Rewards infrastructure for AfricaThe short version: we use personal information to operate RibiRewards, deliver and redeem rewards, fulfil orders and experiences, run programmes, prevent fraud, support customers, improve our services and meet legal obligations. We do not sell personal information.
1. Scope
This Privacy Policy applies when you visit RibiRewards websites, contact us, use our dashboards, APIs or integrations, participate in a programme powered by RibiRewards, receive or redeem a reward, place an order, request an experience, interact with our support team, or otherwise use a RibiRewards service.
Our services can support employee and customer rewards, sales and channel incentives, consumer and trade promotions, loyalty programmes, research incentives, events, gift cards, merchandise, dining and experiences, sourcing, fulfilment and embedded reward journeys. A business that runs a programme through RibiRewards may have its own privacy notice as well.
2. Information we collect
Depending on how you interact with us, we may process identity and contact information; business and account details; recipient information supplied by a programme sponsor; reward, campaign, order, redemption and fulfilment records; delivery information; experience preferences and booking details; support communications; payment and transaction references; device, log and usage information; and information you choose to provide in forms or enquiries.
We may receive information directly from you, from the organisation running your programme, from an integration partner, or from suppliers involved in delivering a reward. We ask programme sponsors to provide only the information necessary for the relevant programme.
3. How we use information
We use information to create and administer accounts; validate programme eligibility; issue, deliver and redeem rewards; process orders; coordinate physical fulfilment, dining, travel or other experiences; operate APIs and integrations; communicate programme and service messages; provide support; reconcile transactions; detect misuse and fraud; secure our services; measure service performance; improve our products; respond to enquiries; and comply with legal, tax, accounting and regulatory requirements.
Where required by applicable law, our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations and consent. We use consent where the law requires it, including for certain marketing or optional tracking activities.
4. Our role in processing
Our privacy role depends on the service. For information we collect to operate our own websites, accounts, sales, security and business operations, RibiRewards generally determines why and how that information is processed. When a client or platform sends recipient information to us solely so that we can deliver its programme, RibiRewards may process that information on the client's instructions. Contractual data-protection terms may further define these roles.
5. Sharing and service providers
We may share the minimum information necessary with hosting, communications, analytics, payment, fraud-prevention and customer-support providers, as well as reward suppliers, merchants, fulfilment partners, couriers, experience providers and other vendors needed to complete the service requested. We may also disclose information where required by law, to protect rights or security, or as part of a corporate transaction subject to appropriate safeguards.
We do not sell personal information. We do not permit service providers to use programme recipient information for their own unrelated marketing merely because they process it for RibiRewards.
6. International transfers
RibiRewards supports programmes across multiple countries. Information may therefore be processed in a country different from the one in which it was collected. Where applicable law requires safeguards for international transfers, we use appropriate contractual, organisational or other recognised safeguards.
7. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including programme delivery, reconciliation, support, security, dispute handling and legal, tax or accounting obligations. Retention periods vary by record type and contractual requirements. We may retain de-identified or aggregated information where it can no longer reasonably identify an individual.
8. Security
We use administrative, technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse or alteration. No internet service can guarantee absolute security, so we continually review controls in proportion to the nature of the service and information processed.
9. Your rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of or portability of personal information, to object to certain processing, or to withdraw consent. You may also have the right to complain to your local data-protection authority.
If your information was supplied to us by an employer, client or programme sponsor, we may need to refer a request to that organisation or coordinate with it. To make a privacy request, email support@ribirewards.com. We may need to verify your identity before completing a request.
10. Cookies and analytics
Our websites may use essential cookies and similar technologies needed for security and functionality, plus analytics or other optional technologies where permitted. Where required, you can manage optional cookies through the consent controls presented on the website. Browser settings may also allow you to block or delete cookies.
11. Children
RibiRewards services are intended for businesses and programme participants and are not directed to children unless a specific programme is lawfully designed for them with appropriate authorisation and safeguards. If you believe a child's information has been provided to us improperly, contact us.
12. Changes
We may update this Privacy Policy as our services, legal requirements or practices change. We will publish the current version here and update the effective date. Where required, we will provide additional notice of material changes.
13. Contact us
For privacy questions or rights requests, contact support@ribirewards.com. For general service support, contact support@ribirewards.com.
This policy should be read together with the RibiRewards Terms and Conditions and any programme-specific notice or agreement that applies to your use of the service.