Privacy Policy

HamFam Rewards ("we," "our," or "us") operates a rewards platform that lets you scan QR codes to earn points and redeem those points for reward cards. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services (the "Service").

By creating an account or using the Service, you consent to the practices described in this policy.

We collect information you provide directly and information gathered automatically:

• Account information: your name, email address, and password (stored securely and never in plain text).
• Profile information: display name and profile photo you choose to add.
• Activity data: reward codes you redeem, points earned, and store orders you place, including shipping address.
• Usage data: device, browser, and interaction data collected automatically when you use the Service.

We use your information to:

• Create and manage your account and authenticate you.
• Award points when you redeem reward codes and process store redemptions.
• Fulfill and ship store orders you place.
• Send you service-related emails such as order confirmations and account notices.
• Maintain the security, integrity, and reliability of the Service.
• Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information. We may share data with service providers who help us operate the platform (such as hosting and email delivery), with shipping partners to fulfill your orders, and with authorities when required by law or to protect our rights.

We retain your account and activity data for as long as your account is active. You may request deletion of your account at any time from your profile settings, which removes your personal information and order history. Certain records may be retained to comply with legal or accounting requirements.

We use essential cookies and similar technologies to keep you logged in and ensure the Service functions correctly. We do not use your data for cross-context advertising.

We apply reasonable technical and organizational measures to protect your information, including encrypted authentication and access controls. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

You may access, update, or delete your personal information through your profile, and you may request export or correction of your data. If you are located in a region with specific data protection rights (such as the EU, UK, or certain U.S. states), you may exercise those rights as provided by applicable law.

The Service is not directed to children under 13 (or the applicable minimum age in your region), and we do not knowingly collect their information. If you believe a child has provided us data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Service and update the "Last updated" date above.