MyDigiStamp

Last updated: 2026-10-08

MyDigiStamp Privacy Policy

Last updated: 2026-10-08 Data controller: Izabela Banachiewicz (sole trader, UK), trading as MyDigiStamp Business address: 108 Wood Lane, West Bromwich, B70 9PX, United Kingdom Contact: contact@mydigistamp.com

This policy complies with the UK GDPR (as retained in UK law under the European Union (Withdrawal) Act 2018) and the Data Protection Act 2018.

1. Who is the data controller?

MyDigiStamp is operated by Izabela Banachiewicz, sole trader, United Kingdom. Depending on data category, we act in different roles:

  • Controller — for data of business owners registering MyDigiStamp accounts and of people who submit the landing-page contact form.
  • Processor — for end-customer loyalty-card data; the business owner running the program is the controller. See the Data Processing Agreement (DPA).

2. What data do we collect?

2a. Business owners

Email, bcrypt password hash, business name & type, logo URL, brand colour, language, Stripe customer ID (if a plan is purchased), 2FA secret and backup codes (if enabled), referral code, trial lifecycle flags, Terms/Privacy/DPA acceptance timestamps.

2b. End customers (loyalty-card holders — processor data)

First name (optional, can be "Guest #N"), phone number (optional), birthday day + month only — never year, visit/stamp/reward history, pseudonymous card token, pending online-order stamps linked by email.

2c. Contact-form senders (landing page)

Name, reply email, business name, message body.

2d. E-commerce integration data (Premium plan)

From Shopify / WooCommerce webhooks: customer_email, customer_name, order_id, order total + currency, business association, processing status.

3. Lawful bases (UK GDPR art. 6)

  • Contract (art. 6(1)(b)) — account creation, login, running the loyalty program, adding stamps, redeeming rewards, subscription billing.
  • Legitimate interests (art. 6(1)(f)) — app security, login audit, abuse prevention (daily stamp cap, dynamic QR), super-admin impersonation audit log, [LAWYER] response to contact-form inquiries from businesses (B2B pre-sales enquiry).
  • Consent (art. 6(1)(a)) — optional SMS reward notifications (currently inactive), optional birthday day/month for birthday bonus.
  • Legal obligations (art. 6(1)(c)) — accounting records for Stripe payments.

4. How long we keep data

  • Business accounts — for the subscription lifetime + 90 days grace.
  • End-customer cards — until the business owner runs the program or the customer requests erasure.
  • Visits — 24 months from last visit, then automatic deletion by daily cron.
  • SMS log — 30 days.
  • Contact-form messages — 12 months from last reply (handled) or 12 months from creation (unhandled).
  • Webhook logs — 90 days (minimised: no raw payload, only business_id/source/event/status).
  • Online-order stamps (activated) — 24 months.
  • Super-admin audit log — kept as evidence; no end-customer PII.
  • Password reset tokens — single-use, auto-deleted after use or 1h expiry.

5. Who we share data with

  • Stripe (payments) — separate data controller for payment data. UK + USA, Stripe Standard Contractual Clauses.
  • Emergent (hosting + MongoDB Atlas, and transactional-email delivery via the Emergent Email API which uses Resend as sub-processor under Emergent's own Resend account and sender domain) — processor. Hosting location: data is hosted by Emergent on cloud infrastructure; we are confirming the exact region and will update this section. Transactional email delivery via Resend: EU / USA, UK IDTA + SCCs. We do not operate our own Resend account; outgoing transactional email headers may therefore show an Emergent-managed sender domain, with Reply-To: contact@mydigistamp.com.
  • Resend (sub-processor of Emergent, as above).
  • Twilio (SMS, currently inactive) — processor; UK + USA, UK IDTA + SCCs.
  • IONOS (business inbox contact@mydigistamp.com — receiving + we may reply from it manually) — processor; EU.

No marketing analytics, no advertising cookies, no 3rd-party trackers. Fonts are self-hosted.

[LAWYER] International transfers: non-UK transfers rely on the UK International Data Transfer Agreement (IDTA) and/or Standard Contractual Clauses with UK addendum, as published by the ICO.

6. Your rights (UK GDPR art. 15–22)

  • Access, Rectification, Erasure ("right to be forgotten"), Restriction, Portability, Objection.
  • Withdraw consent at any time where processing is based on consent (does not affect prior lawful processing).
  • Complaint to the ICO — https://ico.org.uk, helpline 0303 123 1113.
  • In-app erasure: customer card → "Delete my data"; owner account → Settings → "Delete account" (removes you + all customers + visits + SMS logs + online-stamp records + webhook logs for your account).
  • In-app export: Settings → "Export my data" (JSON of all your account's data).

7. How to request / complain

Email: contact@mydigistamp.com — we respond within one month per UK GDPR art. 12(3). Postal address for formal requests: 108 Wood Lane, West Bromwich, B70 9PX, United Kingdom.

8. Automated decision-making

We do not use automated decision-making (including profiling) that produces legal or similarly significant effects on individuals.

9. Age

[LAWYER] MyDigiStamp owner accounts are B2B — not intended for anyone under 18. End-customer loyalty cards may be used by minors (age ≥ 13 per UK DPA 2018 s. 9); the business owner is responsible for obtaining any parental consent required by local law.

10. Cookies & local storage

The app uses only strictly-necessary browser storage (login token, language, card token, PWA dismiss flags). No marketing cookies, no 3rd-party trackers. Full list in /legal/cookies.

11. Changes to this policy

We update this policy as needed. The "Last updated" date reflects the latest change.