At Pretii we respect your privacy. This policy explains what personal data we process, why, who we share it with, how long we keep it and how you can use your rights.
1. Who we are
Pretii is a service of LOGICAL DESIGN E.I.R.L., a company registered in Peru (RUC 20545331951), Av. Arequipa 2447 Dpto. 409, Lince, Lima, Peru ("Pretii", "we"). For anything about personal data, write to [email protected].
2. Who this policy covers and our role
| If you are… | Pretii's role |
|---|---|
| A visitor to pretii.io | Controller of your browsing data |
| Someone who joined the waitlist | Controller |
| A partner or a shop with a Pretii account | Controller of your account and billing data |
| A customer of a shop (a member of a loyalty programme) | Processor: we handle your data on behalf of the shop or the partner, who is the controller, and follow their instructions |
When a loyalty programme carries the name and logo of a shop or a partner, that business is the controller of its customers' data and Pretii processes it on its behalf.
3. What data we process
Visitors to pretii.io
- Browsing data: pages you visit, device, browser and cookie identifiers. We only collect these through Google Analytics if you accept analytics cookies (see section 10).
- Where you came from on your first page and your first visit: campaign parameters (
utm_*), Google and Meta click identifiers (gclid,gbraid,wbraid,fbclid) and the referring site. They are kept in your browser and are not sent to us.
People on the waitlist
- What you enter: name, email, company or shop, country, what you do and how many shops you work with.
- The page you sent the form from and the date you joined.
- To tell people from bots, Google reCAPTCHA checks the form when you send it (see section 6).
Partners and shops
- Account data: name, legal name and tax number, email, phone, dashboard users and programme settings.
- Billing: plan, payments and invoices. Card details are handled by PayPal, Openpay or dLocal Go; Pretii does not see or store them.
Customers of a shop (on behalf of the shop or the partner)
- Sign-up: name, email, phone and, if the shop asks for them, an identity number and date of birth.
- Programme use: points, redemptions, rewards, visits and comments.
- Wallet card: the card details (name, points, discount, next reward and code) are sent to Apple or Google so the card can be saved and updated on the phone.
- In the apps: a device identifier to send notifications and, if you allow it, your location to show nearby shops.
- If you sign in with Google: your name and email from that account.
We don't ask for sensitive data (health, racial origin, political or religious views, biometric data).
4. Why we use it and our legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Provide the service to partners and shops and run the loyalty programmes | Partners, shops and customers | Performance of the contract with the partner or the shop |
| Bill and meet tax obligations | Partners and shops | Legal obligation |
| Tell you when access opens and send you information about Pretii | Waitlist | Steps you asked us to take when you joined the waitlist |
| Measure how people find and use pretii.io | Visitors | Consent (analytics cookies, section 10) |
| Prevent fraud, spam and abuse | Everyone | Legitimate interest and platform security |
| Handle complaints and requests from authorities | As needed | Legal obligation |
We don't sell or rent personal data. We don't make automated decisions that significantly affect you.
5. Emails if you join the waitlist
We email you the day your access opens, and we may send a few emails before that about the launch, prices and how to start. We don't add you to newsletters or other lists without your permission. To stop the emails, reply "unsubscribe" to any of them or write to [email protected].
6. Who we share data with
Only with the providers we need to run the service, each for its own job:
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers and databases | United States |
| Hostinger | Daily backups | United States |
| DigitalOcean (Spaces) | Image storage | United States |
| Amazon Web Services (SES) | Sending emails | United States |
| Google (Analytics, Tag Manager, reCAPTCHA, Firebase, Google Wallet, Sign in with Google) | Site analytics with your consent, spam protection on the waitlist form, notifications, Wallet cards and sign-in | United States and others |
| Apple (Apple Wallet) | Saving and updating Wallet cards on iPhone | United States and others |
| PayPal | Subscription payments | United States and others |
| Openpay | Subscription payments | Peru |
| dLocal Go | Subscription payments | Uruguay and others |
| ipquery.io | Approximate country and city from the IP address | United States |
Shops see the data of their own customers, never those of another shop. A partner sees the data of the shops on its platform. Authorities only receive data when the law or a court order requires it. SUNAT, the Peruvian tax authority, receives billing data to issue electronic invoices. Google also processes the data it collects with its tags as an independent controller, under its own privacy policy.
