Privacy policy for KeepStamp.

KeepStamp Privacy Policy

Last Updated: 27 June 2026

KeepStamp respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how KeepStamp collects, uses, discloses, stores, protects, and retains personal data when you access or use the KeepStamp website, mobile application, merchant dashboard, digital loyalty platform, QR stamp features, reward redemption features, campaign tools, and related services collectively, the “Platform”.

This Privacy Policy applies to Customers, Merchants, merchant staff, website visitors, and any other person who accesses or uses the Platform.

By accessing, registering for, or using the Platform, you acknowledge that you have read and understood this Privacy Policy. Where consent is required under applicable law, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should not access or use the Platform.

1. Definitions

In this Privacy Policy:

“KeepStamp”, “we”, “us”, or “our” refers to the operator of the KeepStamp Platform.

“Platform” refers to the KeepStamp website, mobile application, merchant dashboard, admin tools, QR stamp features, loyalty features, redemption features, analytics features, and related services.

“Customer” refers to an individual who uses KeepStamp to collect stamps, participate in campaigns, view merchants, or redeem rewards.

“Merchant” refers to a business, outlet, service provider, organisation, or commercial user that uses KeepStamp to create or manage loyalty campaigns, stamp cards, rewards, or promotions.

“Personal data” refers to data about an individual who can be identified from that data, or from that data together with other information to which we have or are likely to have access.

“Campaign” refers to any digital stamp card, reward programme, promotion, offer, voucher, or loyalty activity made available through the Platform.

“Reward” refers to any benefit, product, service, discount, voucher, free item, privilege, or promotional entitlement offered by a Merchant through the Platform.

2. Our Role

KeepStamp may collect and use personal data for our own Platform purposes, such as account registration, authentication, Platform operation, security, fraud prevention, analytics, customer support, and legal compliance.

Where KeepStamp processes personal data on behalf of a Merchant and for that Merchant’s campaign or business purposes, KeepStamp may act as a data intermediary, and the Merchant remains responsible for its own privacy practices and compliance obligations.

Merchants are independent organisations. A Merchant may collect, use, disclose, or process Customer personal data for its own purposes, such as reward fulfilment, customer service, appointment handling, product or service delivery, and marketing where legally permitted. Merchants should maintain their own privacy policies where required.

This Privacy Policy does not control the privacy practices of Merchants, third-party websites, payment providers, delivery providers, or other external services.

3. Personal Data We Collect

We may collect personal data in the following ways.

3.1 Information You Provide Directly

When you create an account, use the Platform, submit forms, contact us, or interact with KeepStamp, we may collect:

a. name; b. email address; c. mobile number; d. login credentials or authentication details; e. profile information; f. communication preferences; g. support messages and feedback; h. survey responses; i. marketing preferences; and j. any other information you choose to provide.

For Customers, we may also collect information relating to:

a. stamp collection activity; b. reward redemption activity; c. campaign participation; d. referral activity, if applicable; e. favourite or followed Merchants, if applicable; f. preferences or interests, if voluntarily provided; and g. optional profile details, such as birthday month or birthday date, where used for birthday rewards or personalised offers.

For Merchants and merchant staff, we may collect:

a. business name; b. business registration details; c. outlet address; d. contact person name; e. business email address; f. business phone number; g. outlet operating hours; h. merchant profile details; i. staff user details; j. billing or subscription details; k. campaign information; l. reward terms; m. uploaded logos, images, and marketing materials; and n. other information required to verify or operate the merchant account.

We do not intend to collect NRIC, passport, or other national identification numbers unless required by law, necessary for verification, or otherwise permitted under applicable law.

4. Information Collected Automatically

When you access or use the Platform, we may automatically collect technical and usage information, including:

a. IP address; b. device type; c. browser type; d. operating system; e. device identifiers; f. app version; g. pages or screens viewed; h. buttons, features, or campaigns interacted with; i. access dates and times; j. approximate location derived from IP address or device settings; k. error logs; l. crash reports; m. security logs; and n. usage analytics.

This information helps us operate, secure, monitor, troubleshoot, and improve the Platform.

