What we collect, and why.

Who we are

HeyRegs is a loyalty card service for independent hospitality businesses in Australia and New Zealand, operated from 8 The Drive, Epsom, Auckland, New Zealand.

This page covers two different groups of people, and it matters which one you are.

• Merchants are business owners who sign up to build a card.
• Customers are the people who add a merchant’s card to their phone wallet.

What we collect

From merchants

• Business name, your name, email address, and optionally a mobile number.
• Your town and country, and what sort of business you run.
• Photographs you upload, such as your logo, shopfront, or menu, which we process to build your card.
• Billing details, handled by our payment processor. We do not see or store your full card number.

From your customers

Deliberately very little: a name and one contact field, either an email address or a mobile number. Plus the record of their visits: when a stamp or point was added, and when a reward was redeemed.

We also record when someone agreed to be contacted, and on what basis. That timestamp is a legal requirement, not a preference.

Why we collect it

• To build your card. Photographs are processed to read colours, isolate your logo, and lay out a wallet pass. We keep them while your card is live so it can be rebuilt or edited, and delete them when your account closes.
• To run the programme. Stamps, points and rewards need a record of visits, or the card cannot work.
• To contact people who agreed to be contacted. Merchants who sign up, and customers who ticked the box when they joined a card.
• To take payment and meet our tax and record-keeping obligations.

Who else sees it

We use other companies to run parts of the service. Each sees only what it needs.

• Apple and Google, to issue and update wallet passes on your customers’ phones.
• Our payment processor, to take and manage payments.
• Email and SMS providers, to send messages people have agreed to receive.
• Our hosting provider, which stores the data that runs the service.

We do not sell personal information, and we do not share one merchant’s customer list with another. Each merchant’s data is isolated at the database level.

How long we keep it

We keep your account records for as long as your account is open. When an account closes we delete it and the customer records held under it, other than financial records we are required by law to keep.

Your rights

You can ask us what we hold about you, ask us to correct it, and ask us to delete it. Write to the address below and we will respond as quickly as we can, and within the time limits set by the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020.

In Australia, this is governed by the Privacy Act 1988 and the Australian Privacy Principles. If you are unhappy with how we have handled a request, you can complain to the Office of the Australian Information Commissioner.

In New Zealand, the Privacy Act 2020 applies and you can complain to the Office of the Privacy Commissioner.

Marketing messages always carry an unsubscribe link, and unsubscribing takes effect regardless of anything else in this page.

Getting in touch

Privacy questions and requests go to privacy@heyregs.com, or by post to 8 The Drive, Epsom, Auckland, New Zealand.

For anything else, use the contact page.