Privacy Policy

1. Who We Are

The EG Shop Local Card ("we", "us", "our") is a community loyalty scheme based in East Grinstead, West Sussex. We are the data controller for the personal information we collect through this website (egslc.co.uk) and the EG Shop Local Card scheme.

If you have any questions about this policy or how we handle your data, please contact us at hello@egslc.co.uk.

2. What Data We Collect

We collect the following personal data when you sign up as a Card holder or register as a participating business:

• Full name
• Email address
• Phone number
• Postal address (for Card holders)
• Business name, address, category and offer details (for participating businesses)

We do not collect sensitive personal data such as health information, religious beliefs or political opinions.

When you make a payment, your card details are processed directly by Stripe (for member sign ups via Perkstar) or Square (for business listings). We never see, handle or store your payment card information on our servers.

3. How We Use Your Data

We use your personal data for the following purposes:

• To administer your Card membership or business listing
• To deliver your digital Card to your Apple Wallet or Google Wallet
• To send you quarterly updates about new offers and participating businesses
• To contact you regarding membership or listing renewals
• To publish business listing information (name, category, address, offer) on the egslc.co.uk directory
• To respond to your enquiries or requests

We will never use your data for purposes unrelated to the Scheme without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):

• Contract: Processing necessary to fulfil your membership or business listing agreement with us.
• Legitimate interest: Sending you relevant updates about the Scheme, including quarterly offer notifications and renewal reminders.
• Consent: Where we send you marketing communications beyond Scheme updates, we will ask for your explicit consent first.

5. Who We Share Your Data With

We will never sell your personal data to third parties.

We may share your data with the following service providers, solely for the purpose of operating the Scheme:

• Stripe (stripe.com) for secure member payment processing
• Square (squareup.com) for secure business listing payment processing
• Perkstar for digital card delivery and management
• Email service provider for sending quarterly offer updates and renewal reminders

Participating business information (business name, category, address, phone number and quarterly offer) is published on the egslc.co.uk directory and is publicly visible. No personal contact details of business owners are published without their consent.

6. How Long We Keep Your Data

We retain your personal data for the duration of your active membership or business listing, plus 12 months after expiry to allow for renewal.

If you do not renew, your data will be securely deleted within 12 months of your membership or listing expiry date.

Payment transaction records may be retained for up to 6 years to comply with UK financial record keeping requirements.

7. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data, subject to our legal obligations.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
• Right to data portability: You can request your data in a structured, commonly used format.
• Right to object: You can object to our processing of your data where we rely on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please email hello@egslc.co.uk. We will respond within 30 days.

8. Marketing Communications

As part of the Scheme, we will send you quarterly emails containing new offers from participating businesses and relevant Scheme updates. These are considered a core part of the service you have signed up for.

If we wish to send you any marketing communications beyond these Scheme updates, we will ask for your explicit opt in consent first.

You may unsubscribe from all email communications at any time by clicking the unsubscribe link at the bottom of any email, or by emailing hello@egslc.co.uk. Please note that unsubscribing from Scheme updates may affect your ability to benefit fully from your Card.

9. Cookies and Website Analytics

The egslc.co.uk website does not currently use cookies or third party analytics tracking tools. If this changes in the future, we will update this policy and notify you accordingly.

10. Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration.

All payment data is handled by Stripe and Square, both of which are PCI DSS compliant, meeting the highest security standards in the payments industry.

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you become aware of any security breach, please contact us immediately at hello@egslc.co.uk.

11. Children's Privacy

The EG Shop Local Card is intended for use by individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

If we make significant changes that affect your rights, we will notify you by email.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

We would appreciate the opportunity to address your concerns before you contact the ICO. Please email us first at hello@egslc.co.uk.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: hello@egslc.co.uk

Address: EG Shop Local Card, East Grinstead, West Sussex