PerkClub Privacy Policy

Last updated: March 2026

This Privacy Policy explains how PerkClub Limited (“PerkClub”, “we”, “us”) collects and uses personal data when you visit our website or use the PerkClub platform.

This Privacy Policy has been written specifically for a software-as-a-service (SaaS) platform and should be read alongside the PerkClub End-User Terms and the PerkClub Merchant Terms.

1. Important Information and Our Role

PerkClub Limited is a company incorporated in England and Wales (company number 16711206) with its registered office at 249 Cranbrook Road, Ilford, England, IG1 4TG.

PerkClub operates a technology platform that connects consumers with independent merchants. PerkClub does not sell goods or services to consumers.

PerkClub is registered with the Information Commissioner’s Office (ICO). Our registration number is ZC062962.

Personal data is handled under a split-controller model, as follows:

PerkClub acts as an independent data controller in relation to:

• website visitors;

• platform account registration and authentication;

• security, fraud prevention, analytics, and platform operations; and

• communications relating to the Platform, legal terms, and service updates.

Merchants act as separate and independent data controllers in relation to:

• goods and services they provide;

• subscriptions purchased by consumers;

• fulfilment, refunds, complaints, and customer service; and

• compliance with consumer, tax, and sector-specific laws (including food safety and allergens).

PerkClub does not determine how Merchants use consumer data beyond providing the technical platform. Merchants decide what personal data they collect from consumers and how it is used, in accordance with their own privacy notices.

This Privacy Policy also applies to individuals acting on behalf of Merchants (including owners and staff users) where PerkClub processes their personal data as an independent data controller.

2. Scope of This Policy

This Privacy Policy applies to:

• visitors to the PerkClub website; and

• users of the PerkClub platform to the extent PerkClub acts as a data controller.

Processing carried out by Merchants is governed by the relevant Merchant’s own privacy policy.
Processing carried out by PerkClub on behalf of Merchants is governed by the Merchant Data Processing Agreement.

The website and Platform are not intended for children, and we do not knowingly collect personal data relating to children. The Platform is intended for users aged 18 and over. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that data promptly, terminate the associated account, and cancel any active subscriptions. If you believe we have inadvertently collected data from a minor, please contact us at support@perkclub.io.

3. Personal Data We Collect

We may collect the following categories of personal data where relevant:

• Identity Data: name, username, date of birth (for age verification), account identifiers.

• Contact Data: email address, contact preferences, correspondence.

• Technical Data: IP address, device identifiers, browser type, operating system, and log data.

• Usage Data: interactions with the website or Platform, pages viewed, and feature usage.

• Marketing Data: communication preferences and opt-in status.

• Subscription and Transaction Data: subscription tier, pricing, billing dates, subscription status (active, paused, cancelled), perk redemption history (including date, time, perk redeemed, and merchant), visit frequency and timestamps, and spend data.

We also use aggregated or anonymised data that does not identify individuals.

4. How We Collect Personal Data

We collect personal data through:

• direct interactions, such as account creation, contact forms, and support emails;

• automated technologies, including cookies, analytics, and log files; and

• third-party service providers that support hosting, analytics, and communications.

Further information is available in our Cookie Policy.

5. How We Use Personal Data and Legal Bases

We process personal data only where permitted by law, relying on the following legal bases:

• performance of a contract, to provide access to the Platform to consumers and Merchant users;

• legitimate interests, including platform security, analytics, and service improvement;

• legal obligations, including regulatory and tax compliance; and

• consent, where required for marketing communications.

The lawful bases we rely on for each processing purpose are as follows:

• Account creation and management — performance of contract (Article 6(1)(b));

• Processing subscription payments and managing memberships — performance of contract (Article 6(1)(b));

• Sharing your data with the relevant Merchant to enable perk redemption — performance of contract (Article 6(1)(b));

• Sending transactional communications (payment confirmations, subscription updates) — performance of contract (Article 6(1)(b));

• Sending marketing communications — consent (Article 6(1)(a));

• Platform analytics and improvement — legitimate interests (Article 6(1)(f));

• Fraud prevention and platform security — legitimate interests (Article 6(1)(f));

• Compliance with legal obligations (e.g. tax records, regulatory requests) — legal obligation (Article 6(1)(c)).

PerkClub does not use consumer data to make decisions about Merchant goods or services.

6. Marketing Communications

You may receive marketing communications from PerkClub where you have opted in or where otherwise permitted by law.

You may opt out at any time using unsubscribe links or by contacting support@perkclub.io.

Opting out of marketing communications does not affect essential service communications.

You may also receive marketing communications from Merchants whose subscriptions you have purchased, where the Merchant has a lawful basis for doing so (such as your consent or their legitimate interests). PerkClub is not responsible for Merchant marketing communications. To opt out of a Merchant’s marketing, please contact the Merchant directly or follow the unsubscribe instructions in their communications.

7. Sharing Personal Data

We share personal data only with trusted service providers acting on our instructions, including:

• hosting and infrastructure providers;

• analytics and monitoring tools; and

• communications providers.

All service providers are subject to appropriate contractual and security safeguards.

We also share relevant personal data (such as your name, email address, and subscription details) with the Merchant whose subscription you have purchased. This enables the Merchant to manage your membership, fulfil your perks, and communicate with you in accordance with their own privacy policy. Merchants act as independent data controllers and are responsible for their own use of your personal data.

When you add your PerkClub membership card to Apple Wallet or Google Wallet, certain data (such as your name and membership identifier) is shared with Apple Inc. or Google LLC respectively to enable the wallet pass functionality. These companies process your data in accordance with their own privacy policies. Apple’s privacy policy is available at apple.com/privacy and Google’s at policies.google.com/privacy.

We do not sell personal data.

8. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• UK adequacy regulations;

• the UK International Data Transfer Agreement (IDTA); or

• the UK Addendum to the EU Standard Contractual Clauses.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

Access to personal data is restricted to authorised personnel and service providers with a legitimate business need.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including compliance with legal and accounting requirements.

Retention periods vary depending on the nature of the data and applicable legal obligations. Further information about retention periods may be provided on request.

We apply the following retention periods:

• Account data (name, email, account details) — retained for the duration of your account plus 6 years after closure;

• Transaction and subscription data — 6 years from the date of the transaction (in accordance with HMRC requirements);

• Marketing consent records — retained for the duration of your consent plus 2 years after withdrawal;

• Technical and log data (IP addresses, device information, usage logs) — 12 months from collection;

• Support correspondence — 3 years from resolution of the enquiry;

• Perk redemption and visit data — retained for the duration of your account plus 2 years after closure.

11. Your Data Protection Rights

You have rights under UK data protection law, including the right to:

• access your personal data;

• correct inaccurate data;

• request erasure in certain circumstances;

• object to processing based on legitimate interests;

• withdraw consent for marketing; and

• lodge a complaint with the Information Commissioner’s Office.

Requests may be made by contacting support@perkclub.io.

Automated Decision-Making and Profiling

We do not currently use your personal data for automated decision-making or profiling that produces legal or similarly significant effects. If this changes, we will update this Privacy Policy and, where required, seek your explicit consent.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice through the website or Platform.

14. Contact and Complaints

If you have questions about this Privacy Policy or how we use your personal data, please contact:

Email: support@perkclub.io
Address: 249 Cranbrook Road, Ilford, England, IG1 4TG

You may also lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.