5. Location Data

KeepStamp may use location-related data to support features such as nearby merchants, outlet discovery, campaign availability, and fraud prevention.

We may collect:

a. approximate location based on IP address; b. device location, if you grant permission through your browser or mobile device; and c. merchant outlet location data provided by Merchants.

You may disable location permissions through your device or browser settings. Some location-based features may not function properly if location access is disabled.

6. QR Stamp and Redemption Data

When a Customer collects stamps, scans QR codes, participates in campaigns, or redeems rewards, we may collect and process related activity data, including:

a. Customer account identifier; b. Merchant account identifier; c. campaign identifier; d. outlet identifier; e. QR scan record; f. stamp issue date and time; g. redemption date and time; h. reward eligibility status; i. redemption status; j. staff or merchant user involved, where applicable; and k. related fraud prevention or audit logs.

This data is necessary to provide the digital loyalty, stamp tracking, and reward redemption functions of the Platform.

7. Information From Merchants

Merchants may provide Customer information to KeepStamp for legitimate Platform-related purposes, such as campaign participation, reward fulfilment, customer support, or invitation features.

Merchants must ensure they have obtained all required consent or have another lawful basis before uploading, submitting, or using Customer personal data through the Platform.

KeepStamp is not responsible for a Merchant’s unlawful collection, upload, disclosure, or use of Customer personal data.

8. Information From Service Providers and Third Parties

We may receive information from third-party service providers where necessary to operate the Platform, including:

a. payment confirmation details; b. billing status; c. email delivery status; d. SMS or messaging delivery status; e. analytics reports; f. authentication confirmations; g. fraud detection signals; and h. technical support information.

We may also collect limited publicly available business information to verify Merchant listings or business details, where permitted by law.

9. How We Use Personal Data

We may collect, use, disclose, and process personal data for the following purposes:

a. creating and managing Customer accounts; b. creating and managing Merchant accounts; c. verifying account identity and login access; d. enabling QR stamp collection; e. tracking stamp balances and reward progress; f. enabling reward redemption; g. displaying Merchant profiles, outlets, and campaigns; h. supporting Merchant campaign management; i. providing customer support; j. responding to enquiries, complaints, and requests; k. sending account, security, service, and administrative notifications; l. sending policy updates or important Platform notices; m. processing merchant subscriptions, billing, and payment records; n. detecting, preventing, and investigating fraud, abuse, misuse, unauthorised access, or security incidents; o. resolving disputes between Users, Customers, Merchants, or KeepStamp; p. monitoring Platform performance and usage; q. improving, testing, and developing Platform features; r. conducting analytics and generating reports; s. enforcing the KeepStamp Terms and Conditions, Merchant Terms, and other policies; t. complying with legal, regulatory, accounting, tax, audit, and compliance obligations; u. protecting the rights, safety, property, and security of KeepStamp, Users, Merchants, Customers, and third parties; and v. any other purpose that we notify you of and, where required, obtain your consent for.

10. Marketing Communications

We may send you marketing communications about KeepStamp features, campaigns, promotions, merchant offers, product updates, or related services where you have consented or where permitted by applicable law.

You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us.

For SMS, phone calls, WhatsApp, or other messages sent to Singapore telephone numbers, KeepStamp and Merchants are responsible for complying with applicable Do Not Call and consent requirements where applicable.

Transactional, security, account, legal, and service-related messages are not marketing messages and may still be sent where necessary for Platform operation.

11. Sharing Personal Data With Merchants

When a Customer interacts with a Merchant’s campaign, collects stamps, or redeems a Reward, we may share relevant information with that Merchant to enable campaign operation and fulfilment.

This may include:

a. Customer name or account identifier; b. stamp activity; c. campaign participation; d. reward eligibility; e. redemption status; f. redemption history related to that Merchant; g. referral activity related to that Merchant, if applicable; and h. support or dispute information related to that Merchant’s campaign.

Merchants may only use Customer personal data for lawful purposes connected to the relevant campaign, reward fulfilment, customer service, or other purposes for which they have obtained valid consent or are otherwise legally permitted.

