Privacy Notice

Stamply ("the Controller"), based in Mexico City, Mexico, is responsible for processing the personal data you provide through the Stamply digital loyalty platform, accessible via QR codes placed at participating businesses.

For any matter related to this Notice or to exercise your rights, contact us at: privacidad@stamply.mx

To enroll you in the loyalty program of the business you visited, we collect only:

• Name or nickname — to personalize your loyalty card in Apple Wallet or Google Wallet.
• WhatsApp number — to uniquely link your loyalty card. The hash prevents duplicates and, with your v2 consent, the E.164 number is also stored encrypted for the additional purposes described below. It is never shown in plain text in the interface.
• Visit timestamps and program location — to count your visits within the loyalty program.

We do not collect sensitive data such as racial origin, health status, biometric data, religious beliefs, or genetic information.

Your data is used for the following necessary purposes:

1. Creating and delivering your digital loyalty card to Apple Wallet or Google Wallet via Passcreator.
2. Recording and counting your visits toward your reward.
3. Updating the visit counter shown on your Wallet card.
4. Identifying whether you already have an active card to avoid duplicates.

We do not use your data for third-party advertising or commercial profiling unrelated to the loyalty program.

With the express consent for this version 2, your WhatsApp number is retained in encrypted form so the participating business can download a customer export containing consented contacts. Re-engagement communications are not active in this version and require the applicable additional approvals and notices.

No transfer has third-party marketing purposes. Your consent to international transfers (LFPDPPP Art. 36) and to the export described in this version is recorded when you accept this Notice. Stamply does not send re-engagement messages in this version.

You have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (ARCO rights, Chapter IV LFPDPPP).

1. Send an email to privacidad@stamply.mx with subject "ARCO Request".
2. Include your full name and the WhatsApp number linked to your card.
3. Describe the right you wish to exercise and the affected data.

We will respond within a maximum of 20 business days (LFPDPPP Art. 24). Cancellation deletes your account and your Wallet card will stop working.

You may revoke your consent at any time by emailing privacidad@stamply.mx with subject "Consent Revocation". Revocation does not affect processing already lawfully carried out.

Your data will be retained while you have an active loyalty card and for 3 additional years from your last recorded visit. After that period, your data will be permanently deleted.

The registration page does not use tracking cookies, third-party pixels, or behavioral tracking. Only your IP address is temporarily logged (maximum 60 minutes) to prevent abuse.

Any material changes will be communicated by publishing an updated version at this URL before changes take effect.

Current version: v2 · August 22, 2026. This version requires legal review before publication or use for real customer enrollment.

If you believe your right to data protection has been violated, you may contact Mexico's INAI: home.inai.org.mx