Data Processing Agreement

Last updated October 23, 2026

What this is

When your customers add your card, they share some info with you. Regulars stores and uses that info for you, to run your card. This agreement says how we do that. It is part of our Terms of Service. You agree to it when you tick the box at sign-up.

In this agreement, "you" means the business that uses Regulars. "We" means 1001039001 Ontario Inc., operating as Regulars.

Who is in charge of the info

• You are in charge. The customer info belongs to your business. You decide what to ask for and how to use it.
• We work for you. We only use your customers' info to run Regulars for you, and to follow the law.
• We never sell it. We never use it for our own ads. We never share it with another business on Regulars.

What info this covers

• Your customers' first names, and any email, phone number or birthday you choose to ask for.
• Their visits, stamps, points and rewards.
• Whether they said yes to your messages, and when.
• Which phone wallet their card is in.
• Your team's names, emails and sign-in details.

Your part

• Only ask customers for what you need.
• Follow the privacy and anti-spam laws where you do business. In Canada that includes PIPEDA and CASL. In Quebec it includes Law 25.
• Only send messages to customers who said yes.
• Keep your sign-in links and staff PINs private.

Our part

• Follow your settings and what you do in the dashboard.
• Keep the info safe. Data is encrypted when it moves over the internet. Secret codes on each card are encrypted when stored. Only people who need access to run Regulars get it.
• Make sure everyone who works on Regulars keeps the info private.
• Help you answer customers who ask to see, fix or delete their info.
• Tell you if someone gets into your data who should not. We will tell you as soon as we can, and within 72 hours of knowing.

Companies that help us

We use a few trusted companies to run Regulars. Each one only gets what it needs for its job, and must keep it safe.

• Cloudflare hosts the service and stores the data.
• Apple and Google deliver cards and card updates to phone wallets.
• Resend and Google Workspace send and receive email.
• Google Maps helps you find your shop's address. It gets your shop's address, not your customers' info.
• Stripe takes payments from businesses. It does not get your customers' info.

Some of these companies store data outside Canada, including in the United States. If we add or change one of these companies, we will update this page and email you first if the change is big.

Customer requests

• Each card has a "Your data" link on the back. Customers can see their info there, change their message choice, pause messages, or delete their info.
• You can also delete a customer in your dashboard. Their name and contact details are wiped, and their card stops working. Visit counts stay, with no name attached.
• If a customer asks us directly, we send them to you, or help you answer.

When you leave

You can ask for a copy of your customer list within 30 days after your account closes. After that, we delete your customers' info within 30 days. We may keep basic records longer if the law says we must.

Checks

You can ask us how we keep your data safe, and we will answer in writing. If the law gives you the right to check further, we will help in a fair way.

Changes

If we change this agreement, we will update the date at the top. If a change is big, we will email you before it takes effect.

Contact

Email hello@walletregulars.com.