DigiCard Cardholder Terms & Privacy Notice (Version 1.0)

DigiCard is operated by Anteriore Inc., Unit L2 L17-08, Philippine Stock Exchange Tower, 5th Ave. corner 28th St., Bonifacio Global City, Fort Bonifacio, Taguig City, Metro Manila, Philippines (“DigiCard,” “we,” or “us”). We provide technology that lets the business identified on the signup form through which you request your card (“Merchant”) issue and manage a loyalty card in Apple Wallet or Google Wallet.

Before we issue your card, you must confirm that you are at least 18 and actively accept these Terms. Part B explains how your information is handled. Acceptance of these Terms is not blanket consent to optional or unrelated uses of your information.

The Merchant operates the loyalty program and sets its rules for earning, redeeming, transferring and expiring points or rewards, eligible branches and program closure. Those rules govern your rewards; these Terms govern your use of DigiCard. The Merchant cannot change our obligations or make promises on our behalf without our agreement.

The Merchant is responsible for its goods, services, reward availability, transaction instructions, offers and redemption arrangements. DigiCard does not offer, fund, owe, guarantee or redeem the Merchant’s rewards. Direct reward or purchase complaints to the Merchant using the contact details provided on the signup page or card.

Merchant notifications are created or selected and initiated by the Merchant. DigiCard supplies the delivery technology and does not endorse the offer or represent the Merchant. Our own responsibilities remain subject to Section 6.

You may use DigiCard’s supported card functions for your personal participation in the Merchant’s program, subject to these Terms and the applicable Apple or Google terms. DigiCard and its licensors retain ownership of their technology; the Merchant retains its branding. You need a compatible device and wallet. Your network provider’s charges may apply.

Provide accurate information. Do not manipulate activity or rewards, impersonate another person, access another person’s card without permission, or interfere with the service. Protect your device, card code and installation link from unauthorized use. Sharing or transferring rewards is governed by the Merchant’s rules and supported product functions.

Tell the Merchant promptly if your phone or card is lost, you suspect unauthorized use, or a balance appears incorrect. It may need information to verify your identity and activity. Replacement, recovery and correction depend on available records and supported functions; these Terms do not promise automatic restoration.

We may restrict DigiCard functions where reasonably necessary to investigate misuse, address security risks or comply with law. If you believe a restriction is mistaken, contact support@digicard.tech. If you are under 18 or believe an under-18 person has obtained a card, contact that address so we can review eligibility and the appropriate handling of the data with the Merchant.

Maintenance, defects, devices, networks, and Apple or Google services may interrupt card functions. We do not promise uninterrupted or error-free operation. We may develop, change or retire features, with reasonable notice of a material reduction where practicable.

If the Merchant pauses or stops using DigiCard, updates, earning records and other DigiCard-powered functions may stop. A displayed balance may then be out of date. The Merchant remains responsible for explaining how it will handle outstanding rewards outside DigiCard. Its departure does not, by itself, cancel rights you have against it.

DigiCard will not revoke a saved wallet card merely because the Merchant pauses or leaves. Wallet visibility, expiry display and removal are controlled by the wallet platform and your settings. A visible card does not guarantee a valid reward; an expired or hidden card is not necessarily deleted.

Contact the Merchant for reward, purchase and redemption matters. For suspected DigiCard technical issues, contact support@digicard.tech with the Merchant’s name and a description of the issue. We may investigate or route it through the Merchant’s support process, without a guaranteed response or resolution time.

Privacy requests are addressed in Part B. We encourage good-faith discussion of complaints, but this does not prevent you from seeking urgent relief or using any complaint process or remedy available under applicable law.

To the extent permitted by law, DigiCard is not responsible for the Merchant’s reward promises, goods, services, communications or acts, or for failures of devices, networks or third-party services outside our reasonable control. These exclusions do not excuse a failure to meet our own obligations to the extent we are legally responsible.

To the extent permitted by law, DigiCard is not liable for lost profits, lost opportunities, or indirect, incidental, special or consequential loss. Nothing in these Terms waives your privacy or consumer rights, prevents a lawful claim, or excludes or limits liability that the law does not allow us to exclude or limit.

Philippine law governs these Terms. If a provision is unenforceable, the remaining provisions continue to apply. We will identify each version and its effective date, make revised Terms available through the issuance page, and give notice of material changes through an available contact or service channel before they take effect where practicable. Renewed acceptance will be requested when required by law. Changes do not retrospectively remove accrued rights. Privacy-purpose changes are addressed below.

The Merchant identified on your signup form determines the purposes of its loyalty program and acts as the personal information controller for that program. DigiCard processes program information on the Merchant’s documented instructions to operate, support, secure and bill for the service.

When you contact DigiCard directly, we use your contact information and request details to respond, route the request, protect the service and maintain necessary correspondence records. Each party remains responsible for processing it determines itself. Contact the Merchant using the details on the signup page or card, or DigiCard at support@digicard.tech.

