequestVerificationToken)
• "culture" cookie for interface language

Users must maintain confidentiality of login credentials.

4. Permitted Use

Employee Users may:

• Create and manage campaigns
• View dashboards
• Manage wallets and rewards
• View reports and operational logs

Users may not:

• Bypass authentication
• Misuse API tokens
• Attempt unauthorized data access
• Reverse engineer or copy the platform
• Generate fraudulent transactions

5. Availability

Up Loyalty aims for 99.5% uptime in production environments.

Maintenance windows may be announced unless urgent.

6. Intellectual Property

All software, APIs, logic engines, portals, designs, and documentation are the exclusive property of Up Loyalty.

Subsidiaries receive usage rights only, no ownership transfer.

7. Liability Limits

Up Loyalty is not responsible for:

• Incorrect or incomplete data provided by Subsidiaries
• Identity verification performed by Subsidiaries
• Delivery of notifications to end users
• Issues caused by third-party infrastructure
• Redemption fulfilment issues outside Up+

Liability limits follow the commercial agreement with each Subsidiary.

8. Data Protection

Up Loyalty acts as Data Processor.

Subsidiaries act as Data Controllers.

Employee accounts, logs, and operations are processed under contractual DPA terms.

9. Cookies (Admin Portal Only)

The Admin Portal uses strictly necessary cookies:

• __RequestVerificationToken — CSRF protection
• .ASPXAUTH — authentication
• culture — interface language preference

No analytics or marketing cookies are used.

10. Termination

Up Loyalty may suspend access for:

• Security threats
• Suspected fraud
• Contractual breach
• Misuse of the platform

Termination follows contractual rules.

11. Governing Law

French law applies.

Jurisdiction: Nanterre Courts (unless contractually modified).

12. Contact

Email: [email protected]
Address: Up Loyalty, 27–29 Avenue des Louvresses, 92230 Gennevilliers, France