Privacy Policy

Who we are

Walaa (mywalaa.com) provides digital loyalty cards and gift cards to businesses ("merchants"). This policy explains what personal data is collected when you join a merchant's card, and when a merchant uses Walaa.

For customer cards, the merchant decides what the card is for and is the data controller. Walaa processes that data on the merchant's behalf. For merchant accounts, Walaa is the controller.

What we collect from card holders

Your name, mobile number and, if you choose, your birthday. Each visit, stamp, point, reward and gift card amount recorded on your card, with the date and the staff member who recorded it. If you add the card to Apple Wallet or Google Wallet, a device identifier that lets us update the card.

What we collect from merchants

Business name and branding, staff names and email addresses, hashed passwords, invoices and payment status.

Why we use it

To issue and run your card, show your balance, let the merchant recognise you at the counter and give you rewards, send your card or gift card to you when you ask, and keep records of transactions. We do not sell personal data and we do not use it for advertising.

Who can see it

The merchant whose card you joined, and their staff. Each merchant only sees its own customers. Walaa staff, only to provide support or fix problems. Our hosting provider (Hostinger, servers in Malaysia) stores the data for us. Apple or Google, only if you add the card to their wallet.

How long we keep it

While your card is active. If you ask us to delete it, or a merchant closes its account, we delete or anonymise the data within 30 days, except records we must keep by law. Backups are kept for up to 14 days.

Security

Data is sent over HTTPS, passwords are stored hashed, each merchant's data is kept separate, and the database is backed up daily.

Your rights

You can ask to see the data held about you, correct it, or delete it, and you can withdraw consent at any time. Ask the merchant, or contact us and we will pass it on: atmatabusiness@gmail.com.

Changes

If we change this policy we will update this page and the date above.