Privacy notice

Who is responsible

Bonuscard Sverige AB (org. no. 559173-4206), Linjalvägen 3, 187 66 Täby, Sweden, is the data controller for the personal data described here. Questions about privacy go to info@bonuscard.com.

What this notice covers

Only this website. The Bonuscard app and the member program — your purchases, stamp cards and benefits — are governed by their own terms and privacy policy.

The contact form

When you use the form on the business page, we receive what you type into it: your name, email address, company, the kind of business you represent and your message.

We use it for one thing: to reply to you. The legal basis is our legitimate interest in answering inquiries from businesses that contact us and, where you ask about becoming a partner, the steps needed before entering into an agreement.

The form is delivered as an email from our own servers to a Bonuscard mailbox. The email is sent through Amazon Web Services (Amazon SES) from a data centre in Ireland. We keep your message for as long as we are in contact with you, and for up to 24 months after our last exchange.

Bot protection

The form is protected by Cloudflare Turnstile, which checks that the submission comes from a person rather than a script. To do that, Cloudflare processes your IP address and technical signals from your browser, and may store a cookie for the check. Turnstile is not used to track you across websites.

Hosting and visitor statistics

The website is served by Cloudflare. Like any web server, Cloudflare logs the IP address, the page requested and basic browser details of each request in order to deliver the page and keep the service secure. Cloudflare keeps these logs for a short period.

We use Cloudflare Web Analytics to see how many people visit which pages. It sets no cookies, builds no profile of you and does not follow you to other websites; we only see aggregated counts.

Content loaded from other services

The map on the store finder fetches its map tiles from OpenStreetMap, which means your browser sends your IP address to them when the map loads. They receive nothing you type.

Links to the App Store, Google Play and other websites lead to services with their own privacy policies.

Transfers outside the EU/EEA

Cloudflare is based in the United States. Where personal data is transferred there, it is done under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You can ask us what personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, and object to our use of it. Email info@bonuscard.com and we will get back to you.

If you think we are handling your personal data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or to the supervisory authority in your own country.

Changes

We update this notice when the website changes what it collects. The date at the top shows when it was last revised.