Privacy Policy

This Privacy Policy explains how The Loyalty People Ltd ("TLP," "we," "us," or "our") collects, uses, discloses, and protects personal information when you access or use our website (theloyaltypeople.global), our consulting services, our content and research products, and TLP Collective, our professional community platform hosted on Circle (tlpcollective.co).

We are committed to handling personal data responsibly and transparently, in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation.

By accessing or using our website or services, you confirm that you have read and understood how and why we process your personal information. The latest version of this policy will always be available at theloyaltypeople.global/privacy-policy. Questions: legal@theloyaltypeople.global.

1. Who We Are

The Loyalty People Ltd is the data controller for all personal information collected through our website, consulting, and content services. We are an independent loyalty, CRM, and customer strategy consultancy and intelligence platform.

TLP Collective is hosted on Circle (CircleCo, Inc.). Circle acts as a data processor on our behalf for community data, and as a data controller in its own right for platform-level data. Please review Circle's Privacy Policy at circle.so/privacy.

2. What Personal Information We Collect

2.1 Website Visitors

When you visit theloyaltypeople.global, we or our platform provider (Webflow) may automatically collect:

IP address and device and browser information
Pages visited, links clicked, and session duration
Referring website or source
Cookie identifiers and similar tracking data (see Section 8)

2.2 Enquiries and Contact Forms

When you contact us or submit a form, we collect your name, email address, company or job title (if provided), and the content of your message or enquiry.

2.3 Newsletter and Content Subscriptions

When you subscribe to TLP Signals, download a report or eBook, or register for a webinar, we collect your name, email address, company or sector (if provided), and content access and engagement data.

Where content is produced in partnership with a named third party, your contact details will only be shared with that partner where you have actively opted in at the point of registration. Declining will not affect your access to TLP content.

2.4 Consulting Clients

When you engage TLP for consulting or research services, we collect contact details, contractual and billing information, project-related data provided in the course of the engagement, and correspondence and meeting records.

2.5 TLP Collective Members

TLP Collective is our professional community platform hosted on Circle. When you register or participate, we and Circle may collect:

Name, email address, and profile information you choose to provide
Content you post, comments you make, and discussions you participate in
Messages sent to other members or moderators
Event registrations and course completions within the community
Device identifiers, IP address, and usage data collected by Circle's platform
Payment information if you purchase a paid membership tier — handled by Circle's payment processor; TLP does not store payment card details

Circle has its own Privacy Policy governing platform-level data collection, available at circle.so/privacy. Content you post publicly within TLP Collective may be visible to other members. Please exercise care when sharing information you consider confidential.

3. How We Use Your Personal Information

3.1 Legal Bases for Processing (UK GDPR)

Legitimate interests: operating our business, sending relevant content to subscribers, maintaining community quality, and managing client relationships, where these do not override your rights
Contract performance: fulfilling consulting engagements or membership agreements
Consent: sending marketing communications where required; placing non-essential cookies
Legal obligation: complying with applicable laws and regulations

3.2 Purposes

Operate and improve our website, consulting services, content products, and TLP Collective
Respond to enquiries and deliver contracted services
Send newsletters, research updates, and relevant editorial content to subscribers
Administer TLP Collective membership, events, courses, and discussions
Share your contact details with named event or content partners only where you have actively opted in
Analyse usage and engagement to improve our content and services
Comply with applicable legal obligations
Protect the integrity and security of our platforms and community

4. How We Share Your Personal Information

TLP does not sell your personal data. We share information only in the following circumstances.

4.1 Platform and Service Providers

Webflow: website hosting and platform infrastructure
Circle (CircleCo, Inc.): TLP Collective community platform
Email marketing providers: for newsletter and content distribution
Analytics tools: for website and content performance measurement

All service providers are subject to appropriate data processing agreements and are required to process your personal data only on our instructions and in accordance with applicable law.

4.2 Content and Event Partners

Where TLP produces content or events in partnership with a named third party, your contact details will only be shared with that partner where you have actively opted in at the point of registration. You will always be clearly informed before any such sharing takes place.

4.3 Legal Requirements

We may disclose your personal information where required by applicable law, including in response to lawful requests from regulatory authorities, law enforcement, or courts.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of our business, personal data may be transferred as part of that transaction, subject to the same privacy protections described in this policy.

5. Data Retention

Website enquiry and contact data: 3 years from last contact
Subscriber and newsletter data: duration of subscription plus 12 months following unsubscribe
Consulting client data: 7 years from the end of the engagement
TLP Collective membership data: duration of active membership plus a reasonable period following cancellation, subject to Circle's own retention practices

Where you request deletion of your data, we will action this promptly, subject to any legal obligations requiring us to retain certain records.

6. International Data Transfers

Our primary operations and website hosting are based in the UK. TLP Collective is hosted by Circle, a US-based company, which means your community data may be transferred to and stored in the United States. Circle has confirmed compliance with applicable cross-border data transfer mechanisms, including Standard Contractual Clauses where required. Where TLP transfers personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: to obtain a copy of the personal data we hold about you
Right to rectification: to have inaccurate data corrected
Right to erasure: to request deletion of your data in certain circumstances
Right to restriction: to request that we limit our processing of your data
Right to data portability: to receive your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests, including for direct marketing
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at legal@theloyaltypeople.global. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies for the following purposes:

Strictly necessary: session management, security, and core site functionality — these cannot be disabled
Analytics: understanding how visitors use our site — for example, Google Analytics (_ga retained for up to 24 months, _gid retained for 24 hours)
Functional: remembering your preferences across visits — for example, your cookie consent choice (retained for up to 12 months)

Non-essential cookies are only placed with your consent. You can update your cookie preferences at any time using the cookie settings link in our website footer. For full details, see our Cookie Policy at theloyaltypeople.global/cookie-policy.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Our website is hosted on Webflow, which applies industry-standard security controls. TLP Collective is hosted by Circle, which holds SOC 2 Type II certification and maintains GDPR and PCI DSS compliance. No method of electronic transmission or storage is entirely secure, but we take our obligations seriously and review our practices regularly.

10. Children

Our services are directed at professionals and are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from anyone under 18. If you believe we may have inadvertently collected such data, please contact us at legal@theloyaltypeople.global and we will delete it promptly.

11. Third-Party Links

Our website and TLP Collective may contain links to third-party websites or partner resources. This Privacy Policy does not apply to those sites. We are not responsible for their content, accuracy, or privacy practices and encourage you to read their policies before submitting any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, notify active subscribers or TLP Collective members directly. The latest version will always be available at theloyaltypeople.global/privacy-policy.

13. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

14. Contact

The Loyalty People Ltd

Legal: legal@theloyaltypeople.global

General: letstalk@theloyaltypeople.global

Web: theloyaltypeople.global