Privacy
Privacy notice
Usual (usualcards.com) is a service by Synco, provided by Bruno Sancho Deltell, Apartment G02, 53 Mayor Street Upper, Dublin 1, Ireland. This notice explains what personal data Usual handles, why, for how long and what your rights are. Questions: hello@usualcards.com.
If you visit this website or ask for a preview
What we keep: your business name, your email, any website or profile you choose to share, the card you design (type of business, colour and reward), your language, the page or link you came from and the date of the request.
Why: to reply to you and prepare your card preview. We don't add you to a marketing list and we don't sell your details.
Legal basis: the steps you ask us to take before a possible contract, and our legitimate interest in answering business enquiries.
How long: up to 12 months after our last contact, unless you start using Usual. You can ask us to delete it sooner.
Our servers keep short-lived technical logs of requests so the service works and stays secure.
If your business uses Usual
What we keep: the email and password you use to open your panel (the password is only stored as a one-way hash), your business details and card design, the names you give your counter phones and when each was last used, and your card's activity: stamps and rewards.
Why and legal basis: to provide the service you sign up for.
How long: while you use Usual. If you leave, we delete your business data within 90 days, except what the law requires us to keep, such as invoices.
For your customers' data, Usual acts as your processor under our data processing terms.
If you have a loyalty card from a business that uses Usual
The business where you joined is responsible for your data (the controller). Usual handles it on their behalf (as a processor), only to run their loyalty card.
What we keep:
- the name you type when you join;
- your card number;
- the date and time of each stamp and each reward;
- if you save the card to Apple Wallet, an identifier from your iPhone so the card can update itself;
- if you save it to Google Wallet, Google stores the card's name, stamps and number in your Google account.
What we never ask for or keep: no email, no phone number, no payment details and no location. The reminder when you walk past the shop is worked out by your own phone; your location never reaches us.
Why: so the card you asked for works: adding stamps, telling you about your rewards and showing the business's news on the card.
How long: while the card is active. If you ask the shop to delete your data, your name is removed at once and everything else within an hour.
Your rights: ask in the shop, or email hello@usualcards.com and we'll sort it out with the business.
Cookies
Usual only uses the cookies it needs to work. We don't use advertising, analytics or tracking cookies, which is why we don't ask you to accept any.
| Cookie | What it does | How long |
|---|---|---|
usual_preview_form, usual_preview_receipt | Protect the preview form and show its confirmation | 1 hour |
usual_lang | Remembers the language you picked with the EN/ES switch. Only set if you use it | 1 year |
usual_card_… | This browser remembers your card, so scanning the shop's QR again opens yours | Up to 400 days |
usual_owner | Keeps a business owner signed in to their panel | 90 days, renewed when used |
usual_counter | Keeps a counter phone linked | 400 days, renewed when used |
sw_admin, usual_req_seen, usual_showcase, sw_demo_… | Only for the Usual team and demo links | 7 days to 1 year |
The owner panel remembers in your browser whether you closed the “Install app” tip. Fonts are served from usualcards.com, not from Google. If you haven't picked a language, the home page uses your browser's language. The short links usualcards.com/ig and usualcards.com/li only count visits per day, with no cookies and no personal data.
Who helps us run the service
- OVH: the servers Usual runs on, and their backups.
- Cloudflare: our domain and the forwarding of email sent to hello@usualcards.com.
- Apple: tells your iPhone that an Apple Wallet card has changed. The notification carries no personal data.
- Google: Google Wallet, for cards saved there.
Apple, Google and Cloudflare may process data outside the European Economic Area. They do so under the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
Security
Everything travels encrypted (HTTPS). Passwords and private links are stored encrypted. Each counter phone has its own link and can be turned off at once. We take a daily backup and keep it for 14 days.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to take a copy with you. Email hello@usualcards.com and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Irish Data Protection Commission, the Spanish Data Protection Agency (AEPD) or the authority where you live.
Changes
If we change this notice, we'll publish it here with a new date. If you have a card, see also our cardholder help.