Privacy Policy
Last Updated: October 16, 2026
LoyalNuggets ("us", "we", or "our") operates the LoyalNuggets website (the "Service"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have in relation to your data. It should be read together with our Cookie Policy.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Information We Collect
We collect information in the following ways:
1.1 Information You Provide
- Contact information — If you contact us via our Contact page or email, we receive your name, email address, and the content of your message.
- Newsletter email — If you subscribe to our newsletter, we receive your email address. (Note: our newsletter functionality is currently being upgraded; subscription may not be active at this time.)
We do not require you to create an account to browse the Service, and we do not intentionally collect sensitive personal data such as government identifiers, financial account details, or health information.
1.2 Information Collected Automatically
When you visit the Service, we and our third-party partners automatically collect:
- Usage data — Pages visited, links clicked, time on page, referring URL, and general interaction data.
- Device data — Browser type and version, operating system, device type, screen resolution, and general technical attributes.
- Network data — IP address (which may be truncated or anonymized by our analytics providers), approximate location (country/region and, where available, city derived from your IP).
- Cookie identifiers — Identifiers set by cookies or local storage as described in our Cookie Policy.
1.3 Anti-Fraud Signals
We collect a limited set of technical signals (such as browser configuration attributes, timezone, and screen properties) to detect and prevent fraudulent or bot traffic. This data is used solely for security and fraud-prevention purposes and is not used to build advertising profiles.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To operate, maintain, and improve the Service.
- To monitor and analyse usage trends and measure the effectiveness of our content.
- To detect, prevent, and address technical issues, fraud, and abuse.
- To respond to your enquiries and provide customer support.
- To serve and measure advertising, including through Google AdSense, where you have consented.
- To measure the performance of our affiliate and referral partnerships, where you have consented.
- To comply with legal obligations.
We do not use your information for automated decision-making that produces legal or similarly significant effects.
3. Legal Bases for Processing (GDPR / UK GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases:
- Consent — For analytics and advertising cookies and pixels, and for personalised advertising. You can withdraw consent at any time via the "Cookie Settings" link in our footer.
- Legitimate interests — For operating and securing the Service, preventing fraud, responding to your enquiries, and understanding aggregate usage of our content. We balance these interests against your rights and freedoms.
- Legal obligation — Where processing is required to comply with applicable law.
4. Advertising and Google AdSense
We use Google AdSense to display advertisements on the Service. Google, as a third-party vendor, uses cookies (including the DoubleClick DART cookie) to serve ads based on your prior visits to our website and other websites on the Internet.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings.
- You may also opt out of third-party vendors' use of cookies for personalized advertising at aboutads.info or optout.networkadvertising.org.
- Google's Advertising Privacy Policy is available at policies.google.com/technologies/ads.
Google may treat some of this activity as a "sale" or "sharing" of personal information under US state privacy laws. You can opt out by rejecting advertising cookies in our cookie banner or via "Cookie Settings" in the footer.
5. Analytics
We use PostHog and Google Analytics (loaded via Google Tag Manager) to understand how visitors use the Service. These tools collect information such as pages visited, time spent, and general interaction patterns. This data is used in aggregate to improve our content and user experience.
- Google Analytics: you can opt out by installing the Google Analytics Opt-out Browser Add-on.
- PostHog and Google Analytics are loaded only with your consent, as managed by our cookie banner.
6. Sharing Your Information
We may share your personal information with:
- Service providers — Companies that help us operate the Service (hosting, analytics, advertising, email). They process data on our behalf under contractual obligations.
- Advertising partners — Including Google AdSense, which may combine data collected on our site with data from other sites to deliver and measure advertising, where you have consented.
- Affiliate partners — Companies whose offers we present. When you click an offer link, the partner receives technical data (such as a referral identifier) necessary to attribute the referral. Each partner is subject to its own privacy policy.
- Legal and safety — If required to do so by law, or in response to valid requests by public authorities, or to protect the rights, property, or safety of LoyalNuggets, our users, or the public.
- Business transfers — In connection with a merger, acquisition, reorganisation, or sale of assets, subject to the acquirer honoring this policy.
We do not sell your personal information for money. However, certain advertising and analytics activities may be treated as a "sale" or "sharing" under US state privacy laws. You can opt out as described in Section 8.
7. International Data Transfers
Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have different data protection laws. Where we transfer personal data from the EEA or UK to countries that have not received an adequacy decision, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
8. Your Rights
8.1 GDPR / UK GDPR Rights
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Request correction of inaccurate data.
- Erasure — Request deletion of your data, subject to legal exceptions.
- Restriction — Request that we limit how we use your data.
- Portability — Receive your data in a structured, machine-readable format.
- Objection — Object to processing based on legitimate interests, including profiling.
- Withdraw consent — Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
8.2 CCPA / CPRA Rights (California and Other US States)
If you are a resident of California or another US state with comprehensive privacy law, you may have the right to:
- Know — Request disclosure of the categories and specific pieces of personal information collected, the sources, the purposes, and the third parties with whom it is shared.
- Delete — Request deletion of personal information, subject to exceptions.
- Correct — Request correction of inaccurate personal information.
- Opt out of sale/sharing — Opt out of the "sale" or "sharing" of personal information for targeted advertising.
- Non-discrimination — We will not discriminate against you for exercising your rights.
To exercise any of these rights, email privacy@loyalnuggets.com. We will verify your request and respond within the timeframe required by applicable law.
We honour the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we will treat it as a valid opt-out of sale/sharing and will not load advertising or analytics cookies.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. In general:
- Contact form enquiries are retained for up to 24 months.
- Analytics data is retained by our analytics providers according to their policies (typically up to 14 months in Google Analytics).
- Cookie consent choices are stored for 12 months.
- Anti-fraud signals are retained for up to 12 months for security purposes.
10. Children's Privacy
The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us at privacy@loyalnuggets.com and we will take steps to delete it.
11. Data Security
We use commercially reasonable administrative, technical, and physical safeguards to protect your personal data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
12. Third-Party Links
The Service contains links to third-party websites, including our affiliate partners' offer pages. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of every site you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be highlighted on the Service or notified to you where required by law. We encourage you to review this policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us:
- By email: privacy@loyalnuggets.com
- General support: support@loyalnuggets.com
- By visiting our Contact page
If you are in the EEA or UK and believe we have not resolved your concern, you have the right to lodge a complaint with your local data protection authority.