RewardsBag Privacy Policy
Last updated: 19/03/2026
This privacy policy explains how RewardsBag Ltd (“we”, “us”, “our”) collects, uses, and protects personal data when you visit our website or interact with us directly.
1. Scope of this policy
This policy applies to personal data collected directly by RewardsBag via its website and direct interactions.
Where we provide rewards through partner platforms, apps, or loyalty programmes, RewardsBag typically does not receive or process end-customer personal data. These partners manage customer relationships and personal data under their own privacy policies.
In limited cases (for example, customer support or issue resolution), we may receive minimal personal data from partners where necessary to fulfil a request.
For personal data processed via the Delight platform (e.g. when interacting with rewards at checkout on retailer websites), please refer to the Delight Privacy Policy.
2. Who we are
RewardsBag Ltd
West, 2–5 Rock Place, Brighton, BN2 1PF, United Kingdom
Email: info@rewardsbag.com
For the purposes of data protection law, we act as the data controller for personal data collected via this website.
3. What data we collect
We may collect and process the following:
- Contact details: name, email address
- Enquiry data: information submitted via forms (e.g. demo requests, messages, revenue estimates)
- Company information: company name or business details you provide, or that may be inferred
- Technical data: IP address, browser type, device information
- Usage data: pages visited, interactions with our website
We may also identify the company or organisation associated with your visit based on your IP address or similar technologies. This does not typically identify you personally.
4. How we collect your data
We collect data:
- When you complete forms on our website
- When you contact us directly (email, phone)
- Automatically via website technologies (e.g. server logs, analytics tools)
5. How we use your data
We use your personal data to:
- Respond to enquiries and provide requested information
- Deliver requested outputs (e.g. revenue estimates)
- Communicate with you regarding your enquiry
- Understand how businesses interact with our website
- Improve our services, website, and offering
- Maintain security and prevent misuse
Revenue estimate requests
If you submit your details to receive a revenue estimate, we use your email and submitted information solely to generate and send the estimate.
We do not use this data for marketing unless you explicitly opt in.
Company identification
We may use technical data (such as IP address) to identify the company or organisation visiting our website in order to understand business interest and improve our outreach and services.
6. Legal basis for processing
We rely on the following legal bases:
- Legitimate interests — to operate, improve, and grow our business, respond to enquiries, and understand website usage
- Consent — where you explicitly opt in to marketing (if applicable)
- Legal obligation — where required for compliance
Where we rely on legitimate interests, we ensure this does not override your rights and freedoms.
7. Marketing
We do not send marketing communications unless you have explicitly opted in.
If you opt in, you may receive communications about our services. You can opt out at any time.
8. Sharing your data
We may share your data with:
- Service providers (e.g. hosting providers, analytics tools, email delivery providers such as SendGrid)
- Professional advisors (legal, accounting)
We do not sell your personal data.
All third parties are required to process your data securely and only on our instructions.
9. Data retention
We retain personal data only as long as necessary:
- Enquiries and estimate requests: retained only to respond and for limited internal analysis
- Technical and usage data: retained for security, analytics, and performance monitoring
Data is deleted or anonymised when no longer required.
10. International transfers
Some of our service providers may process data outside the UK or EEA.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
11. Cookies and tracking
We may use cookies or similar technologies to:
- Ensure website functionality
- Analyse performance and usage
- Support company identification tools
You can manage cookies via your browser settings.
12. Your rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Object to or restrict processing
- Request data portability
To exercise your rights, contact: info@rewardsbag.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local data protection authority.
13. Data security
We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.
14. Changes to this policy
We may update this policy from time to time. The latest version will always be available on our website.
15. Contact
If you have questions about this policy or your data:
Email: info@rewardsbag.com
Address: RewardsBag Ltd, West, 2–5 Rock Place, Brighton, BN2 1PF, UK
