Privacy policy

Who is responsible

PIUS is run by PIUS [to be completed before launch], address [to be completed before launch], company number [to be completed before launch]. For any question about your data, write to [to be completed before launch].

What PIUS keeps about customers

When you create an account, you give:

• your first and last name;
• your email address and a password (the password is stored only in a scrambled form that nobody can read, not even us);
• your date of birth, your gender (you may answer “Prefer not to say”) and your postal code;
• your phone number, if you choose to give it;
• whether you agreed to receive offers and news.

While you use PIUS, it also keeps:

• the loyalty cards you joined and when;
• the stamps and points you received, the rewards you earned and used, and when;
• for points cards, the amount of the purchase the business typed in;
• a personal QR code, which contains a random code and none of your details;
• the language you last used on the website, so emails PIUS sends you are written in it.

What PIUS keeps about businesses

A business account holds the business name, an email address and password, and what the business adds itself: logo, category, website, phone number, address, and its loyalty programs.

Businesses on PIUS’s premium plan that have a running loyalty program are shown to all PIUS customers on the Partners page, with their name, logo, website, town and position on the map (worked out from their address), so customers can find the ones near them. A business can switch this off in the app.

To place a business on the map, PIUS sends its address (never anything about a person) to the OpenStreetMap service Nominatim when the address is saved.

Why PIUS keeps it

• To run your account and your loyalty cards: this is needed to provide the service you signed up for.
• To check that you are at least 16.
• To show each business anonymous statistics about its customers as a group (age groups, gender, postal codes): this is in the legitimate interest of the businesses and of PIUS, and is done in a way that does not single you out (see below).
• To send you offers and news, only if you ticked that box. Today PIUS does not send any.
• To keep the service secure and prevent abuse.

What a business can see about you

A business only sees customers who joined one of its own programs, and only what happens at that business:

• your first and last name;
• your card at that business, your stamps or points, your rewards, and the dates of your visits;
• the purchase amounts it entered itself.

A business never sees your email address, phone number, date of birth, gender or postal code, and never sees your cards or visits at other businesses.

Statistics about age, gender and postal code are only shown for groups of at least 5 customers. Smaller groups are merged, so a number never points to one person.

Who else receives data

PIUS does not sell your data and does not share it with advertisers.

On the Partners page you can sort businesses by distance. If you allow it, your browser gives your position to the page, which works the distances out on your phone: your position is never sent to PIUS or stored. If you don’t, distances are measured from the centre of your postal code; to find that centre, PIUS sends only the postal code, nothing else about you, to the OpenStreetMap service Nominatim, once per postal code.

If you choose “Add to Google Wallet”, your name and your personal QR code are sent to Google so that the card can be kept in your Google Wallet. This only happens when you tap that button; Google then handles the card under its own terms.

PIUS uses service providers to host the service and to send emails such as password resets. They only act on PIUS’s instructions. The list of providers and where they store data: [to be completed before launch].

How long PIUS keeps it

PIUS keeps your data for as long as you have an account. You can delete your account yourself on the Account page of the website (customers). It is closed at once: you are logged out and your QR code stops working. If you log in again within 15 days, it is kept as it was; otherwise, after 15 days, your name, email address, date of birth, gender, postal code, phone number and QR code are erased for good. The record of stamps, points and rewards stays, without anything that identifies you, so businesses keep correct totals; you no longer appear in their list of customers.

A business can delete its account itself in the PIUS app, in the same way: it is closed at once (no new customers can join, and it leaves the Partners page) and erased after 15 days unless it logs in again. Its name, logo and contact details are then erased and its loyalty programs closed. Its customers receive an email saying so; their cards and unused rewards at that business disappear, and their history keeps those visits under “Deleted business”.

Cookies

PIUS uses one cookie, to keep you logged in. It is required for the service to work. PIUS uses no advertising or tracking cookies.

Your rights

You can ask to see your data, to correct it, to delete it, to receive a copy of it, or object to how it is used. You can withdraw your agreement to receive offers at any time. Write to [to be completed before launch]; we answer within one month.

If you are not satisfied with the answer, you can complain to the Belgian Data Protection Authority (www.dataprotectionauthority.be).

Changes

If this policy changes in a way that matters to you, PIUS will tell you before the change applies.