Privacy Policy - Loyality Program System

PRIVACY & SECURITY POLICY — 1 TAP LOYALTY™ Effective Date: 1 July 2026 Welcome to 1 TAP LOYALTY™, a digital loyalty and customer-engagement product owned and operated by 1 TAP WORLD PRIVATE LIMITED ("1 TAP WORLD", "Company", "we", "our", or "us"). 1 TAP LOYALTY™ enables businesses to create digital loyalty programs, issue digital stamps and rewards, manage customer visits, track loyalty activity and provide reward redemption through QR-based technology. This Privacy & Security Policy explains how information is collected, used, stored, processed and protected when merchants and customers use 1 TAP LOYALTY™. By accessing or using 1 TAP LOYALTY™, you acknowledge that you have read and understood this Policy. --- # 1. INFORMATION WE COLLECT Depending on how you use 1 TAP LOYALTY™, we may collect different categories of information. ## A. Merchant Information When a business registers for 1 TAP LOYALTY™, we may collect: - Business name - Business category - Business address - Branch/location information - Owner or authorised person's name - Mobile number - Email address - Login credentials - Billing information - Subscription information - Loyalty-program configuration - Reward and offer information --- B. Customer Information When a customer joins a merchant's loyalty program, we may collect information such as: - Name, where provided - Mobile number - Email address, where provided - Loyalty membership information - Visit information - Digital stamp activity - Reward information - Redemption history - QR-code interaction information - Approximate location, where required and permitted - Device and browser information The exact information collected may vary depending on the merchant's configuration and the features being used. --- 2. HOW 1 TAP LOYALTY WORKS 1 TAP LOYALTY™ allows customers to interact with a merchant's loyalty program through a QR code and a mobile browser. Generally: SCAN → JOIN → EARN → REWARD → RETURN Customers may be able to scan a QR code at a participating business, access the digital loyalty card, receive digital stamps and redeem rewards after meeting the conditions established by the merchant. No dedicated mobile application is necessarily required for the basic loyalty experience. --- 3. MERCHANT RESPONSIBILITY The merchant using 1 TAP LOYALTY™ is responsible for determining: - What customer information is collected - The purpose of collecting customer information - Loyalty-program rules - Number of stamps required - Reward conditions - Reward validity - Redemption conditions - Customer communications - Applicable offers and discounts Merchants must use the platform in accordance with applicable laws and must not collect or use customer information for unlawful purposes. Where required, merchants are responsible for providing appropriate notices and obtaining necessary consent from their customers. --- 4. USE OF CUSTOMER INFORMATION Information may be used to: - Create loyalty memberships - Issue digital stamps - Track loyalty activity - Record customer visits - Manage rewards - Process reward redemptions - Prevent fraudulent redemptions - Maintain customer activity history - Generate merchant analytics - Provide customer support - Improve the platform - Maintain platform security - Detect misuse or suspicious activity - Comply with applicable legal requirements --- 5. LOCATION VERIFICATION Certain 1 TAP LOYALTY™ features may use location information to help verify that a customer is physically present at or near a participating business. For example, location verification may be used to help prevent: - Remote or fraudulent stamp collection - Unauthorised reward claims - Duplicate visits - Abuse of loyalty programs Location information will only be used where the relevant feature requires it and where the applicable permissions and legal requirements are satisfied. Customers may control location permissions through their browser or device settings. Disabling location permissions may prevent certain features from functioning. --- 6. QR CODE SECURITY 1 TAP LOYALTY™ uses QR codes as part of the customer interaction and loyalty process. QR codes may be associated with: - A merchant - A branch - A loyalty program - A loyalty card - A reward - A particular platform function Users must not attempt to: - Duplicate or manipulate QR codes - Circumvent loyalty restrictions - Generate unauthorised loyalty activity - Manipulate reward balances - Interfere with redemption systems We may suspend or restrict accounts where fraudulent or abusive activity is detected. --- 7. DIGITAL STAMPS AND REWARD REDEMPTION 1 TAP LOYALTY™ may record: - Stamps issued - Date and time of activity - Merchant location - Reward eligibility - Reward claims - Reward redemption - Redemption date and time - Relevant customer activity This information may be used to maintain an accurate loyalty history and help prevent fraudulent or duplicate redemptions. Merchants are responsible for ensuring that their reward rules and offers are accurately configured. --- 8. CUSTOMER ACTIVITY AND ANALYTICS Merchant dashboards may provide analytics such as: - Total scans - Active members - New members - Customer visits - Visit frequency - Stamps issued - Rewards claimed - Rewards redeemed - Customer activity trends Analytics may be presented to merchants to help them understand customer engagement and loyalty-program performance. --- 9. DATA SECURITY 1 TAP WORLD implements commercially reasonable technical and organisational measures designed to protect information against: - Unauthorised access - Unauthorised disclosure - Loss - Misuse - Alteration - Destruction - Unauthorised processing Security measures may include appropriate access controls, authentication mechanisms, secure infrastructure and monitoring measures. However, no internet-based system can guarantee absolute security. Users and merchants are responsible for maintaining the confidentiality of their account credentials. --- 10. ACCOUNT SECURITY Merchants must: - Keep usernames and passwords confidential - Use strong passwords - Avoid sharing administrator credentials - Restrict dashboard access to authorised personnel - Immediately report suspected unauthorised access If we reasonably believe an account has been compromised or presents a security