Privacy policy

2. What we collect

• Account details — name, email address, phone number, and the profile photo you choose to add.
• Programme activity — points earned and spent, vouchers redeemed and used, tier, referral activity, and in-store receipts recorded against your member number.
• Purchases — order history, delivery addresses and returns, where you shop with us online.
• Device information — push notification token, app version, language and platform, used to deliver notifications and support.

3. Why we use it

• To run your account and the loyalty programme — crediting points, issuing vouchers, showing your activity. Purchase records are processed so that points are reflected in your account within 24 hours of a completed purchase.
• To process purchases, deliveries and returns.
• To send service messages (order updates, points credited, expiry reminders) and — with your consent, which you can withdraw in notification settings — promotional messages.
• To prevent fraud and abuse of the programme.
• To meet legal obligations, such as tax and accounting records.

4. Who we share it with

We share personal data only with service providers who help us operate — hosting, push notification delivery, payment processing — under contracts that limit what they may do with it, and with our own branches so staff can look up your membership at the till. We do not sell personal data, and we do not share it with advertisers.

5. How long we keep it

We keep your data for as long as your account exists. When you delete your account, deletion is scheduled with a 14-day grace period — a window to change your mind — after which your personal data is permanently removed. Records we are legally required to keep (for example, tax records of purchases) are retained for the statutory period in a form no longer linked to your marketing profile.

6. Your rights

Under the PDPA you may request access to and correction of your personal data, and withdraw consent to processing. You can update your details in the app under Account → Edit profile, manage marketing consent under notification settings, and delete your account from the Account page or at this page. For anything else, write to us at the address below.

7. Security

Data moves between your device and our servers over encrypted connections. Access to personal data inside Paruthie is role-restricted and logged. Your member QR code identifies you for earning points only — it cannot spend anything.

8. Children

The Services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.

9. Changes & contact

We may update this policy; the date above shows the current version, and material changes will be announced in the app. Questions, requests or complaints: support@paruthie.example.