Sign in

Privacy Policy

Ampthill vs Cancer Loyalty Club

Last updated: 29 June 2026
Effective from: 29 June 2026

1. Introduction

This Privacy Policy explains how Ampthill vs Cancer Loyalty Club ("we", "us", "our") collects, uses, stores, and protects your personal information when you use our online loyalty platform, including our website (club.ampthillvscancer.co.uk), any associated mobile applications, and related services (together, the "Platform").

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Please read this policy carefully so you understand your rights and how your information is used. If you do not agree with any part of this policy, please do not use the Platform.

2. Who we are (Data Controller)

For the purposes of data protection law, the data controller is:

Ampthill vs Cancer
Registered Charity England & Wales No. 1217357

If you have any questions about this policy or how we handle your data, you can contact us at:

  • Email: privacy@ampthillvscancer.co.uk

3. The information we collect

We may collect and process the following categories of personal data:

Information you provide to us:

  • Identity details such as your name, date of birth, and username.
  • Contact details such as your email address, postal address, and telephone number.
  • Account credentials such as your password (stored in encrypted form).
  • Loyalty activity such as points earned and redeemed, rewards claimed, participating businesses visited, and transaction references.
  • Communications you send us, including enquiries, feedback, and support requests.
  • Any optional information you choose to share, such as marketing preferences or profile details.

Information we collect automatically:

  • Technical data such as your IP address, device type, browser type and version, operating system, and time zone.
  • Usage data such as the pages you visit, links you click, and how you interact with the Platform.
  • Cookie and similar technology data (see Section 9).

Information from third parties:

  • Participating businesses or partner venues that record your loyalty activity.
  • Payment or transaction service providers, where relevant.
  • Analytics and advertising providers, where you have consented.

We do not intentionally collect special category data (such as health information). If our fundraising or loyalty activities involve any sensitive information, we will only process it with your explicit consent or another lawful basis, and we will tell you clearly at the point of collection.

4. How we use your information and our lawful basis

Under the UK GDPR we must have a lawful basis for processing your personal data. We rely on the following bases:

To perform our contract with you (delivering the loyalty programme):

  • Creating and managing your account.
  • Recording, calculating, and redeeming loyalty points and rewards.
  • Providing customer support and responding to your enquiries.

Our legitimate interests (where these are not overridden by your rights):

  • Operating, maintaining, and improving the Platform.
  • Preventing fraud and protecting the security of our systems.
  • Understanding how the Platform is used so we can improve it.

Your consent:

  • Sending you marketing communications where consent is required.
  • Using non-essential cookies and similar technologies.
  • Processing any optional or sensitive information you choose to provide.

You may withdraw your consent at any time (see Section 11).

To comply with a legal obligation:

  • Meeting our accounting, tax, regulatory, and other legal requirements.

5. Loyalty programme processing

As a loyalty platform, the core of our service involves recording your participation. This means we track points you earn and redeem, the rewards you claim, and your activity with participating businesses so that the programme can function. Where the programme involves fundraising linked to cancer-related causes, we will be transparent about how participation supports those causes and how any related data is used.

6. Marketing communications

Where you have given consent, or where otherwise permitted by law, we may send you information about rewards, offers, events, fundraising activities, and Platform updates.

You can opt out of marketing at any time by:

  • Clicking the "unsubscribe" link in any marketing email.
  • Updating your preferences in your account settings.
  • Contacting us using the details in Section 2.

Opting out of marketing will not affect service messages we need to send you about your account (for example, security alerts or changes to this policy).

7. Who we share your information with

We do not sell your personal data. We may share it with:

  • Participating businesses and partners involved in delivering loyalty rewards, limited to what is necessary for the programme to function.
  • Service providers who support our operations, such as hosting, IT, email delivery, analytics, and customer support providers. These providers act on our instructions under written agreements.
  • Payment processors, where transactions are involved.
  • Professional advisers such as accountants, auditors, and legal advisers.
  • Regulators, law enforcement, or other authorities where we are required to do so by law or to protect our rights.

Where we use third-party processors, we put contracts in place requiring them to keep your data secure and to use it only for the purposes we specify.

8. International data transfers

We aim to store and process your data within the UK or the European Economic Area (EEA) wherever possible. If we transfer your data outside the UK or EEA, we will ensure appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement (IDTA), or UK Addendum to the EU Standard Contractual Clauses.

9. Cookies and similar technologies

The Platform uses cookies and similar technologies to make it work, to remember your preferences, and to understand how it is used. Some cookies are strictly necessary for the Platform to function, while others (such as analytics and marketing cookies) require your consent.

You can manage your cookie preferences through our cookie banner or your browser settings. For full details, please see our separate club.ampthillvscancer.co.uk/cookies.

10. How long we keep your information

We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting, or reporting requirements.

  • Account and loyalty data: retained while your account is active and for [RETENTION PERIOD] after it becomes inactive or is closed.
  • Marketing data: retained until you withdraw consent.
  • Financial and transaction records: retained for 3 years to meet legal and tax obligations.

When data is no longer needed, we securely delete or anonymise it.

11. Your rights

Under the UK GDPR, you have the following rights over your personal data:

  • The right to be informed about how your data is used (this policy).
  • The right of access to a copy of the personal data we hold about you.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure ("right to be forgotten") in certain circumstances.
  • The right to restrict processing in certain circumstances.
  • The right to data portability, to receive your data in a portable format.
  • The right to object to processing based on legitimate interests or direct marketing.
  • Rights related to automated decision-making and profiling, where applicable.
  • The right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details in Section 2. We will respond within one month. There is usually no charge, although we may charge a reasonable fee or refuse a request if it is clearly unfounded or excessive.

12. How we protect your information

We take the security of your data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or alteration. These measures include [e.g. encryption, access controls, secure hosting, staff training, and regular security reviews].

While we work hard to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Children's privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children below this age without appropriate consent. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

14. Third-party links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before sharing any personal data with them.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the Platform. We encourage you to review this policy periodically.

16. How to make a complaint

If you have concerns about how we handle your personal data, please contact us first using the details in Section 2 so we can try to resolve the matter.

You also have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

17. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact:

Ampthill vs Cancer
Email: hello@ampthillvscancer.co.uk