12. Sharing Personal Data With Service Providers

We may share personal data with trusted service providers who support the operation of the Platform.

These may include providers of:

a. cloud hosting; b. database storage; c. authentication; d. email delivery; e. SMS or messaging services; f. payment processing; g. analytics; h. customer support tools; i. security monitoring; j. error logging; k. website hosting; l. app infrastructure; and m. professional services such as legal, accounting, audit, or compliance support.

We require service providers to handle personal data only for authorised purposes and to protect personal data using appropriate safeguards.

13. Other Situations Where We May Disclose Personal Data

We may disclose personal data where necessary or appropriate:

a. to comply with applicable laws, regulations, court orders, legal processes, or government requests; b. to enforce our Terms and Conditions, Merchant Terms, policies, or agreements; c. to protect the rights, property, safety, and security of KeepStamp, Users, Merchants, Customers, or third parties; d. to investigate fraud, abuse, security incidents, technical issues, or unlawful activity; e. to respond to disputes, complaints, claims, or legal proceedings; f. in connection with a merger, acquisition, financing, restructuring, sale of assets, transfer of business, or change of control; or g. with your consent or at your direction.

KeepStamp does not sell your personal data.

14. Cookies and Similar Technologies

We may use cookies, pixels, local storage, software development kits, analytics tools, and similar technologies to operate, secure, personalise, and improve the Platform.

These technologies may be used to:

a. keep you logged in; b. remember your preferences; c. understand how the Platform is used; d. measure campaign and feature performance; e. prevent fraud and abuse; f. improve user experience; and g. support security and troubleshooting.

You can manage cookies through your browser settings. If you disable cookies, some Platform features may not work properly.

If KeepStamp later uses advertising cookies, remarketing pixels, or third-party behavioural advertising tools, we should provide additional notice and obtain consent where required by applicable law.

15. Analytics and Aggregated Data

We may use personal data, usage data, campaign data, stamp activity, redemption activity, and technical data to create aggregated, anonymised, or de-identified data.

Aggregated or anonymised data does not identify you personally.

We may use such data for:

a. Platform analytics; b. business reporting; c. product development; d. benchmarking; e. security monitoring; f. fraud prevention; g. campaign insights; h. merchant performance reports; and i. service improvement.

16. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

a. the type of data; b. the purpose for which it was collected; c. account activity; d. campaign participation; e. legal, tax, accounting, or audit requirements; f. fraud prevention and security needs; g. dispute resolution needs; and h. contractual obligations.

As a general guide:

a. account data may be retained while your account remains active; b. stamp and redemption records may be retained for campaign administration, dispute handling, fraud prevention, accounting, and legal purposes; c. merchant billing and subscription records may be retained for accounting, tax, audit, and legal purposes; d. support communications may be retained for service history, dispute handling, and compliance purposes; e. marketing preferences may be retained until you unsubscribe, withdraw consent, or request deletion, subject to legal exceptions; and f. technical logs may be retained for security, troubleshooting, fraud prevention, and operational purposes.

When personal data is no longer required, we will delete, anonymise, or securely dispose of it, unless retention is required or permitted by law.

17. Data Security

We implement reasonable technical, administrative, and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, loss, or similar risks.

These measures may include:

a. access controls; b. authentication controls; c. encryption where appropriate; d. secure hosting infrastructure; e. security monitoring; f. audit logs; g. staff access restrictions; h. data backup procedures; i. secure development practices; and j. internal policies and training.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for keeping your login credentials secure and for notifying us immediately if you suspect unauthorised access to your account.

18. Data Breach Notification

If we become aware of a data breach affecting personal data, we will assess the incident and take reasonable steps to contain, investigate, and remediate it.

Where required by applicable law, we will notify affected individuals, Merchants, regulators, or other relevant parties.

If a Merchant becomes aware of any actual or suspected unauthorised access, misuse, disclosure, loss, or breach involving Customer personal data obtained through KeepStamp, the Merchant must notify KeepStamp immediately.

