Loyenta personal data policy

Effective October 30, 2026

This is an English translation. The Spanish version governs.

1. Who is responsible

Loyenta is a digital loyalty platform by BUILDEV S A S ("BUILDEV"). This policy complies with Colombian Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015).

• Company: BUILDEV S A S
• Tax ID (NIT): 901.978.605
• Registered office: Cali, Valle del Cauca, Colombia
• Address: Avenida 6A # 46-28
• Phone: +57 318 379 7890
• Personal data email: soporte@buildev.co

2. Where we are controller and where we are processor

• Controller: BUILDEV decides on the data of business owners and dashboard users, and of the contacts of companies that integrate Loyenta (platforms or partners).
• Processor: the data of each business's customers (the people with a stamp card) is that business's responsibility. BUILDEV processes it only on the business's behalf and following its instructions. If you are a customer of a business, you can exercise your rights with them or write to us and we will pass your request on.

3. What data we process

• Business owners and dashboard users: name, email, trade name and, if provided, the business's legal name and tax ID.
• Platforms (partners): company name and contact email.
• Customers of businesses: name, mobile number, email, stamps, rewards and redemptions, and proof of their consent (date, version of the accepted text, channel and IP address).

We do not collect sensitive data. The service is not aimed at minors; if a business enrolls a minor, it must have the consent of their legal guardian.

4. What we use it for

• Providing the service: creating and updating stamp cards, awarding stamps and rewards, and showing them on the web card and in Google Wallet.
• Managing business and platform accounts and sending service emails (invitations and sign-in codes).
• Support, security and audit logs.
• Billing, where applicable.

Loyenta does not send advertising to businesses' customers. If a business wants to send marketing messages in the future, it may only do so to people who expressly agree.

5. Your rights

As a data subject you can: access, update and correct your data; request proof of the consent you gave; be told how it is used; withdraw consent or request deletion when there is no legal or contractual duty to keep it; access it free of charge; and file complaints with Colombia's Superintendence of Industry and Commerce (SIC) after first going through our process.

6. How to exercise them

Write to soporte@buildev.co with your name, ID, your request and how to reach you. If you are a customer of a business, tell us which one.

• Inquiries: we reply within 10 business days, extendable by 5 more with notice of the reason.
• Claims (correction, update, deletion or breach): we reply within 15 business days, extendable by 8 more with notice of the reason. If a claim is incomplete, we will ask for what is missing.

7. Providers and international transfers

We use these providers, which process data on our behalf:

8. How long we keep it

While the account or loyalty program is active and, afterwards, as long as needed to meet legal obligations or resolve claims. The data of a business's customers is kept, exported or deleted following that business's instructions and the terms of service.

9. Security

We use encrypted connections (HTTPS), one-time codes to sign in to the dashboard, API keys stored only as hashes, separation of each business's data, and backups.

10. Cookies

This site only uses technical cookies: the dashboard and developer portal sessions, and your language choice. We do not use analytics or advertising cookies.

11. Changes

If we change this policy substantially, we will publish it here and email registered businesses and platforms before the change applies.

12. Effective date

This policy is effective from October 30, 2026. The databases will remain in place for as long as the service is provided.