Privacy Policy

1. Who operates PIPPS

PIPPS is a customer loyalty platform operated by شركة بيبس كارد لبيع البرمجيات غير المعدة بناء على الطلب, a company registered in the State of Kuwait. In this policy, “PIPPS”, “we”, “us” and “our” mean that company.

Our website is pipps.co and you can reach us at info@pipps.co.

2. The information we collect

We collect the following categories of personal data:

• Information you send us through this website. When you submit the enquiry form on pipps.co we receive the name, email address, phone number and country you enter, and your answer to how you heard about us.
• Information a business gives us. When a business subscribes to PIPPS we receive account and contact details for that business and for the staff accounts it creates.
• Information created by using the service. Loyalty cards, coupons, point balances and the transactions that change them, recorded against a customer identifier held by the business running the programme.
• Technical information. Standard server and device information such as IP address, browser type and the pages requested, generated automatically when you use our website or apps.

We do not ask you for payment card numbers, government identity numbers or other special categories of personal data through this website.

3. Why we use it, and on what basis

• To reply to business enquiries you send us — because you asked us to.
• To provide the PIPPS service to the businesses that subscribe to it, and to the customers of those businesses — to perform our contract with the business.
• To keep the service secure, prevent abuse and diagnose faults — our legitimate interest in operating a safe and working service.
• To send messages you or the business you deal with have opted into, including WhatsApp messages and wallet pass updates — on the basis of that consent, which you can withdraw at any time.
• To meet obligations that apply to us under the laws of the State of Kuwait — legal obligation.

4. Businesses and their customers: who is responsible for what

PIPPS is a tool that businesses use to run their own loyalty programmes. Responsibility is split accordingly:

• Where a business uses PIPPS to hold and use data about its own customers, that business decides what is collected and why. It is the controller of that data and we act on its instructions as a processor.
• Where we handle data for our own purposes — running and securing the platform, handling our own business enquiries, keeping our own records — PIPPS is the controller.

If you are a customer of a business that uses PIPPS and you want your data corrected or deleted, contact that business first. You can also write to us at info@pipps.co; we will pass the request on and act on the part of it that is ours to act on.

5. Who we share it with

We do not sell personal data. We share it only:

• with the business whose loyalty programme you joined;
• with service providers that host, operate and support the platform on our behalf, limited to what they need in order to do that;
• with the messaging and wallet platforms needed to deliver something you asked for — for example sending a WhatsApp message to your number, or issuing a pass to the wallet application on your phone;
• where we are required to by law or by a competent authority in the State of Kuwait.

Third-party platforms such as messaging and wallet providers handle your data under their own terms and privacy policies, which we do not control.

6. How long we keep it

We keep personal data for as long as it is needed for the purpose it was collected for, and after that only for as long as we are required to keep it under the laws of the State of Kuwait or need it to establish or defend a legal claim.

Data we hold on behalf of a business using PIPPS is kept for as long as that business maintains its account and instructs us to hold it. When a retention period ends we delete the data or put it beyond use.

7. Security

We take technical and organisational measures to protect personal data, including serving this website and our apps over encrypted connections and limiting access to the people who need it for their work. No online service can be guaranteed completely secure, and we cannot promise absolute security.

8. Your rights

Subject to the law that applies to you, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is inaccurate or incomplete;
• delete it;
• stop or restrict a particular use of it;
• withdraw a consent you previously gave us.

To exercise any of these, email info@pipps.co. We will ask for enough information to satisfy ourselves that the request is genuinely yours before we act on it, so that we do not disclose or delete someone else’s data.

9. Deleting your data

The steps for asking us to delete your data, what we need from you and what is deleted or retained are set out on our Data Deletion page.

Data Deletion

10. Changes to this policy

If we change this policy we will publish the new version on this page and update the date shown at the top of it.

11. Contact

Questions about this policy can be sent to info@pipps.co.