Privacy Policy
1. About This Notice
This Privacy Notice explains how Loynova ("Loynova", "we", "us", or "our") collects, uses, shares, and protects personal information in connection with our website at www.loynova.com, together with any related pages, forms, landing pages, and online content that we operate and that link to this Notice (together, the "Website").
It applies to anyone who visits or interacts with the Website, including prospective and existing clients, partners, suppliers, job applicants, journalists, and general visitors.
Separate notices apply to the following, and this Notice does not replace them:
The Loynova mobile application and the loyalty programs delivered through it, which are covered by the applicable application privacy policy.
Loyalty and customer engagement programs that we operate on behalf of our clients, where the client is the party responsible for the personal information. See section 15.
Contractual arrangements with clients, partners, and suppliers, where the relevant agreement governs.
Please read this Notice together with any cookie notice, consent banner, or supplementary notice presented on the Website.
2. Who We Are and How to Reach Us
Loynova is a business-to-business loyalty and customer engagement technology company operating across the Middle East and North Africa. [Insert full legal entity name, commercial registration number, and registered address.]
For the personal information described in this Notice, Loynova is the controller, meaning the party that decides why and how that information is processed, except where section 15 states that we act on behalf of a client.
Questions, requests, and complaints relating to this Notice can be sent to our privacy contact using the details in section 17.
3. Information We Collect
3.1 Information you provide to us
We collect personal information that you choose to submit through the Website, such as when you request a demonstration, complete a contact or enquiry form, subscribe to updates, register for an event, or apply for a role. This may include:
Name and job title
Company or organization name and country
Business email address and telephone number
The content of your enquiry, message, or request
Communication and marketing preferences
Event or webinar registration details
Information you include in a curriculum vitae or application, where a careers form is made available
3.2 Information collected automatically
When you access the Website, certain information is collected automatically through server logs, cookies, and similar technologies, including:
IP address and the approximate location derived from it
Device type, operating system, browser type and version, and language settings
Referring website or campaign parameters
Pages viewed, links selected, files downloaded, and time spent on pages
Date and time of access and session identifiers
Cookie and similar identifiers
Diagnostic, performance, and error information
3.3 Information from other sources
We may receive business contact information from professional networking platforms, events, referral and partner introductions, publicly available sources, and analytics or advertising providers acting on our instructions, in each case where permitted by applicable law.
Please do not submit payment card details, account credentials, or sensitive personal information through our web forms. The Website is not intended to collect that information.
4. Cookies and Similar Technologies
Cookies are small files placed on your device when you visit a website. We also use similar technologies such as pixels, tags, and local storage. We use these for the categories of purpose set out below.
Strictly necessary. Enabling core site functions such as page delivery, load balancing, form submission, and security. Consent not required.
Performance and analytics. Understanding how the Website is used so that content, structure, and performance can be improved. Consent required.
Functional. Remembering preferences such as language or previously completed form fields. Consent required.
Marketing and advertising. Measuring campaign performance and presenting relevant content on third-party platforms. Consent required.
Where applicable law requires it, non-essential cookies are set only after you give consent through our cookie banner. You can change or withdraw your choices at any time through the cookie settings made available on the Website.
You can also control cookies through your browser settings, including deleting cookies already stored and blocking future cookies. Blocking strictly necessary cookies may prevent parts of the Website from working correctly.
There is no single accepted standard for responding to browser-based Do Not Track signals. Our current position on those signals is set out in the cookie settings available on the Website.
5. How We Use Personal Information
We use the personal information described above to:
Respond to enquiries, demonstration requests, and other messages you send us
Provide information about our products, services, and capabilities that you have requested
Establish and manage client, partner, and supplier relationships
Send marketing and event communications where you have opted in or where otherwise permitted by applicable law
Organize and administer events, webinars, and briefings
Operate, maintain, secure, and improve the Website
Analyze usage trends and measure the performance of our content and campaigns
Detect, investigate, and prevent fraud, misuse, security incidents, and unauthorized access
Assess applications where you apply for a role with us
Comply with applicable laws, regulations, and lawful requests from competent authorities
Establish, exercise, or defend legal claims and protect our rights, property, and operations
6. Legal Bases for Processing
Where applicable data protection law requires a legal basis, we rely on one or more of the following:
Consent: for non-essential cookies, marketing communications where consent is required, and any other processing presented to you on that basis.
Performance of a contract or steps taken at your request: for responding to enquiries, arranging demonstrations, and managing our dealings with you or your organization.
Legitimate interests: for operating and promoting a business-to-business service, securing and improving the Website, understanding how it is used, and protecting against fraud and misuse, weighed against your interests and rights.
Legal obligation: for record keeping, responding to lawful requests, and meeting regulatory requirements that apply to us.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7. Marketing Communications
Where permitted, we may send you information about our products, services, events, publications, and company updates.
