Privacy Policy

Effective Date: 13.01.21 

Last Amended 13.01.21

Introduction & General Terms

Brandstack is committed to protecting your personal information when you use our website, apps, or take part in our promotions or contact us with enquiries.

This Privacy and Cookies Policy relates to our use of any personal information we collect from you via the following services:

  • The Brandstack mobile app.
  • The Brandstack website (brandstack.co.uk).

This Privacy and Cookies Policy explains the following:

  • what information Brandstack may collect about you;
  • how Brandstack will use information we collect about you;
  • when Brandstack may use your details to contact you;
  • whether Brandstack will disclose your details to anyone else;
  • your choices regarding the personal information you provide to us;
  • the use of cookies on Brandstack websites and how you can reject cookies.

We use all personal information that you provide to us or that we collect from you in accordance with all applicable laws, including those concerning the protection of personal information such as the EU General Data Protection Regulation.

Brandstack websites may contain hyperlinks to websites owned and operated by third parties. These third party websites have their own privacy policies, and are also likely to use cookies. We recommend that you review these policies which will govern the use of personal information which you submit when visiting these websites and which may also be collected by cookies. We do not accept any liability for such third party websites and your use of such websites is at your own risk.

Who are we?

Brandstack is a cashback app for convenience retailers. For more information on Brandstack please go to brandstack.co.uk

What information will Brandstack collect about me?

When you participate in, access or sign up to any of Brandstack’s services, activities or online content, we may receive personal information about you. This may include your name, email address, postal address, telephone or mobile number, gender or date of birth, as well as information collected about your use of Brandstack services, such as what you read, watched or did on our websites, apps or when using our other services.

Please note that sometimes you may decide to provide us with additional personal information, and sometimes sensitive personal information (e.g. if you are speaking to our consumer services team about any dietary requirements or health issues that you may have). If you do this, we will provide further information about how we will use your information at the time.

Some of our services enable you to sign-in via a third party service, such as Facebook, Twitter and Instagram. If you choose to sign-in via a third party service, you will be presented with a dialog box which will ask your permission to allow Brandstack to access your personal information (e.g. your full name, date of birth, email address and any other information you have made publicly accessible on the third party site).

Brandstack also collects information about how you use Brandstack mobile apps, Brandstack websites or other Brandstack content online, and the device(s) you use to access the services as well as unique online identifiers such as IP addresses, which are numbers that can uniquely identify a specific computer or other network device on the internet.

How will Brandstack use the information it collects about me?

Brandstack will use your personal information for a number of purposes including the following:

  • the provision of our services, activities or online content, or communicating information about them (e.g. relating to upcoming promotions or new product launches)  or dealing with your requests and enquiries;
  • service administration, which means that Brandstack may contact you for reasons related to the service, activity or online content you have signed up for (e.g. notifying you about the administration of a promotion that you have participated in, or notifying you that a particular service, activity or online content has been suspended for maintenance or updating our Privacy and Cookies Policy);
  • training purposes. Calls to our Consumer Services team will be recorded. If requested, we will delete the call recording within 48 hours and the call recording will not be used for any purpose prior to that time.
  • customising the content that you see on our sites and apps, and the advertising that you see on our sites, apps, or other sites and services;
  • working with third parties to show you relevant advertising on that third party site.
  • contacting you about any submission you have made;
  • using IP addresses and device identifiers to identify the location of users, blocking disruptive use, establishing the number of visits from different countries, tailoring the content of our sites, apps or other services based on browsing behaviours, and determining which country you are accessing the services from;
  • analysis and research so that we may improve the services offered by Brandstack;
  • Where Brandstack proposes using your personal information for any other uses we will ensure that we notify you first and/or request your approval as required by law.

Brandstack collects and uses the personal information about you for the purposes described above, because we have a legitimate business interest to do so that is not overridden by your right to have your personal information adequately protected.  You do not have to provide Brandstack with any of the personal information described above, but if you chose not to do so, you may not be able to receive any of the services described above, access certain parts of our website, enter our promotions, or receive information from us that you have requested.

When will Brandstack contact me?