19. International Transfers

Your personal data may be stored or processed outside Singapore, including in countries where our hosting providers, service providers, or technical infrastructure are located.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transferred personal data receives a standard of protection comparable to the protection under applicable Singapore data protection law.

These steps may include contractual safeguards, due diligence on service providers, security controls, or other legally recognised transfer mechanisms.

20. Your Rights and Choices

Subject to applicable law, you may have the right to:

a. request access to personal data we hold about you; b. request correction of inaccurate or incomplete personal data; c. withdraw consent for certain uses of your personal data; d. opt out of marketing communications; e. request deletion of your account or personal data, subject to legal and operational exceptions; f. ask questions or raise concerns about how your personal data is handled; and g. lodge a complaint with the relevant data protection authority where applicable.

To make a request, please contact us using the contact details in this Privacy Policy.

We may need to verify your identity before processing your request.

Where you withdraw consent, we will inform you of the likely consequences where required. Withdrawal of consent may affect our ability to provide certain Platform features.

We may retain certain data where necessary for legal, regulatory, accounting, security, fraud prevention, dispute resolution, or legitimate business purposes.

21. Customer Requests Involving Merchant Data

If your request relates to personal data that a Merchant controls or uses independently, we may direct you to contact the relevant Merchant.

Examples include:

a. a Merchant’s own customer records; b. appointment records held by the Merchant; c. purchases made directly with the Merchant; d. Merchant marketing communications; e. Merchant reward fulfilment records; and f. complaints about how a Merchant uses your personal data outside KeepStamp.

Where appropriate, KeepStamp may assist with Platform-related records, such as stamp history or redemption status.

22. Account Deletion

You may request deletion of your KeepStamp account by contacting us.

After receiving a valid request, we may delete or anonymise account data, subject to any data we need to retain for:

a. legal compliance; b. accounting or tax purposes; c. fraud prevention; d. security; e. dispute resolution; f. enforcement of our Terms; g. backup systems; or h. legitimate business purposes permitted by law.

Deleting your account may result in the loss of access to stamps, rewards, redemption history, merchant campaigns, and other Platform features.

23. Children’s Privacy

The Platform is not intended for children below the age of 13.

We do not knowingly collect personal data from children below 13 without appropriate consent.

If you believe that a child has provided personal data to KeepStamp without appropriate consent, please contact us and we will take reasonable steps to review and delete the information where required.

Where children or minors use the Platform, parents or legal guardians should supervise their use.

24. Third-Party Links and Services

The Platform may contain links or integrations to third-party websites, applications, payment providers, map services, delivery services, merchant websites, or external platforms.

This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices, content, security, or policies of third parties. You should review the privacy policies of those third parties before using their services.

25. Merchant Responsibilities

Merchants using KeepStamp must comply with applicable data protection laws and the KeepStamp Merchant Terms.

Merchants must ensure that they:

a. collect, use, and disclose Customer personal data lawfully; b. obtain valid consent where required; c. use Customer data only for authorised and lawful purposes; d. keep Customer data secure; e. do not sell, misuse, or unlawfully disclose Customer data; f. do not send marketing messages without the required consent or legal basis; g. comply with applicable Do Not Call requirements; h. promptly notify KeepStamp of suspected data breaches involving KeepStamp-related Customer data; and i. respond to Customer data protection requests where the Merchant is responsible for the data.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Platform features, legal requirements, or business operations.

The updated Privacy Policy will be posted on the Platform with the revised “Last Updated” date.

Where changes are material, we may provide additional notice, such as by email, website notice, in-app notice, or merchant dashboard notice.

Your continued use of the Platform after the updated Privacy Policy takes effect means you acknowledge the updated Privacy Policy.

27. Contact Us

If you have questions, requests, complaints, or concerns about this Privacy Policy or how KeepStamp handles personal data, please contact us:

Email: [hello@keepstamp.com](mailto:hello@keepstamp.com) Data Protection Officer Contact: [hello@keepstamp.com](mailto:hello@keepstamp.com) Business Name: [KeepStamp Pte Ltd] Registered Address: [455 Hougang Ave 10 Singapore 530455]