Data Processing Addendum

Last updated: June 2026

Plain-English Summary (Non-Legal)

This summary is provided for convenience only. The PDF Data Processing Addendum linked below is the legally binding version.

  • Loopy Loyalty is operated by PassKit, Inc.

  • You remain the controller of your customer data.

  • PassKit acts as a processor and processes personal data only to provide the Service.

  • Customer data is currently hosted and processed in the United States.

  • PassKit maintains technical and organisational security controls designed to protect customer data.

  • PassKit will notify customers of qualifying personal data breaches without undue delay.

  • PassKit uses a limited number of approved sub-processors to operate the Service.

  • The DPA includes GDPR, UK GDPR, Swiss FADP and CCPA provisions where applicable.

Please read the full DPA for complete legal details.

1. Scope and Purpose

The Loopy Loyalty Data Processing Addendum ("DPA") governs how PassKit processes personal data on behalf of customers in connection with the Loopy Loyalty platform.

The DPA sets out the rights and responsibilities of both parties and incorporates appropriate data protection commitments and international transfer mechanisms where required.

2. Roles of the Parties

For the purposes of applicable data protection laws:

  • The customer acts as the data controller (or equivalent legal role).

  • PassKit acts as the data processor (or service provider) when processing personal data on the customer's behalf.

  • Loopy Loyalty is a product owned and operated by PassKit, Inc.

3. DPA Document

The complete Data Processing Addendum is available as a PDF document and includes:

  • GDPR provisions

  • UK GDPR provisionsd

  • Swiss FADP provisions

  • CCPA provisions

  • Security measures

  • Sub-processor information

  • International data transfer provisions

Download the Loopy Loyalty Data Processing Addendum (Version 2026.06 - PDF)

PassKit maintains a security programme designed to safeguard customer data and applies those controls in the operation of Loopy Loyalty.

4. Sub-Processors

Loopy Loyalty uses a limited number of carefully selected service providers to support infrastructure, communications, analytics and payment processing.

Details of current sub-processors are provided within the DPA and are updated periodically.

5. Relationship to Other Agreements

In the event of any conflict between the DPA and the Loopy Loyalty Terms of Service, the DPA shall prevail with respect to the processing of personal data.

6. Questions Us

If you have questions regarding the DPA or PassKit's data processing practices, please contact: privacy@passkit.com

For security matters or suspected security incidents: security@passkit.com