Brandstack may contact you:

  • in relation to any correspondence we receive from you or any comment or complaint you make about Brandstack products or services;
  • in relation to any contribution or question you have submitted to Brandstack, e.g. on the Brandstack social media sites, via text, voicemail message or other messaging services;
  • to update you on any material changes to Brandstack’s policies and practices; and
  • for marketing purposes, provided you have given consent.
  • The website you are visiting will give you detailed information about how Brandstack will contact you in relation to specific services, activities or online content.

Will I be contacted for marketing purposes?

Brandstack will only send you marketing emails, notifications or contact you for marketing purposes provided you have agreed to this.  You can withdraw your agreement at any time by clicking on or selecting the ‘unsubscribe’ option in our marketing communication or using the contact details below.

Will Brandstack share my personal information with anyone else?

Brandstack may from time to time transfer or disclose your personal information to third parties for any of the purposes listed above. Examples of relevant third parties to whom Brandstack may disclose personal information include governmental agencies and third parties who perform services on our behalf, such as web hosting providers, payment providers, customer relationship management providers, marketing partners, media and fulfilment partners, and website analytics providers.

When we disclose your personal information to third parties who perform services on our behalf, we ensure that such service providers use personal information only in accordance with our instructions, and we do not authorise them to use or disclose personal information except as necessary to perform services on our behalf or to comply with applicable legal obligations.

Brandstack may also disclose your personal information to third parties:

(i) where it is required to do so by law,

(ii) for the purposes of, or in connection with, any legal proceedings, or otherwise for the purpose of establishing, exercising or defending its legal rights,

(iii) who are law enforcement authorities or other government agencies who have issued  a lawful disclosure request for the personal information,

(iv) where we believe disclosure is necessary to prevent harm or financial loss, or in connection with an investigation of suspected or actual criminal activity, or

(v) if we sell or transfer all or a portion of our business or assets (including through a merger, reorganisation, spin-off, dissolution or liquidation).

International Transfers of Personal Data

Due to the global nature of our operations, we may transfer your personal information to the U.S. and to other countries whose data protection laws may not be as extensive as those in the EU. 

When Brandstack transfers personal information outside the European Economic Area, we only transfers such personal information:

(i) to a country which the European Commission  considers  to  have  adequate  data  protections  laws; or

(ii) to a company which has a current and valid U.S.-EU Privacy Shield certification providing for certain data protection standards in relation to the category of personal information which is being transferred; or

(iii) where we have put in place an appropriate data transfer mechanism, such as EU Standard Contractual Clauses, to ensure that your personal information is adequately protected.  You may obtain a copy of the relevant data transfer mechanisms that we have put in place by clicking here.

If none of these criteria are satisfied, Brandstack may still transfer personal information outside of the EEA with your explicit consent, or if the transfer is legally necessary.

Access to your personal information will be limited to individuals who need to know the information for the purposes described in this Privacy Policy.

You may request a copy of any transfer mechanisms under which any personal information is transferred outside of the European Union by clicking here.

Offensive or inappropriate content on Brandstack websites

If you post or send offensive, inappropriate or objectionable content anywhere on or to Brandstack websites or otherwise engage in any disruptive behaviour on any Brandstack service, Brandstack may use your personal information to stop such behaviour.

Where Brandstack reasonably believes that you are or may be in breach of any applicable laws (e.g. because content you have posted may be defamatory), Brandstack may use your personal information to inform law enforcement agencies about your behaviour.

What if I am a user aged under 16?

If you are aged under 16, please get your parent/guardian’s permission before you provide any personal information to Brandstack.

How long will Brandstack keep my personal information?

We will hold your personal information on our systems for as long as is necessary for the relevant activity unless a longer retention period is required or permitted by law.

Generally, if you provide your personal information to enter into a promotion, we will only keep your personal information for as long as is necessary for the administration of that promotion.

If you sign up for our email newsletters / marketing communications, we will keep your personal information until such time as you request that your information is deleted (if you elect to unsubscribe at any time then we will generally retain some of your personal information in order to ensure that you are not contacted again).

