1. Who we are
FanzoPay is a product of Pocharis Technologies Ltd, a company registered in the United Kingdom ("we", "us", "our"). We operate the FanzoPay mobile application and website, and we are the data controller for the personal data described in this policy. We provide a cashback loyalty platform connecting customers with local businesses in the United Kingdom.
If you have any questions about this policy, contact us at hello@fanzopay.com or by phone on +44 7438 754760.
2. What information we collect
From customers:
- Name and email address (used for account registration and authentication)
- QR scan activity and cashback credit balances
- Voucher and redemption history
- Referral activity
- Partner programme activity — businesses you refer, and the payment details you provide to receive partner withdrawals
- Device information and app usage data
From businesses:
- Business name, address, postcode and category
- Owner email address (used for registration and authentication) and optional contact phone number
- Cashback rate and programme settings
- Payment and billing information (processed via Stripe)
- Dashboard activity and analytics data
3. How we use your information
- To create and manage your account
- To process cashback earnings, voucher redemptions and referral rewards
- To operate the Partner programme — verifying qualifying business referrals and paying partner rewards you have earned
- To connect customers with participating local businesses
- To send you service notifications (e.g. credit earned, voucher expiry)
- To process payments and subscriptions for businesses
- To display your business on the customer map
- To generate analytics and dashboards for business owners
- To comply with legal obligations
- To detect and prevent fraud or abuse
4. Legal basis for processing (UK GDPR)
- Contract performance — processing necessary to deliver the FanzoPay service you have signed up for
- Legitimate interests — analytics, fraud prevention and service improvement
- Legal obligation — where we are required to retain or disclose data by law
- Consent — for any marketing communications (you can withdraw at any time)
5. Data sharing
We do not sell your personal data. We share data only with:
- Stripe — for payment processing and subscription billing (businesses only)
- Payment providers — where necessary to pay partner programme rewards you have requested to withdraw
- Cloud infrastructure providers — for hosting and data storage, within the UK/EEA
- Law enforcement or regulators — where required by law
Business names, categories, addresses and cashback rates are visible to customers on the app map.
6. Data retention
We retain your data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g. billing records for up to 7 years).
For business accounts that become inactive (subscription lapsed with no renewal), we will permanently delete the account and all associated personal data — including customer relationships, transaction history, and staff records linked to that business — after 90 days of inactivity. You will receive a reminder before deletion occurs. Anonymised, non-personal transaction aggregates may be retained for internal analytics and accounting purposes.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten") — see Deleting your account below
- Object to or restrict certain processing
- Data portability
- Withdraw consent at any time (where processing is consent-based)
To exercise any of these rights, contact us at hello@fanzopay.com.
8. Deleting your account
You can delete your FanzoPay account at any time, either from inside the app or by contacting us. This applies to customer accounts and business accounts alike.
In the app: open the More tab, choose Profile, then tap Delete account and confirm.
Without the app: email hello@fanzopay.com from the email address registered to your account, with the subject line "Delete my account". We will confirm the request with you and schedule the deletion in exactly the same way.
What happens next:
- Your account is scheduled for deletion 30 days after the request, and we email you to confirm. During those 30 days you can change your mind by opening the app and tapping the notice at the top of your dashboard.
- For business accounts, no new cashback can be issued during the 30 days, but customers can still redeem balances they already hold, and any subscription is set to end at the close of its current billing period rather than renew.
- At the end of the 30 days your personal data is deleted or irreversibly anonymised: your name, email address and phone number, your cashback balances and voucher history, and for businesses the business profile, staff records and transaction history.
- We keep only what we are legally required to keep: billing and invoice records for up to 7 years, and anonymised, non-personal aggregates that cannot be linked back to you.
9. Security
We implement industry-standard security measures including encrypted data transmission (TLS), hashed credentials, and access controls. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your data.
10. Children
FanzoPay is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via the app or email. Continued use of FanzoPay after changes are posted constitutes acceptance of the updated policy.
12. Contact us
If you have questions, concerns or requests regarding your privacy, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.