Privacy Policy

Last updated: Oct 4, 2026

1. Who we are

SeeYou (also referred to as SeeYou Loyalty) is a digital loyalty platform for businesses. SeeYou is operated by Numiya Ltd ("SeeYou", "we", "our" or "us"), a company registered in England and Wales with company number 17442191, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website or use the SeeYou platform. For the personal data described in sections 3 to 8, Numiya Ltd is the data controller.

If you have any questions about this Privacy Policy, contact us at legal@seeyouloyalty.com.

2. Who this policy applies to

This Privacy Policy applies to:

  • visitors to our website;
  • businesses that create a SeeYou account;
  • staff and other people who use the platform on behalf of a business.

If you are a customer of a business that uses SeeYou (for example, you hold a loyalty card from a salon), please read section 9.

3. Information we collect

Information you provide:

  • name;
  • business name;
  • email address;
  • password (stored as a secure hash by our authentication provider);
  • billing details (handled by Stripe, see section 6);
  • support enquiries and correspondence.

Information generated when you use the platform:

  • loyalty programme, package and wallet pass settings;
  • account activity necessary to provide the service.

Technical information, when you access the website or platform:

  • IP address;
  • browser type and device information;
  • login timestamps;
  • security, authentication and error logs.

We do not use advertising, analytics or behavioural tracking technologies.

4. How we use your information

We use your information to:

  • create and manage your account;
  • authenticate users;
  • provide the SeeYou platform;
  • process subscription payments;
  • respond to support requests;
  • maintain platform security and fix errors;
  • prevent fraud and abuse;
  • comply with legal obligations;
  • improve the reliability and performance of our service.

We do not make decisions about you based solely on automated processing.

5. Legal basis for processing

Under the UK GDPR, we rely on the following legal bases:

  • Performance of a contract: to create and manage your account, provide the platform and process subscription payments. We need your name, email address and billing details to do this. Without them, we cannot provide an account.
  • Legitimate interests: to maintain platform security, fix errors, prevent fraud and abuse, improve the reliability and performance of our service, and retain account data for a limited period after closure. We balance these interests against your rights and freedoms.
  • Legal obligation: to meet our accounting, tax and other legal or regulatory requirements.

We do not currently send marketing emails. If we do so in future, we will only send them with your consent or, where the law allows, where you are an existing customer who has been given a clear opportunity to opt out. Every marketing email will include an unsubscribe link.

6. Payments

Subscription payments are processed by Stripe.

Stripe handles payment information directly and acts as an independent controller for some purposes, such as fraud prevention and regulatory compliance, in line with its own privacy policy.

7. Email communications

We use Resend to send service-related emails, including:

  • account verification;
  • password resets.

8. Authentication and cookies

User authentication is provided by Supabase. We use a single strictly necessary cookie to keep you signed in and protect access to your account. We do not use advertising or analytics cookies. For more information, see our Cookie Policy.

9. If you are a customer of a business using SeeYou

Businesses use SeeYou to run loyalty programmes and to track packages you have bought from them (for example, the number of sessions remaining). When you sign up to a business's loyalty programme through SeeYou, that business is the controller of your personal data. SeeYou processes your data on the business's behalf, under a Data Processing Agreement.

The data processed may include:

  • your name;
  • your email address and phone number, if the business chooses to collect them (both are optional);
  • your loyalty card and package details, such as stamps, rewards and remaining sessions;
  • your visit and redemption history;
  • notes recorded by the business;
  • your digital wallet pass and the technical data needed to keep it updated, such as the pass identifier and your device's push token.

SeeYou does not provide marketing tools, does not send marketing messages to you and does not collect marketing consent. A business may use your contact details to contact you about its loyalty programme or your package. If a business uses your details for marketing, it does so as controller and is responsible for complying with marketing law.

Wallet passes carry the business's branding and are issued through SeeYou's Apple Wallet and Google Wallet accounts. Google stores pass data on its servers to deliver Google Wallet passes. Apple's push notification service is used to tell your device that an Apple Wallet pass has changed. Your use of the wallet app itself is covered by Apple's and Google's own privacy policies.

To find out how a business uses your data, or to exercise your rights, contact the business directly. Its privacy notice is linked from its sign-up page. If you contact us instead, we will pass your request to the business.

10. Sharing your information

We do not sell personal information.

We share personal information with service providers that help us operate the platform:

  • Supabase: database hosting and authentication;
  • Vercel: website and application hosting;
  • Stripe: subscription payments;
  • Resend: service email delivery;
  • Sentry: error monitoring for our backend systems;
  • Cloudflare: bot protection on the customer sign-up page (customers of businesses only);
  • Google: storage and delivery of Google Wallet passes (customers of businesses only);
  • Apple: update notifications for Apple Wallet passes (customers of businesses only).

These providers process personal information only as necessary to deliver their services to us. We may also share information with professional advisers, with authorities where required by law, or with a buyer if our business is sold.

11. International transfers

Our database and application servers are hosted in the United Kingdom (London). Some of our providers process data in the United States or elsewhere. Where personal data is transferred outside the UK, we rely on one of the following safeguards:

  • UK adequacy regulations for the destination country;
  • the UK Extension to the EU-US Data Privacy Framework, where the US provider is certified;
  • the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

The safeguard used for each provider is listed in our Data Processing Agreement. You can request a copy of the relevant safeguards at legal@seeyouloyalty.com.

12. Data retention

We keep personal data only for as long as necessary for the purposes it was collected for:

  • account data and platform records: for the life of the account, then up to 30 days after cancellation or deletion to allow recovery or export, after which they are permanently deleted or anonymised;
  • transactional, tax and invoicing records: six years from the end of the financial year they relate to, to meet HMRC and other legal obligations;
  • support correspondence: two years after the enquiry is closed.

13. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate or incomplete data corrected;
  • have your data erased where there is no legal reason for us to keep it;
  • restrict our processing of your data;
  • object to processing based on legitimate interests or for direct marketing;
  • receive your data in a structured, machine-readable format;
  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email legal@seeyouloyalty.com. We will respond within one month.

14. Complaints

If you are unhappy with how we have handled your personal data, please complain to us first at legal@seeyouloyalty.com. We will acknowledge your complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (ico.org.uk).

15. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration and destruction, including encryption, access controls and multi-factor authentication for administrative access. No online service can guarantee absolute security.

16. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will update the "Last updated" date and, where appropriate, notify you through the platform or by email.

17. Contact us

Numiya Ltd, trading as SeeYou
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company number: 17442191
Email: legal@seeyouloyalty.com