Can I see or delete the personal information Brandstack holds about me?

To the extent required by applicable law, you have the right to request a copy of the personal information Brandstack holds about you and to have any inaccuracies corrected. We will use reasonable efforts to supply, correct or delete personal information about you on our files.

You also have the right to request that the processing of your personal information is rectified or deleted, that processing of it is restricted, or that the personal information we hold about you is provided to you in a portable format.

Web browser cookies

a. What is a cookie?

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org. You can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser. However if you do so in a few cases some of our website features may not function as a result.

During the course of any visit to a Brandstack website, the pages you see, along with a cookie, are downloaded to your device. Many websites do this, because cookies enable website publishers to do useful things like find out whether the device (and probably its user) has visited the website before. This is done on a repeat visit by checking to see, and finding, the cookie left there on the last visit. If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on the Brandstack website. However, you can change your cookie settings at any time.

b. How does Brandstack use cookies?

Information supplied by cookies can help us to understand the profile of our visitors and help us to provide you with a better user experience. Brandstack uses this type of information to help improve the services and communication it provides to its users, and to understand what other websites they have visited in order to better understand their interests.  We only use cookies that are necessary in order to provide our website to you if you have given consent for us to do so.

c. Third Party Cookies in embedded content on Brandstack pages

Please note that during your visits to Brandstack websites you may notice some cookies that are not related to Brandstack.

We sometimes embed content from social media and other third party websites onto our own websites. These may include Google, YouTube, Twitter, Facebook, , Instagram. As a result, when you visit a page containing such content, you may be presented with cookies from these websites and these third party cookies may track your use of the Brandstack website. Brandstack does not control the dissemination of these cookies and you should check the relevant third party’s website for more information.

Where Brandstack embeds content from social media and other third party websites, some websites may use Google Analytics to collect data about user behaviour for their own purposes. Brandstack does not control this. For more information, see the Google webpage “How Google uses data when you use our partners’ sites or apps”.

d. Brandstack Sharing Tools

You may also see embedded ‘share’ buttons on Brandstack web pages; these enable users to easily share content with their friends through a number of popular social networks. When you click on one of these buttons, a cookie may be set by the service through which you have chosen to share content. Again, Brandstack does not control the dissemination of these cookies.

e. Brandstack cookies

The list below explains some of the cookies we use and why.

Cookie Type: load balancing

Cookie Names: “AWSALBCORS”, “AWSALB”

Cookie Purpose: We use multiple servers to host the website, these cookies ensure that you remain connected to the same server so that you have a consistent experience while using the website.

Cookie Type: session

Cookie Names: “session”, “session_legacy”

Cookie Purpose: If you log-in to the website these cookies are used to maintain your logged-in status so that you can interact with your account.

You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is set. (Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences.) To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

All cookies will expire after 90 days.

f. Use of cookies

We may use cookie data to show you relevant advertising on third party sites (e.g. Facebook, Google, Instagram, Snapchat and Twitter). This could involve showing you an advertising message where we know you have previously visited a Brandstack website. If you don’t want to be shown targeted advertising messages from Brandstack, some third party sites allow you to request not to see messages from specific advertisers on that site in future. If you want to stop all personalised services from Brandstack, including targeted advertising messages on third party sites you can visit your browser’s settings and disable personalisation there.

g. Other information collected from web browsers

Your web browser may also provide Brandstack with information about your device, such as an IP/MAC address and details about the browser that you are using. We use information provided by your browser or by the link that you have clicked to understand the webpage that directed you to the Brandstack website and this may be captured by performance cookies.

Changes to Brandstack’s Privacy and Cookies Policy

This Privacy and Cookies Policy may be updated from time to time so you may wish to check it each time you access or submit personal information to Brandstack. The date of the most recent revisions will appear on this page.

Contacting Brandstack about this Privacy and Cookies Policy / Complaints

If you have any questions or comments about this Privacy and Cookies Policy please click here or contact us at support@brandstack.co.uk.

If you are dissatisfied with our handling of your personal data, you also have the right to complain to an EU data protection supervisory authority. You can find the details of your relevant supervisory authority here: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm