Privacy policy

Last updated: 17/08/2026

Indicative template. Complete it with the company’s tax details and have it reviewed by legal counsel before publishing.

Data controller

Liberty Digital Agency LLC, owner of Perksi. You can contact us at charly@libertydigital.agency.

Dual role: controller and processor

For the data of those who subscribe to the service (the businesses), we act as controller.

For the data of end customers who sign up to those businesses’ loyalty programmes, we act as data processor: the controller is the business running the programme.

Data we process

From businesses: name, email, phone, tax and billing details, and access logs.
From end customers: name, email or phone, sign-up date, points or stamps balance, transaction history and consents given (including the IP address and the moment they were given).

Purposes and legal basis

Providing the contracted service — performance of a contract.
Running the business’s loyalty programme — performance of the contract with the business.
Sending commercial communications to the end customer — express and revocable consent.
Meeting tax and accounting obligations — legal obligation.
Preventing fraud and abuse — legitimate interest.

Retention

Business data is kept while the account is active and afterwards for the applicable limitation periods. End-customer data is kept while the programme remains active or until the business deletes it.

Recipients

Providers necessary to deliver the service: hosting, email delivery and payment gateway (Stripe). Data is not shared with third parties for commercial purposes.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to charly@libertydigital.agency. If you are an end customer of a programme, contact the business that runs it; we will pass on your request if you write to us. You may also lodge a complaint with the competent supervisory authority.

Security

We encrypt connections with TLS, store passwords with robust hashing algorithms and keep API keys only as a cryptographic digest. Sensitive actions on each account are logged.