Plain-English Summary (Non-Legal)
This summary is provided for convenience only. The PDF Data Processing Addendum linked below is the legally binding version.
Loopy Loyalty is operated by PassKit, Inc.
You remain the controller of your customer data.
PassKit acts as a processor and processes personal data only to provide the Service.
Customer data is currently hosted and processed in the United States.
PassKit maintains technical and organisational security controls designed to protect customer data.
PassKit will notify customers of qualifying personal data breaches without undue delay.
PassKit uses a limited number of approved sub-processors to operate the Service.
The DPA includes GDPR, UK GDPR, Swiss FADP and CCPA provisions where applicable.
Please read the full DPA for complete legal details.
1. Scope and Purpose
The Loopy Loyalty Data Processing Addendum ("DPA") governs how PassKit processes personal data on behalf of customers in connection with the Loopy Loyalty platform.
The DPA sets out the rights and responsibilities of both parties and incorporates appropriate data protection commitments and international transfer mechanisms where required.
2. Roles of the Parties
For the purposes of applicable data protection laws:
The customer acts as the data controller (or equivalent legal role).
PassKit acts as the data processor (or service provider) when processing personal data on the customer's behalf.
Loopy Loyalty is a product owned and operated by PassKit, Inc.
3. DPA Document
The complete Data Processing Addendum is available as a PDF document and includes:
GDPR provisions
UK GDPR provisionsd
Swiss FADP provisions
CCPA provisions
Security measures
Sub-processor information
International data transfer provisions
PassKit maintains a security programme designed to safeguard customer data and applies those controls in the operation of Loopy Loyalty.
4. Sub-Processors
Loopy Loyalty uses a limited number of carefully selected service providers to support infrastructure, communications, analytics and payment processing.
Details of current sub-processors are provided within the DPA and are updated periodically.
5. Relationship to Other Agreements
In the event of any conflict between the DPA and the Loopy Loyalty Terms of Service, the DPA shall prevail with respect to the processing of personal data.
6. Questions Us
If you have questions regarding the DPA or PassKit's data processing practices, please contact: privacy@passkit.com
For security matters or suspected security incidents: security@passkit.com