Loyalty Program Privacy Notice
Last updated: 13 June 2026
Who we are
Elif Mart is the data controller responsible for your personal data in connection with this loyalty program.
Email: info@elifmart.fi
What we collect
When you sign up:
- Required: your phone number and name.
- Optional: your age range, nationality, and gender.
When you give your phone number to the cashier at checkout, we also record your purchase amount, date, receipt number, and the resulting discount ("reward") history, linked to your phone number.
If you use the sign-up form, we also record the IP address the request came from, for security and fraud-prevention purposes.
This program is open to customers of all ages. If you are under 18, please make sure a parent or guardian is aware that you've signed up — they can exercise any of the rights below on your behalf.
Why we use your data and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Operating the loyalty program: tracking spend, calculating and applying discounts, and managing your account | Phone number, name, purchase history, reward history | Necessary to provide the loyalty program under the terms you agree to at sign-up |
| Understanding our customer base (e.g. age, nationality, or gender breakdowns) | Age range, nationality, gender | Your consent — these fields are optional, and you can ask us to delete this information at any time without affecting your loyalty membership |
| Security, fraud prevention, and keeping a record of changes to your account | IP address, account change history | Our legitimate interest in keeping the system secure and accountable |
If you choose not to provide your phone number and name, you cannot join the loyalty program, but you can continue to shop with us as normal.
Who we share data with
It may be processed by our hosting provider and point-of-sale system, under data processing agreements.
How long we keep your data
We keep your account, purchase, and reward data for as long as you have made a purchase within the last 2 years. If you have no purchases recorded for 2 years, your account and associated purchase and reward records are automatically and permanently deleted.
Records of changes made to your account (such as updates to your name or details) and security logs are kept for accountability purposes for up to 3 years, after which they are deleted.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to any legal obligation we have to retain certain records.
- Restrict or object to certain processing, particularly processing based on our legitimate interests.
- Withdraw consent at any time for processing based on consent (your age, nationality, and gender), without affecting the lawfulness of processing before withdrawal.
- Receive a copy of your data in a portable format, where technically feasible.
To exercise any of these rights, contact us at info@elifmart.fi. We will respond within one month. We may need to verify your identity (e.g. by confirming your phone number) before acting on your request.
Complaints
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Finnish Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi), or with the supervisory authority in your country of residence.