RAPIDSTAMPS is operated by Ideasbench Limited, NZBN 9429053627407 ("we", "us", "our"), a company registered in New Zealand. We are subject to the Privacy Act 2020. This policy explains what personal information we collect, how we use it, and your rights in relation to it.
RAPIDSTAMPS has two categories of user: the businesses that sign up to run a loyalty program, and the customers who collect stamps on their phone. We treat these very differently, so this policy covers them separately.
Loyalty customers: the short version
If you collect stamps at a business that uses RAPIDSTAMPS, we do not collect your personal information. No name, no email, no phone number, no address, no location, and no device fingerprint. You are identified only by a unique pseudonymous recovery key and by random codes generated for your card. Neither we nor the business can see who you are or when you visited.
Information we collect from businesses
When a business signs up and uses the admin portal, we collect the information needed to provide and bill the service:
- Account details you provide: business name, the name and email address of the people who sign in, country, and industry.
- Optional details you add: branch addresses, phone numbers, contact emails, business hours, and a logo.
- Optional attribution: if you tell us who referred you, we keep that to follow up.
- Billing information: handled by our payment provider. We receive limited details such as the card type, expiry, and payment status. We do not store full card numbers.
- Usage and security information: sign-in activity and technical logs (such as IP address) used to operate the service securely.
Information about loyalty customers
The platform is designed so that no personal information about loyalty customers exists in it. A customer is represented only by:
- A recovery key based on a moniker they choose plus a random suffix, used to restore their cards on a new device.
- Random codes generated by the system that act as the QR payload and an access credential, both of which the customer can reset.
We do not store a customer's name, email, phone, address, or location, and we do not record the times at which a specific customer joins, earns a stamp, or redeems a reward. Because of this, neither we nor the business can build a profile of an individual customer or see their visit history. This is a structural property of how the system is built, not a setting that can be turned off.
How we use information
We use business information to:
- Provide, maintain, and secure the service.
- Set up and bill subscriptions, and send receipts and service emails.
- Respond to enquiries and provide support.
- Generate the aggregate, non-identifying analytics shown to businesses.
- Comply with our legal, tax, and accounting obligations.
We do not sell personal information, and we do not use it for third-party advertising.
Aggregate analytics
The analytics in the admin portal are aggregate counts and trends (such as stamps, redemptions, new cards, completions, and busy hours), plus per-staff activity totals for accountability. They contain no loyalty customer personal information and no individual visit records.
Partner offers (opt-in)
If a business opts in to partner offers, we share that business's contact details (business name, branch address, phone number, and contact email) with selected industry partners so they can offer relevant products, services, and deals. We only do this with the business's consent. A business can withdraw consent at any time in account settings or by contacting us, which stops future sharing. We never share loyalty customers' information with anyone. Partner offers are off by default.
Who we share information with
We share business information only with service providers who help us run RAPIDSTAMPS, and only as needed for them to provide their service:
- Our cloud hosting and email provider (Amazon Web Services), used for hosting, storage, and sending service email.
- Our payment provider (Windcave), used to validate cards and process subscription charges.
- Industry partners, only where a business has opted in to partner offers (above).
We may also disclose information where required by law, to enforce our terms, or to protect the rights, property, or safety of people or the public.
Where information is held
We host on cloud infrastructure and some processing may occur outside New Zealand. Where information is processed overseas, we take reasonable steps to ensure it is handled consistently with the Privacy Act 2020.
How long we keep information
We keep business and account records (including the names of the people on the account, staff names used for the scan-accountability audit trail, and payment history) for as long as the account is active and afterwards for up to seven years, to meet tax, accounting, and audit obligations under New Zealand law. After that we delete or de-identify it unless we are required to keep it longer.
Loyalty customer records hold no personal information by design. A customer can permanently delete their cards at any time from within their card app.
Cookies and tracking
Our websites and apps use only cookies and local storage that are necessary for them to function, such as keeping a business signed in and storing a customer's card on their own device. We do not use third-party advertising or cross-site tracking cookies.
Your rights
Under the Privacy Act 2020 you have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it is wrong. To make a request, contact us using the details below. We may need to verify your identity before we respond.
Privacy breaches
If a privacy breach occurs that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as required under the Privacy Act 2020.
Complaints
If you have a concern about how we handle personal information, please contact us first so we can address it. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes to this policy
We may update this policy from time to time. If any changes are made we will email you and update the version and date above.
Contact
Ideasbench Limited, Suite 16279, Unit A Level G, 26 Hobson Street, Auckland 1010, New Zealand. Privacy queries can be sent to hello@rapidstamps.com or via our contact page.