Privacy Policy
Effective Date: August 10 2026
This Privacy Policy explains how PT SOLUSI SUKSES KOMUNIKASI DIGITAL (“LoyalTribe”, “we”, “us”, or “our”) processes personal data through the LoyalTribe loyalty and rewards platform.
1. Who We Are
LoyalTribe is a loyalty and rewards platform for Shopify merchants.
When a merchant installs and uses the LoyalTribe application on their Shopify store, LoyalTribe processes personal data on behalf of and under the instructions of that merchant.
For this processing:
The merchant acts as the data controller, meaning the merchant determines why and how customer personal data is processed.
LoyalTribe acts as the data processor, meaning we process personal data only to provide the services requested and configured by the merchant.
Customers should generally contact the merchant they purchased from regarding their personal data and loyalty-program membership.
2. Personal Data We Process
The personal data processed by LoyalTribe depends on the features enabled by the merchant.
Name and Email Address
We may process a customer’s name and email address to:
Create and identify a loyalty-program membership.
Associate loyalty activity with the correct customer.
Send loyalty-related emails.
Notify customers about points earned, rewards, vouchers, referral activity, and membership updates.
Send product-review requests where enabled by the merchant.
Phone Number
We may process a customer’s phone number to send loyalty-related notifications through WhatsApp where:
The merchant has enabled the WhatsApp feature.
The merchant has the required lawful basis or consent to send the message.
The customer has provided a valid phone number.
Birthday Information
We may process a customer’s birthday or birth date to provide birthday rewards configured by the merchant.
Gender, Country, and Enrollment Information
A merchant may configure optional loyalty-enrollment fields, such as:
Gender.
Country.
Customer preferences.
Custom enrollment questions.
This information is processed only for the merchant’s loyalty program and according to the merchant’s instructions.
Order and Purchase Information
We may receive and process order information from Shopify, including:
Order number or identifier.
Order value.
Products purchased.
Order status.
Refunds.
Cancellations.
Applicable discounts.
We use this information to:
Calculate loyalty points.
Determine eligibility for rewards.
Calculate referral rewards.
Update loyalty tiers.
Retract or adjust points following refunds or cancellations.
Prevent duplicate or invalid rewards.
LoyalTribe does not need to process full payment-card information to provide its loyalty services.
Product Reviews
Where the merchant enables product-review features, we may process:
Review content.
Review rating.
Reviewer name or display name.
Product information.
Review submission date.
Associated customer or order identifier.
This information is used to:
Display reviews submitted by customers.
Verify review eligibility where applicable.
Award loyalty points or rewards for eligible reviews.
Loyalty Activity
We may process loyalty-program information including:
Points earned and redeemed.
Current points balance.
Membership tier.
Available rewards.
Vouchers.
Store credit.
Referral activity.
Reward expiration dates.
Notification history.
Loyalty transaction history.
This information is necessary to operate the merchant’s loyalty program.
Merchant and Administrator Information
When a merchant installs or manages LoyalTribe, we may also process information relating to the merchant and its authorized users, including:
Merchant name.
Store name.
Shopify store domain.
Administrator name.
Administrator email address.
Account settings.
Subscription and billing status.
Support communications.
Login and authentication information.
This information is used to operate, secure, support, and administer the Service.
Technical and Usage Information
We may automatically collect limited technical information, including:
IP address.
Browser type.
Device type.
Operating system.
Application events.
Login activity.
Error logs.
Timestamps.
API and integration activity.
This information is used to:
Maintain and secure the Service.
Detect errors and unauthorized access.
Troubleshoot technical issues.
Monitor system performance.
Prevent fraud and abuse.
3. How We Use Personal Data
LoyalTribe processes personal data only as necessary to:
Provide the loyalty and rewards platform.
Create and maintain loyalty memberships.
Calculate, award, adjust, and redeem loyalty points.
Provide rewards, vouchers, tiers, referrals, and store credit.
Send loyalty-related notifications.
Display customer-submitted reviews.
Provide support to merchants.
Maintain platform security and availability.
Troubleshoot errors and technical issues.
