Privacy Policy

Introduction

"Novus Loyalty" is a rewards loyalty platform representing a network of merchants that provide exclusive offers and services to customers. We are committed to protecting your privacy and safeguarding your personal data. This privacy policy describes the information you provide to us, the information we collect when you use our platform, and how we use and protect that information.

This privacy policy may be updated periodically. Continued use of the platform constitutes acceptance of the updated policy.

What We Collect

We collect personally identifiable information (PII) when you register or use our services. This may include:

• Name
• Email address
• Mobile number
• Date of birth
• Gender
• Address and PIN code
• Country
• Communication records (email, chat, or phone)
• Preferences and subscription information

During redemption or transactions, additional details may be collected depending on the service, including:

• Mobile number for recharge services
• DTH subscription number
• Passport details and date of birth for flight bookings
• Shipping address for merchandise delivery

We maintain records of transactions associated with your loyalty account, including reward points debits and credits. We do not store your card data on our servers. All sensitive information is stored securely in a PCI DSS compliant environment.

Information Collected Automatically

To improve user experience and service performance, we may collect analytical and technical information such as:

• Device information (device ID, manufacturer, operating system, browser type)
• Network and connectivity information
• Location information (city, country, latitude and longitude)
• Usage and activity logs

We may also use cookies or similar technologies to track user preferences and improve service functionality.

Mobile Application Permissions

When using the mobile application, we may request certain permissions to enhance functionality:

• Location access to display nearby services
• Internet and network state access
• Storage access to save profile information
• SMS access for automatic OTP verification
• Vibration permission for notifications
• Contact access for faster transaction input

Purpose of Data Collection

The information collected is used to:

• Provide and improve services
• Process transactions and redemptions
• Send transactional communications such as confirmations and receipts
• Resolve disputes, inquiries, and customer service requests
• Provide relevant offers and promotions
• Monitor system performance and prevent fraud

Who Has Access to Your Data

Access to personal data is restricted to authorized personnel who require the information to perform their duties. When information is shared with service partners, they are required to comply with applicable data protection and privacy regulations.

We may disclose personal information to governmental or regulatory authorities when required by law or legal process.

Data Sharing and Communications

Personal information may be shared with trusted third-party service providers for transactional purposes such as sending SMS or email notifications. Marketing communications may also be sent through secure systems operated by authorized partners.

You may opt out of non-transactional communications at any time by using the unsubscribe option provided in communications.

Cookies

Cookies are used to track usage patterns and preferences to improve user experience. Most browsers accept cookies by default; however, you may modify browser settings to disable cookies. Disabling cookies may affect certain functionalities of the platform.

Data Retention

Personal data is retained only as long as necessary to fulfill business purposes or comply with legal and regulatory requirements. All stored data is protected against unauthorized access and disclosure.

Security

We follow industry-standard security practices to protect personal data. Security measures include:

• Secure data networks protected by firewalls
• Encryption using Secure Socket Layer (SSL) technology
• Restricted system access to authorized personnel only
• Regular security audits and vulnerability assessments

We adopt recognized security frameworks and industry best practices to ensure data protection and privacy compliance.

Your Data Protection Rights

Users are entitled to the following rights regarding their personal data:

• Right to access personal data
• Right to correct inaccurate data
• Right to request deletion of personal data
• Right to restrict processing of personal data
• Right to object to data processing
• Right to request transfer of personal data

Jurisdiction

This privacy policy is governed by the laws of India. Courts located in Mumbai shall have exclusive jurisdiction over disputes arising from this policy.

Contact Us

If you have any questions or concerns regarding this privacy policy, you may contact our support team through the official customer service channels available on the platform.

Policy Revisions

We reserve the right to update this privacy policy as required. Changes will be reflected by updating the revision date. Continued use of the platform after updates constitutes acceptance of the revised policy.

Last Updated: October 31, 2023