Who operates Loyal Duck
loyalduck.pk is operated by COOPON PVT LTD, Pakistan. In this policy, “Loyal Duck”, “we” and “us” refer to that operator.
This policy covers information used to operate customer loyalty accounts, merchant and staff tools, offers, campaigns, support and this website. Use our contact page for privacy questions.
Information we use
Account information may include a phone number, display name, account identifier and authentication records. Business users also provide email and role information; authorised representatives provide business and agreement details.
Service records include merchant memberships, points or visit activity, reward and offer redemptions, transaction references, campaign interactions and support correspondence.
Technical records can include device and push identifiers, session information, IP address, timestamps, error reports and security events. We use these to operate, protect and troubleshoot the service.
Why it is used
We use information to authenticate accounts, maintain separate merchant rewards, record authorised transactions, fulfil redemptions, operate promotions, communicate permitted updates, process business applications and agreements, answer support requests and prevent misuse.
Merchant campaign eligibility is based on that merchant’s relationship with the customer. Campaign reporting is not a licence to export the network’s customer contact data.
Location, camera and notifications
Nearby offers can use foreground device location when you choose that option. City selection is an alternative. Core loyalty does not require background location tracking.
The Business app uses the camera for supported QR scanning. A website visit does not require camera, location or notification permission.
Device notification permission and Loyal Duck message preferences are separate. You can manage preferences in the app. Turning off promotional notifications does not cancel your loyalty account.
Retention and account deletion
You can request deletion in the app or from the public account-deletion page. Identity verification is required before a destructive request proceeds. The currently documented flow includes a 72-hour cancellation window; the verified request confirmation gives the applicable status and timing.
Deletion removes or de-identifies account information under the approved deletion process. Limited transaction, agreement, payment, security or dispute records may need to remain for specific legitimate purposes. Retention must be limited to the applicable purpose and obligation; removing a database link alone is not a guarantee that all related information is anonymous.
Any retained categories, applicable periods and exceptions must be reflected in the final published retention schedule. Backup expiry and restoration controls must preserve completed deletion requests. The legal-review checklist accompanying this site identifies these details for final confirmation.
Your choices and requests
You can manage account information and notification preferences in the app, choose whether to use location for discovery, and initiate deletion without having to reinstall the app.
For access, correction, account recovery or another privacy request, contact us. We may need proportionate identity verification. Do not send passwords, OTPs, full payment-card details or unnecessary identity documents through a general support form.
Security and international processing
We use access controls, server-side authorisation and operational records to protect information. No website or app can honestly guarantee that a security incident is impossible. Report a concern through the security topic on our contact page.
Service providers may process information outside Pakistan. Before publication, the operator must confirm the provider list, processing locations and any safeguards or notices required for the markets actually served.
Website storage and changes
This supplied website does not add marketing trackers, advertising pixels or a cookie banner. Its interactive demonstrations run in memory. A configured contact form sends the information you submit to the support endpoint. Hosting providers may process ordinary request and security logs.
The connected apps have their own sessions and service storage. Any analytics or additional tracking introduced later must be reflected in this policy and the appropriate consent controls.
The final policy must show its effective date. Material changes should be communicated appropriately. The draft date above is not a statement that this policy is already legally approved.