You can opt out at any time by using the unsubscribe link in any marketing message or by contacting us using the details in section 17. We keep a limited record of your opt-out so that your preference is respected.
Opting out of marketing does not stop service, contractual, security, or legally required communications.
8. How We Share Information
We do not sell personal information.
We share personal information only where it is necessary for the purposes set out in this Notice, with the following categories of recipient:
Hosting, cloud, and infrastructure providers
Website analytics and performance providers
Customer relationship management, marketing, and email delivery platforms
Event and webinar platforms
Security, fraud prevention, and monitoring providers
Professional advisers, including legal, audit, insurance, and accounting advisers
Affiliates and group companies, where applicable
Regulators, government authorities, courts, or law enforcement agencies where required by law or to protect legal rights
A counterparty, acquirer, or successor entity in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate confidentiality protections
Service providers act on our documented instructions and are required by contract to apply appropriate security and confidentiality measures and to process personal information only for authorized purposes.
9. International Transfers
Loynova operates across multiple countries in the Middle East and North Africa, and some of our service providers are located in other countries. Personal information may therefore be transferred to, stored in, or accessed from a country other than the one in which you are located.
Where a transfer takes place, we apply the safeguards required by applicable law, which may include transfers to countries recognized as providing an adequate level of protection, contractual protections with the receiving party, obtaining a licence or approval from the competent authority where required, or obtaining your consent.
Details of the safeguards applied to a specific transfer can be requested using the contact details in section 17.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Notice, taking into account:
The nature of your interaction with us and whether an ongoing relationship exists
Legal, regulatory, tax, and accounting retention requirements
The need to resolve disputes, enforce agreements, and defend legal claims
Security, audit, and record-keeping requirements
Enquiry and marketing records are retained for the period stated in our internal retention schedule and are then deleted or anonymized. Cookies expire in line with the retention period disclosed in our cookie settings. Opt-out records are retained for as long as needed to honor your preference.
11. Security
We apply technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, or misuse. These measures include:
Encryption of data in transit using industry-standard protocols
Access controls based on business need and role
Network protection, logging, and monitoring
Secure development and change management practices
Security assessment and due diligence of service providers
Incident detection, response, and notification procedures
Periodic review of security controls and staff awareness training
No website or method of electronic transmission can be guaranteed to be completely secure. You are responsible for protecting any credentials or devices you use to access the Website.
12. Your Rights and Choices
Subject to applicable law, you may have the right to:
Request access to the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information where legally permitted
Request restriction of certain processing
Object to processing based on our legitimate interests
Object at any time to processing for direct marketing purposes
Request a copy of certain information in a portable format
Withdraw consent where processing is based on consent
Ask not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable
Lodge a complaint with the competent data protection authority in your country
To exercise a right, contact us using the details in section 17. We may need to verify your identity before acting on a request. We respond within the period required by applicable law. Requests are handled free of charge, except where the law permits a fee for manifestly unfounded or excessive requests. Some requests may be limited by legal, regulatory, security, or contractual requirements.
13. Third-Party Links and Embedded Content
The Website may contain links to third-party websites, and may embed third-party content such as social media features, video players, or maps.
Those third parties may collect information about your interaction with their content and operate under their own privacy policies. We do not control their data practices and are not responsible for them. We recommend reviewing the privacy policy of any third-party site or service before providing information to it.
14. Children's Privacy
The Website is directed to businesses and professional audiences and is not intended for children.
We do not knowingly collect personal information from children in circumstances prohibited by applicable law. If you believe that a child has provided personal information through the Website, please contact us so that we can take appropriate action.
15. Information We Process on Behalf of Our Clients
Loynova provides loyalty and customer engagement technology to banks, financial institutions, telecom operators, retailers, and other enterprises.
When we deliver those services, our client determines why and how the personal information of its customers and program members is processed, and we act as a processor on the client's documented instructions under a written agreement.
This Notice does not apply to that processing. If you are a customer or program member of one of our clients and wish to exercise your rights over that information, please contact the client directly. Where we receive such a request, we will refer it to the relevant client and support them in responding as required by our agreement and by applicable law.
16. Changes to This Notice
We may update this Notice from time to time to reflect changes to our services, technology, legal requirements, or privacy practices.
The effective date shown on this Notice indicates when it was last updated. Where a change is material, we will take reasonable steps to bring it to your attention, which may include posting a notice on the Website or contacting you directly. Continued use of the Website after an update indicates that you have reviewed the current version.
17. Contact Us
For questions, requests, or complaints regarding this Notice or the way your personal information is handled, please contact us:
Email: [email protected]
Website: https://www.loynova.com
If you are not satisfied with our response, you may contact the data protection or supervisory authority in your country.