Privacy Policy for RoadCube

Effective Date: October 27, 2023

1. Introduction

RoadCube ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share your personal information when you participate in loyalty programs created by RoadCube for our partner stores.

2. Information We Collect

We collect personal data from customers who visit and make transactions at our partner stores, as well as information about the stores themselves. This data is collected to facilitate the loyalty programs created by RoadCube for our partner stores. The data collected includes:

Customer Data:

Store Information:

Data Collection Methods:

We collect data through RoadCube loyalty systems, including:

We also collect payment information from partner stores to facilitate automatic payments (e.g., via card or bank transfer) for their participation in the loyalty programs. This payment information is processed securely and used solely for billing and financial reconciliation purposes.

3. How We Use Your Information

We use the collected customer data, including store information, to:

RoadCube is the sole owner of the data collected for the loyalty programs. Where we rely on consent, you may withdraw that consent at any time.

4. Sharing Your Information

We may share customer data, including store information, with:

These third parties are contractually obligated to use the data only for the purposes we specify. Partner stores are obligated to use the data only for the provision of the loyalty programs, and in accordance with our instructions.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing and usage patterns.

You can manage your cookie preferences through your browser settings.

6. Your Rights

You have various rights regarding your personal information, including:

Exercising Your Rights:

To exercise any of these rights, please contact us at:

We will respond to your request within 3-7 business days.

Identity Verification:

To protect your privacy and security, we may need to verify your identity before processing your request. We may contact you via phone or email to confirm that you are the legitimate owner of the personal data in question.

7. Data Security

We implement industry-standard security measures to protect your personal data from unauthorized access, use, or disclosure. These measures include:

We have a documented data breach response plan to address and mitigate the impact of any security incidents. However, no method of transmission over the internet or electronic storage is completely secure.

8. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specific retention periods may vary depending on the type of data and its use.

9. Data Breach Notifications

In the event of a personal data breach, we will notify the relevant supervisory authority without undue delay, and where feasible, not later than 72 hours after having become aware of the breach, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.

If the breach is likely to result in a high risk to the rights and freedoms of individuals, we will communicate the personal data breach to the data subject without undue delay.

Our notifications will include, where possible, a description of the nature of the personal data breach, the categories and approximate number of data subjects concerned, the categories and approximate number of personal data records concerned, the likely consequences of the breach, and the measures taken or proposed to be taken to address the breach.

We will maintain records of all personal data breaches, including their facts, effects, and remedial action taken, ensuring we can demonstrate compliance with this section.

We will follow all other legal requirements, that pertain to data breach notification, as set out by the GDPR.

10. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If a child aged 13 or older engages in transactions, we use their data solely for the purposes of the loyalty programs.

11. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of any significant changes via email. We will maintain a version history of the privacy policy.

12. Contact Us

If you have any questions or concerns, please contact us at:

Our Data Protection Officer can also be contacted at the above email address.

13. Definitions