risk, we may temporarily restrict access while investigating the issue. --- 11. DATA RETENTION Information may be retained for as long as reasonably necessary to: - Provide the service - Maintain loyalty records - Maintain business records - Provide analytics - Resolve disputes - Prevent fraud - Meet contractual obligations - Comply with legal and regulatory requirements When information is no longer required, it may be deleted, anonymised or securely archived in accordance with applicable requirements. --- 12. DATA SHARING 1 TAP WORLD does not sell customer personal information to third parties for their independent commercial use. Information may be shared with trusted service providers where necessary to operate 1 TAP LOYALTY™, including providers of: - Cloud hosting - Database infrastructure - Security services - Analytics - Email - SMS - Payment processing - Technical support - Other technology infrastructure Such providers may process information on our behalf for the purpose of providing their services. Information may also be disclosed where required by law, legal process, governmental authority or to protect our rights, users or platform security. --- 13. PAYMENT INFORMATION Where merchants purchase a paid 1 TAP LOYALTY™ subscription or service, payments may be processed through third-party payment gateways. Payment providers may independently process payment information in accordance with their own privacy policies and security standards. 1 TAP WORLD does not generally require users to provide complete payment-card information directly to us where payment is processed through an authorised third-party payment gateway. --- 14. COOKIES AND TRACKING TECHNOLOGIES 1 TAP LOYALTY™ may use: - Cookies - Session technologies - Analytics technologies - Security technologies - Performance monitoring technologies These technologies may help us: - Maintain sessions - Remember preferences - Improve performance - Understand platform usage - Detect security issues - Improve user experience Disabling certain cookies or browser technologies may affect platform functionality. --- 15. THIRD-PARTY SERVICES 1 TAP LOYALTY™ may use or integrate with third-party services. These may include: - Payment gateways - SMS providers - Email providers - Cloud infrastructure - Analytics services - Other technology providers Third-party services operate according to their own terms and privacy policies. 1 TAP WORLD is not responsible for the independent privacy practices of third-party providers. --- 16. CUSTOMER COMMUNICATIONS Depending on the merchant's configuration, customers may receive communications relating to: - Loyalty membership - Digital stamps - Rewards - Reward redemption - Account verification - Important service notifications Where promotional communications are enabled, they should be handled in accordance with applicable law and applicable consent requirements. --- 17. DATA ACCURACY Merchants and customers should provide accurate information. Merchants are responsible for maintaining accurate: - Business information - Branch information - Loyalty rules - Reward information - Customer records 1 TAP WORLD is not responsible for inaccurate information supplied by users or merchants. --- 18. CUSTOMER DATA REQUESTS Subject to applicable law, customers may have rights concerning their personal information, including rights relating to: - Access - Correction - Deletion - Withdrawal of consent, where applicable - Grievance redressal Because customer information may be collected and controlled in the context of a merchant's loyalty program, certain requests may need to be addressed by the relevant merchant. You may also contact 1 TAP WORLD for assistance. --- 19. CHILDREN'S PRIVACY 1 TAP LOYALTY™ is primarily designed for businesses and their customers. The service is not intentionally designed to collect personal information from children. Where applicable, merchants are responsible for ensuring that their loyalty programs comply with laws concerning children's data and consent. --- 20. SECURITY INCIDENTS If we become aware of a security incident affecting personal information, we will take reasonable steps to: - Investigate the incident - Contain the issue - Mitigate potential harm - Restore affected services - Provide notifications where required by applicable law --- 21. BUSINESS CUSTOMER RESPONSIBILITY A merchant using 1 TAP LOYALTY™ is responsible for: - Lawful collection of customer information - Appropriate customer notices - Obtaining required consent - Maintaining accurate business information - Protecting its dashboard credentials - Correctly configuring loyalty programs - Honouring its advertised rewards and offers - Complying with applicable privacy and consumer-protection laws 1 TAP WORLD provides the technology platform and does not determine the merchant's independent business practices. --- 22. PRIVACY AND APPLICABLE LAW 1 TAP WORLD processes personal information in accordance with applicable laws and regulations. For users in India, this may include the **Digital Personal Data Protection Act, 2023**, applicable rules and other relevant data-protection requirements, as applicable to the relevant processing activity. The applicable rights, obligations and processing requirements may depend on the nature of the information and the role of each party in the processing. --- 23. CHANGES TO THIS POLICY We may update this Privacy & Security Policy from time to time to reflect: - Product changes - New features - Security improvements - Changes in technology - Changes in applicable law - Changes in our data practices The updated version will be published on the relevant 1 TAP LOYALTY™ website or platform. The Effective Date at the beginning of this Policy indicates when the current version became effective. --- 24. CONTACT US For privacy or security questions relating to 1 TAP LOYALTY™: 1 TAP WORLD PRIVATE LIMITED Product: 1 TAP LOYALTY™ Website: www.1tapworld.com Email: support@1tapworld.com General Enquiries: inquiry@1tapworld.com Phone: +91 9515379555 Registered Office: 203/1 Daruwala Building, Khadilkar Road, Girgaon, Mumbai – 400004, Maharashtra, India. Support Hours: Monday to Saturday | 10:00 AM – 7:00 PM IST --- © 2026 1 TAP WORLD PRIVATE LIMITED. All Rights Reserved. 1 TAP LOYALTY™ — Loyalty Made Simple. Rewards Made Easy.