Privacy policy

Last reviewed: 10 Aug 2026

This text is a template. Before you publish it, read it through and fill in your own details: who is responsible for the data, where it is hosted and how long you keep it. It is no substitute for proper legal advice.

Who handles your data

Estam is the tool a business uses to run its loyalty programme. Each business decides what it asks for and what it does with it: the business is the controller. We store the data on its behalf.

What we store

About the person getting the card: Email address and, if the business asks for them, name, phone number and birthday.
About their activity: Stamps, points, visits and rewards redeemed, with the date of each entry.
Technical: IP address and browser at sign-up, to keep bots and abuse out.

What we use it for

Keeping count of the stamps and saying when a reward is ready.
Getting you back into your card by emailing you the link.
Sending news and offers from the business, only if that box was ticked.

How long

For as long as the card is active. If the business closes its account, or you ask us to delete your data, it goes; we only keep what the law requires (an accounting record of a payment, for instance).

Your rights

You can ask to access, correct, delete, object to or port your data by writing to the business that issued the card; its email address is at the bottom of the sign-up page. You can also complain to your national data protection authority.

Questions about this text? Get in touch and we'll tell you exactly what we store. You can also read the terms, the privacy policy and the cookie notice.