Effective Date: 10/24/2025

WY Coffee ("we," "us," or "our") operates a customer engagement and loyalty program, enabling registered users ("End Customers") to receive personalized rewards, promotions, and communications. This Privacy Policy explains how we collect, use, store, and share personal data when you engage with our loyalty program and related services.

We collect personal data directly from you when you sign up for our loyalty program, participate in promotional campaigns, or interact with our services. ClixWallet ("ClixWallet") provides the technical infrastructure that enables us to securely collect, process, and manage your personal data. Both WY Coffee and ClixWallet act as joint controllers in processing your personal data.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy and in ClixWallet's Privacy Policy, which you can access at ClixWallet's Privacy Policy.

1. HOW WE COLLECT PERSONAL DATA

We collect personal data directly from you when you:

1. Sign up for our loyalty program through our website, mobile app, or in-store registration.
2. Use your digital wallet pass to redeem offers, collect rewards, or participate in promotions.
3. Interact with our services by making purchases, engaging with personalized offers, or responding to marketing communications.
4. Contact us through customer support, social media, or other communication channels.

ClixWallet provides the technical infrastructure that enables this data collection, ensuring secure processing and compliance with applicable data protection laws.

2. WHAT PERSONAL DATA DO WE COLLECT?

We collect and process the following categories of personal data:

1. Identity Information: Name, email address, phone number.
2. Loyalty Program Data: Membership status, reward points, transaction history.
3. Marketing Preferences: Opt-in status for promotional messages, personalized offers.
4. Digital Wallet Information: Details of your registered loyalty pass, including activation and usage status.
5. Device & Usage Data: IP address, browser type, device model (collected automatically when interacting with our services).

We do not collect sensitive personal data (e.g., health, biometric, religious information).

3. HOW WE USE PERSONAL DATA

We process your personal data for the following purposes:

1. Managing Your Loyalty Membership - Assigning and tracking loyalty points, processing reward redemptions, and updating membership status.
2. Providing Personalized Offers & Promotions - Sending push notifications, SMS, or emails with relevant deals (if you have opted in).
3. Improving Customer Experience - Analyzing customer behavior to refine loyalty programs and promotions.
4. Ensuring Security & Fraud Prevention - Monitoring transactions to detect unauthorized activity or fraudulent redemptions.
5. Complying with Legal Obligations - Retaining transaction records for tax or regulatory compliance.

4. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal principles:

1. Explicit Consent - When you sign up for our loyalty program, you provide consent for us to process your data for loyalty services, promotional offers, and marketing communications.
2. Service Provision - We process your data when necessary to fulfill your loyalty membership benefits.
3. Legal Compliance - We may retain certain data to meet financial and regulatory obligations.

If you wish to withdraw consent at any time, you can do so by updating your preferences or contacting aleidan7@icloud.com.

5. HOW WE SHARE PERSONAL DATA

We do not sell your personal data. However, we may share it in the following cases:

1. With ClixWallet - As a joint controller, ClixWallet processes data to enable technical functionality, security, and analytics.
2. With Service Providers - We may engage trusted third-party vendors (e.g., SMS/email delivery, cloud hosting) to manage communications and loyalty services.
3. For Legal Compliance - If required by law, court order, or regulatory request.

6. DATA RETENTION POLICY

We retain personal data for as long as necessary to operate our loyalty program. Typical retention periods include:

1. Loyalty Program Data - Retained for the duration of your membership and deleted after 2 years of inactivity.
2. Marketing Preferences - Retained until you withdraw consent or opt out.
3. Transaction Data - Retained for 2 years for record-keeping and compliance.

7. YOUR RIGHTS & CHOICES

Depending on applicable laws, you may have the right to:

1. Withdraw Consent - Stop receiving marketing communications.
2. Access Your Data - Request a copy of your personal data.
3. Request Data Deletion - Ask us to erase your data, subject to legal obligations.
4. Modify Your Preferences - Update contact and notification settings.

To exercise your rights, contact us at aleidan7@icloud.com.

8. SECURITY MEASURES

We implement industry-standard security measures to protect your personal data. However, since ClixWallet provides the technical infrastructure, we rely on their security protocols to ensure safe data processing.

If you suspect unauthorized activity on your loyalty account, contact us immediately at aleidan7@icloud.com.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our services or legal requirements. If significant updates occur, we will notify users through email or in-app alerts.

10. CONTACT INFORMATION

For any privacy-related inquiries, please contact us at:

WY Coffee

Andlous Kuwait Kuwait Kuwait

aleidan7@icloud.com

For data-related inquiries regarding ClixWallet's role in processing, please refer to:

ClixWallet