Respond to privacy and data-subject requests.
Comply with legal and contractual obligations.
We do not use merchant customer data for unrelated advertising.
We do not sell personal data.
We do not create customer profiles outside the merchant’s loyalty program.
We do not use one merchant’s customer data for the benefit of another merchant.
4. Legal Basis for Processing
The merchant is responsible for determining the appropriate legal basis for processing its customers’ personal data.
Depending on the merchant’s location and applicable laws, the legal basis may include:
Performance of a contract.
Legitimate interests.
Customer consent.
Compliance with a legal obligation.
LoyalTribe processes personal data on the merchant’s documented instructions and as necessary to provide the Service.
Where optional communications, marketing messages, WhatsApp notifications, product reviews, or optional profile fields require consent, the merchant is responsible for obtaining and managing that consent.
5. How We Receive Personal Data
We may receive personal data from:
Shopify.
The merchant.
The merchant’s customers.
Loyalty enrollment forms.
Product-review forms.
Merchant-configured integrations.
Support requests.
Automated application and security logs.
6. Sub-processors and Service Providers
LoyalTribe may use third-party service providers to operate the Service.
These providers process data only for the services they provide to LoyalTribe and are subject to appropriate confidentiality and data-protection obligations.
Our current categories of sub-processors may include:
Shopify
Shopify is the source platform for merchant store, customer, product, order, refund, and application-installation data.
[Hosting Provider]
Our hosting provider is used for application hosting, databases, infrastructure, backups, and related technical services.
[SMTP or Email Provider]
Our email provider is used to deliver loyalty-related and transactional emails configured by the merchant.
BitByBit
BitByBit is used to deliver WhatsApp messages where the merchant has enabled WhatsApp notifications.
Sentry
Sentry is used for application error monitoring and technical diagnostics.
Error reports may include technical information such as timestamps, application events, device information, IP addresses, or identifiers required to investigate an error.
We may update our sub-processor list when service providers change. A current list may be made available upon request or through our website.
7. International Data Transfers
LoyalTribe serves merchants and customers in multiple countries.
As a result, personal data may be processed in countries outside the country where the merchant or customer is located.
Where required by applicable law, LoyalTribe will use appropriate safeguards for international data transfers, which may include:
Contractual data-protection clauses.
Standard Contractual Clauses approved by the European Commission.
Transfer agreements with service providers.
Other legally recognized transfer mechanisms.
8. Data Retention
We retain personal data only for as long as necessary to:
Provide the Service.
Maintain loyalty-program records.
Fulfill the merchant’s instructions.
Respond to privacy requests.
Maintain security and prevent fraud.
Comply with legal, accounting, or contractual obligations.
Resolve disputes and enforce agreements.
Customer loyalty data is generally retained while the merchant continues to use LoyalTribe, unless the merchant instructs us to delete it earlier or applicable law requires deletion.
Technical logs, error records, support communications, security records, and backup copies may be retained for limited periods according to our Data Retention Policy.
9. App Uninstallation and Store Deletion
When a merchant uninstalls the LoyalTribe Shopify application, Shopify may send LoyalTribe a shop/redact privacy request, generally approximately 48 hours after the app is uninstalled.
After receiving and validating the request, LoyalTribe will delete or irreversibly anonymize the relevant merchant and customer personal data from active systems, except where retention is required by law or necessary for legitimate legal, security, billing, or dispute-resolution purposes.
Residual copies may remain temporarily in encrypted backups until those backups are overwritten or deleted according to the normal backup-retention cycle.
10. Customer Deletion Requests
When a customer asks a merchant to delete their personal data, the merchant may submit the request through Shopify.
Shopify may then send LoyalTribe a customers/redact request.
After receiving and validating the request, LoyalTribe will delete or anonymize the customer’s identifying information from its systems, unless continued retention is required by applicable law.
Where technically appropriate, loyalty activity may be deleted or disconnected from the customer’s identity.
11. Customer Data Access Requests
When a customer asks a merchant for access to their personal data, Shopify may send LoyalTribe a customers/data_request.