These Terms and this Privacy Notice apply to all participating Merchants. The signup form you complete before adding a card to your wallet identifies the Merchant, its contact details and loyalty-program rules. That form and its linked notices explain the information requested, its specific purposes, which fields are required, and what happens if you do not provide them. Read those details together with this notice; they describe the particular program you are joining.

Information comes from you, the Merchant’s authorized staff, your loyalty activity, and technical exchanges needed to deliver or update the wallet pass. Depending on enabled features, it includes contact details, card and wallet identifiers, visits or reward activity, messages, supported preferences and notes, and limited device or technical records. Acceptance records include the applicable terms and notice versions, your choices and timestamps.

These records support card issuance and updates, recording loyalty activity, delivering Merchant-initiated messages, responding to requests, verifying billable activity, preventing misuse and maintaining service security. The Merchant’s lawful basis for each program-specific use is identified with its collection details. DigiCard processes program data under the Merchant’s instructions and does not gain an independent right to use it.

If the signup form requests your birthday, it identifies whether a birth year is needed and explains the purpose before you submit it. Your birthday is used only for that disclosed purpose and any other use separately authorized by law. Notes, where enabled, are limited to disclosed program purposes. Sensitive information, such as age-revealing birth dates or health information, requires an appropriate legal basis and any required purpose-specific consent before processing. General acceptance of the Terms does not authorize unspecified sensitive notes.

Optional promotional messaging and other optional uses relying on consent are presented as separate choices. Required processing is explained before you provide the information; refusing an optional use does not by itself cancel your card.

The Merchant’s authorized personnel can access program information. DigiCard and its authorized hosting and support providers process information needed to deliver the service under confidentiality and data-protection obligations. Apple or Google receives the information needed for the wallet pass and handles information under its applicable terms and privacy notices.

DigiCard currently hosts program data with Hetzner in Singapore. Hosting providers or locations may change; we will update this notice and notify affected Merchants before a material change. Overseas processing is subject to applicable privacy requirements and appropriate contractual and security safeguards.

Information may also be disclosed where required by law or reasonably necessary to establish, exercise or defend legal claims. DigiCard does not sell or rent program information, use it for its own marketing, build its own cardholder marketing list, or use it for another client.

The Merchant’s program-specific retention period or criteria are provided on the signup page or in a notice linked from it. Information is retained only as needed for the stated purposes and applicable legal requirements. Access is limited to authorized persons, and appropriate organizational and technical safeguards are used.

When the Merchant deletes a cardholder record through the supported dashboard function, it is removed from active operational use. A Merchant pause may retain operational data for up to 12 months; data no longer needed may then be deleted or irreversibly de-identified following notice to the Merchant. After Merchant-requested permanent termination, its available operational data may be exported for 30 days and is deleted from active production within 60 days, unless law or lawful instructions require a different period. These timelines do not override a valid individual deletion request.

Limited identifiable billing-verification and acceptance records may be retained only while necessary to verify charges, demonstrate acceptance or handle legal claims, ordinarily for no more than five years after the relevant billing cycle ends or your participation ends, respectively. They will be deleted or irreversibly de-identified sooner when no longer needed. A longer period applies only where required by law or necessary for a specific legal claim. Security and other legal records are retained only for their necessary lawful purpose. Retained records remain protected and are not used to continue marketing or serve another client.

Isolated backup copies are retained on a rolling seven-day schedule before overwrite or secure deletion. They are restricted from routine operational use. If a backup is restored, applicable deletion and withdrawal instructions must be reapplied before the restored records return to operational use.

DigiCard may retain aggregate or irreversibly de-identified activity indefinitely for billing verification, fraud prevention, reporting, service analysis and improvement. It must no longer reasonably identify you; we will not try to re-identify you or use it to contact or target you.

Removing a wallet card does not automatically delete the Merchant’s records. Deleting a record does not automatically remove a card already saved to your wallet.

To request deletion of your cardholder data, contact the Merchant that issued your card using the contact details on the signup page or card. The Merchant handles the request and instructs DigiCard where technical assistance is needed. You may also contact the Merchant to withdraw consent to optional processing. Withdrawal is without charge and must be as easy as giving consent. It does not affect processing lawfully completed beforehand. If no other lawful basis applies, the processing relying on that consent will stop without undue delay; any effect on a requested feature will be explained.

Wallet settings may hide notifications, and you may remove the pass. These actions do not necessarily notify the Merchant or DigiCard that you have withdrawn consent. Use the withdrawal method above to communicate that choice.

Subject to applicable law, you may request access, correction, erasure or blocking, object to processing, and exercise applicable portability and other privacy rights. Contact the Merchant first for program data. You may also contact DigiCard at support@digicard.tech; we will route the request or assist the Merchant as appropriate. Reasonable identity verification may be required. You may raise a privacy complaint with the National Privacy Commission at privacy.gov.ph.

The current notice is available with the card’s issuance information. Material changes will be brought to your attention through an available contact or service channel. A new or incompatible purpose will be explained before it is used, and fresh consent obtained where required. Accepting updated Terms does not automatically authorize a new optional purpose.