7. International transfers
Pretii is based in Peru, and our servers and most of our providers are in the United States, so your data is transferred outside your country, including outside the United Kingdom and the European Economic Area. We only use providers that apply recognised data protection standards and contractual safeguards, and only for the purposes in this policy.
8. Security
- Connections to the site, the dashboards, the apps and the API are encrypted with HTTPS/TLS.
- Passwords are stored as a hash: nobody, not even Pretii, can read them.
- Access to databases and internal dashboards is limited to authorised staff.
- If a security incident affects personal data, we report it to the authority and, where required, to the people affected, within the legal deadlines.
9. How long we keep data
| Data | Period |
|---|---|
| Waitlist | 24 months from the last contact, or until you ask us to remove you |
| Shop account on the Pretii platform | While it exists. If you delete it from the admin panel, it is deleted at once (you can download your customer list first). If your plan expires, the account is suspended with its data; we may delete accounts with no activity for 6 months or more, with notice |
| Partner platform and own-brand platforms | While the service is paid. If payment lapses, the platform is switched off and deleted with all its data after 3 months. In that time you can ask to reactivate it, or to switch it on briefly to download your customer list |
| Billing | Electronic invoices are issued with SUNAT and kept for the period tax law requires; payment records stay with the payment provider used |
| Customers of a shop | While the shop's account exists, or until the shop or the customer deletes them |
| Backups | Daily copies on another server, keeping the last 7 days. Deleted data disappears from them within 7 days |
| Cookies and browser storage | As shown in section 10 |
10. Cookies and similar technologies
Analytics cookies stay off until you accept them in the cookie notice. You can change your choice at any time with "Cookie settings" at the bottom of every page.
| Cookie or storage | Whose | What for | How long |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Visit statistics, only if you accept | Up to 2 years |
| reCAPTCHA cookies | Tell people from bots on the waitlist form; they load when you start filling it in | As set by Google | |
pretii_consent (local storage) | Pretii | Remember your cookie choice | Until you clear it |
pretii_attr (session storage) | Pretii | Remember which campaign brought you; it stays in your browser | Until you close the tab |
pretii_attr_first (local storage) | Pretii | Remember where you came from on your first visit; it stays in your browser | 90 days |
pretii.io has no advertising cookies. You can also delete or block cookies in your browser; if you block the reCAPTCHA cookies, the waitlist form may not send.
11. Your rights
At any time you can ask for:
- access to your data;
- correction of wrong data;
- erasure of your data;
- restriction of how we use it;
- objection to a specific use;
- portability, that is, your data in a reusable format such as CSV;
- to withdraw your consent.
How: write to [email protected] with the subject "Personal data" and tell us which right you want to use. We may ask you to confirm who you are. We reply within one month.
If you are a customer of a shop, that shop (or its partner) is the controller of your data: you can write to it directly, or write to us and we will pass your request on.
If you are not happy with our reply, you can complain to your data protection authority: in the United Kingdom, the Information Commissioner's Office (ICO); in the European Union, the authority of your country; in Peru, the National Authority for Personal Data Protection.
12. Children
Pretii is made for businesses. The Pretii app and pretii.app are for people aged 18 and over. In programmes with a shop's or a partner's brand, that business decides whether to accept minors and, if it does, must have the consent the law requires.
13. Changes to this policy
If we change this policy, we publish the new version here with its date. If the change is important, we email partners and shops with an active account.
Contact
Questions about this policy or about your data: [email protected].