Legal
How we handle your information
Last updated: 2026-08-30
You have just received — or are about to receive — a digital loyalty card in your mobile wallet. This page explains what we store about you, why, and how to get rid of it again.
In short
- You get your card with a confirmed email address. You enter your email, you get a code, and then the card is yours. That is how the card can be found again if you lose your phone.
- The café gets your first name and your email address, because you are joining that café’s loyalty programme. That is part of the agreement — not advertising. You say so separately if you also want news and offers.
- The café can see your stamps and your visits. That is the whole point of a stamp card.
- We do not sell your information. To anyone. Ever.
- You can remove the card from Wallet at any time, and ask us to delete your information at any time.
Who is responsible for your information?
The café where you got the card is the data controller. The café decides that there should be a loyalty programme, and what gets sent to you.
Klipz is the data processor. We provide the technology to the café and handle your information on the café's instructions. We do not use it for our own purposes.
The café's name and contact details are on the back of your card in Wallet. You can always write to us at privacy@klipz.dk and we will pass your request to the right café.
One exception, which we state because it is true: we also measure how the service itself is used — how many people open a sign-up page, and how many complete it — so we can make the product better. For exactly that, Klipz is itself the data controller. Those measurements are not linked to your name or your email.
What do we store?
Always — otherwise the card does not work:
| What | Why |
|---|---|
| First name | So the café knows who is holding the card |
| Email address (confirmed) | So your card is tied to you and can be found again — and so the café can recognise you |
| A card number and an internal customer id | So the café recognises your card when it is scanned |
| How many stamps or clips you have, and when you got them | So you get the reward you have saved up for |
| When the card was issued, installed and possibly removed | So the card can be updated in your Wallet |
| Language choice (Danish or English) | So the card is in your language |
| A technical code from your phone | So the card can update itself when you get a stamp |
Only if you give it to us:
| What | Why |
|---|---|
| Birthday (day and month) | So the café can give you a birthday treat. We never ask for your birth year. |
We never ask for your civil registration number, your health information or your payment card details.
What we use it for — and on what legal basis
- To issue the card to you and tie it to your account. Your email address and your first name are processed so that we can deliver a card that belongs to you and can be restored. The basis is the agreement you enter into with the café (art. 6(1)(b)).
- To provide the card and count your stamps. The basis is the agreement you enter into with the café when you take the card (art. 6(1)(b)).
- To send you the café’s offers. Only if you actively said yes. The basis is your consent (art. 6(1)(a), and section 10 of the Danish Marketing Practices Act).
- To protect against abuse — for example the same card being stamped ten times in a minute. The basis is the café’s legitimate interest in a loyalty programme that cannot be gamed (art. 6(1)(f)).
About consent to marketing
- You say yes by ticking the box yourself and confirming your email address. There are no pre-ticked boxes, and we send nothing until the address is confirmed.
- Your consent applies to the café you gave it to — not to other cafés.
- You can withdraw it at any time, free of charge, using the unsubscribe link at the bottom of every email. It takes effect immediately, and you keep your stamp card.
Who gets to see your information?
The café where you got the card. Not other cafés — even if you hold cards at several.
Beyond that, our suppliers, who work solely on our behalf and under contract. The full list is on sub-processors.
We do not resell your information, and we do not use it for third-party advertising.
How long do we keep it?
- Your card and your stamps: 24 months after your most recent visit to the café. You can always ask us to delete them sooner.
- Your email address in a sent campaign: 90 days, after which only the statistics are kept.
- Documentation of your consent: at least 24 months after you unsubscribe, so the café can prove the consent was valid.
- If you remove the card from Wallet, the technical link to your phone is deleted.
Your rights
You have the right to:
- see what information we hold about you,
- have anything incorrect corrected,
- have your information deleted,
- receive your information in a format you can take elsewhere,
- object to the processing,
- withdraw your consent to marketing, at any time.
How: write to privacy@klipz.dk with the card number from the back of your card. We reply within one month. If the request is complex we may extend that by up to two further months — in that case we tell you within the first month, and why.
Complaints: you can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, dt@datatilsynet.dk, www.datatilsynet.dk. The complaint is directed at the café as controller, but do write to us first — it is usually faster.
Your card and your rewards
Your stamp card and any reward are provided by the café, not by Klipz — the café sets the reward and honours it in store. Stamps and rewards have no cash value.
Klipz provides the technology and develops it over time. We aim to keep the service available but cannot guarantee uninterrupted access.
Children
The service is not aimed at children under 15. If you are under 15, your parent must agree before you give us an email address.
Changes
If we change this page materially we will say so here and — if you have given us your email address — by email. The date at the top shows when it last changed.