LoyalTribe will provide the relevant information to the merchant, who is responsible for communicating the response to the customer.
LoyalTribe may not respond directly to the customer where the personal data is controlled by the merchant, unless required by applicable law.
12. Data Security
LoyalTribe uses reasonable technical and organizational measures designed to protect personal data.
These measures may include:
Encryption in transit using HTTPS and TLS.
Restricted access to production systems.
Role-based access controls.
Individual staff accounts.
Multi-factor authentication for sensitive systems.
Password and credential-management requirements.
Logging and monitoring.
Backup and recovery controls.
Security-incident response procedures.
Staff confidentiality obligations.
Security and privacy training.
Periodic access reviews.
No online service can guarantee absolute security. However, we maintain safeguards proportionate to the nature of the data and the risks associated with the processing.
Additional information about our Data Retention Policy, Security Incident Policy, and Staff Access and Password Policy may be provided to merchants upon reasonable request.
13. Security Incidents
If LoyalTribe confirms a security incident affecting personal data processed on behalf of a merchant, we will notify the affected merchant without undue delay, in accordance with applicable law and our contractual obligations.
Where reasonably practicable, the initial notification will include:
The nature of the incident.
The types of data affected.
The known or likely impact.
The containment measures taken.
Recommended actions for the merchant.
Contact information for follow-up.
Information may be provided in stages while the investigation is ongoing.
14. Customer Rights
Depending on the customer’s location and applicable law, customers may have the right to:
Request access to their personal data.
Request correction of inaccurate personal data.
Request deletion of personal data.
Request restriction of processing.
Object to certain processing.
Request data portability.
Withdraw consent.
Submit a complaint to a data-protection authority.
Because the merchant controls the customer relationship and loyalty program, customers should submit these requests directly to the merchant whose store they purchased from or joined.
LoyalTribe will reasonably assist merchants in responding to valid customer requests.
15. Merchant Rights and Requests
Merchants may contact LoyalTribe to:
Request information about personal data processed through the Service.
Update merchant account information.
Request export or deletion of merchant-controlled data.
Ask questions about sub-processors.
Report a security concern.
Exercise rights available under the Merchant Terms of Service and Data Processing Agreement.
Merchant requests may be sent to [contact email].
16. Children’s Data
LoyalTribe is not designed to independently collect personal data from children.
Merchants are responsible for determining whether their loyalty program is offered to children and for obtaining any parental or guardian consent required by applicable law.
Merchants must not use LoyalTribe to knowingly collect children’s personal data in violation of applicable law.
17. Cookies and Similar Technologies
The LoyalTribe merchant dashboard or embedded application may use cookies or similar technologies that are necessary for:
Authentication.
Session management.
Security.
Application functionality.
Preferences.
Error detection and performance monitoring.
We do not use merchant customer data for cross-site advertising.
Where non-essential cookies are introduced, appropriate notice or consent mechanisms will be provided where required.
18. Third-Party Services
The LoyalTribe Service may contain links to or integrations with third-party services.
Those third parties have their own terms and privacy practices. LoyalTribe is not responsible for how third parties process personal data outside the services they provide directly to LoyalTribe.
Merchants should review the privacy terms of Shopify and any third-party service they choose to enable.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes to the Service.
New features.
Changes to our sub-processors.
Security improvements.
Legal or regulatory requirements.
Changes to our data-processing practices.
The updated version will be published with a revised effective date.
Where changes materially affect merchant or customer rights, we may also provide notice through the LoyalTribe application, email, website, or another reasonable method.
20. Contact Us
Questions about this Privacy Policy or LoyalTribe’s data-processing practices may be sent to:
Legal Company Name: PT Solusi Sukses Komunikasi Digital
Registered Address: The Cemara Umalas - Jl. Umalas Jl. Dukuh Indah No.101, Kerobokan Kelod, Kec. Kuta Utara, Kabupaten Badung, Bali 80361
General Contact: [email protected]
Privacy Contact: [email protected]
Website: loyaltriberewards.com
Customers requesting access, correction, or deletion of personal data should first contact the Shopify merchant whose store they purchased from or whose loyalty program they joined.