Last updated: [23/07/2026] · Effective from: [06/07/2026]
1.Who we are
RewardsTick is operated by REWARDSTICK GB LIMITED, registered in England and Wales under company number 14910243, with its registered office at 5 Village Way East, Harrow, HA2 7LX, U.K. We are the data controller for the personal data described in this policy. If you have questions about this policy or how we handle your data, contact us at contactuk@rewardstick.com. 2. What data we collectDepending on how you use the app, we collect:
Account information:
name, email address, mobile number, date of birth, gender (optional), profile photo (optional).
Address information:
if you add a delivery or contact address.
Payment information:
we never see or store your full card details ourselves — these are collected and stored by our PCI-DSS-compliant payment processing partner, and we only receive a reference to your saved payment method, not the underlying card number.
Gift Aid information (UK donors only, optional):
if you add Gift Aid to a donation, we collect your full name, home address, confirmation of your UK taxpayer status, and an electronic signature, as required by HMRC to allow the receiving charity to reclaim tax.
Donation and transaction history:
which charities you've supported, amounts donated, and which events and tickets you've booked.
Loyalty points activity:
points earned and redeemed at participating stores, and any donations made using points.
Location data:
only if you grant permission, used to show a charity's or store's address on a map, or to assist with location-based features.
standard technical data (device type, app version, crash logs) to help us maintain and improve the app.
3. How we use your data
Create and manage your account and verify your identity.
Process donations, event bookings, and loyalty point transactions.
Submit Gift Aid claims to HMRC on behalf of the charities you donate to, where you've opted in.
Send marketing communications only if you've separately opted in — service and marketing consent are kept distinct, and you can withdraw marketing consent anytime.
Maintain the security and integrity of the app and investigate suspicious activity.
Meet our legal obligations, including financial record-keeping and HMRC reporting for Gift Aid.
4. Who we share your data withWe do not sell your personal data. We share data only with approved partners who need it to provide the service: payment processing partners; the specific charity or store you interact with (limited to what they need); HMRC (where a Gift Aid declaration requires it); infrastructure providers such as hosting and analytics under strict contracts; and regulators or law enforcement only where legally required. Approved partners are contractually bound to protect your data and use it only for the purpose we've authorised.5. Your rightsUnder UK GDPR you have the right to access, correct, delete (subject to our legal retention obligations), object to or restrict processing, request a portable copy of your data, and withdraw consent where we rely on it. To exercise any of these, contact contactuk@rewardstick.com. You may also complain to the UK Information Commissioner's Office (ICO).6. Data retentionWe keep your account data while your account is active and for a limited period afterward for financial record-keeping. Gift Aid declarations and related donation records are retained for the period HMRC requires (currently up to 6 years) even if you close your account.7. ChildrenRewardsTick is not intended for anyone under 18, as the app handles real financial transactions.8. Changes to this policyWe may update this policy as the app's features change. We'll notify you of significant changes via the app or email; the "Last updated" date above always reflects the current version.