This page explains how and when your personal data is collected, processed and used when accessing dualpeaks.co.uk or any of its subdomains and using the Loyalty Tag app. Basis of all processing are the terms of the General Data Protection Regulation (GDPR).

In the following text we use

“we” for the people managing the website or in GDPR speak: the controller “you” for the users accessing the website or in GDPR speak: the data subject We're not doing anything different than any other website on the planet, but it's only fair we explain it to you.

This text was written to be short and easy to understand by someone who is not a lawyer. If you feel something is not as clear as it should be, please contact us for clarity.

Cookies are small text files stored by us inside your browser. This allows us to give your browser a short- and long-term memory.

In general, all cookies we set are necessary to provide functionality on our sites. Details on which cookies are set by DokuWiki (the wiki engine we use) are available at Cookies.

Some of the third party services we use (see below) may also set their own cookies. We explain those further down. Your browser has settings to control which cookies it accepts and for how long it stores them. How to enable cookies.

The web server hosting our site will log each page access. This log will also contain some personal data:

your IP address the referrer (where you came from) your browser identification This information is necessary for legal reasons and to analyse and prevent abuse. This allows us to keep users away who try to crash our server or to have necessary evidence in case of illegal or criminal activity.

Our wiki server logs are automatically deleted after 14 days. We will only keep log files longer when they are needed as evidence during an investigation.

Videos embedded from Youtube or other sources may track your visit.

Facebook, Twitter, Google+ Badges We invite you to join our social communities. To do so we use their social widgets on some pages. These may track you with a cookie.

The GDPR guarantees your right to information about your personal data, as well as your rights to rectification, erasure, and portability (e.g. for transferring data). Furthermore, you have a right to restriction and objection of processing your data.

Feel free to write an email to info [at] dualpeaks [dot] co [dot] uk so that we can work out how we can help you.

Of course, you also have a right to lodge a complaint with the supervisory data protection authority.

The Loyalty Tag App collects some personal data as part of its operation. This data is essential to its operation and you agree to its collection when you first log into the app. This data includes:

• Registered email address.
• Unique device and user identification tokens

No additional personal data from a device (i.e. contacts, phone number etc) are accessed or stored as part of the apps normal operation.

Data collected by the app is stored as follows:

When you register with the Loyalty Tag app, your resisted email address is stored for user access to the database. The app uses services provided by Google through the Firebase database service.

Tag id data is stored alongside plan points and/or currency value and a recovery word or phrase. The recovery word or phrase can be used by a user to recover points from a lost tag. The word/recovery phrase is not encrypted on our database and no sensitive personal information should be used. When a tag is registed with a user a tick box on the app must be ticked to indicate the user is aware of this. Ticking the box that the user is aware is taken as consent to store the recovery work/phrase with the tag data. No personally identifiable data apart from the recovery word/phrase is stored.

You have the right to delete have your personal data deleted from the Loyalty Tag app and databases at any time. Accounts can be deleted from within the app (menu - Delete Account) at any time. Accounts can also be deleted by sending an email to info [@] dualpeaks.co.uk from the address registered to the account you wish to delete. Set the subject line to ‘DELETE DATA’ and we will delete your data typically within 1-2 weeks of receiving your request.