Who is responsible
Ino Loyalty is a loyalty service by Tryino, İstanbul, Türkiye. For the store's loyalty program, the merchant is the data controller and Tryino processes data on the merchant's behalf, under the merchant's Ino Loyalty agreement. Shoppers who have questions about their data should contact the store first.
What the app accesses in the Shopify store
- Orders: to award points and settle them on returns and cancellations.
- Customers (name, e-mail, phone, marketing consent): to recognise members and keep both systems in step.
- Products and discounts: to calculate rewards and apply member benefits in the cart.
- Store credit: only if the merchant turns on points-to-store-credit.
The app does not access payment card data or customer addresses.
What we process about shoppers
When a shopper joins the program: name, e-mail, mobile phone and contact permissions (each with the time it was given), and the points, tier, vouchers and activity that result from their orders. The phone number can be verified with a one-time SMS code.
How we use it
Only to run the merchant's loyalty program: earning and spending points, tiers, member offers, Apple Wallet cards and the communications the shopper agreed to. We do not sell personal data or use it for our own advertising.
Retention and deletion
Data is kept for as long as the merchant runs the program or until the shopper asks for deletion. Financial records of points are kept as long as the law requires, without the shopper's identity once they are erased. Technical records are short-lived: pending sign-up links 30 days, data-request reports 60 days.
When the merchant uninstalls the app, Shopify asks us to delete the store's data (shop/redact) and we do so within 48 hours, except records the merchant's Ino Loyalty agreement or the law requires us to keep. Shopper requests for access or deletion that reach Shopify are forwarded to us (customers/data_request, customers/redact) and we fulfil them.
Shoppers’ rights
Shoppers can ask the store for access to, correction of or deletion of their data, and can change their contact permissions on the Rewards page at any time. We help the merchant answer within the legal deadline (30 days under KVKK).
Security
Encryption in transit and at rest, access control with multi-factor authentication and audit logs of administrative actions.
Contact
[email protected] · Support: tryino.com/support. Our general privacy policy covers tryino.com itself.