Skip to content

Privacy Policy

Last updated: 1 January 2026

This Privacy Policy explains how BLU Software (Pty) Ltd, a company registered in South Africa (“BLU”, “we”, “us”), collects, uses, discloses and protects personal information when you visit our website, enquire about our services, or use a loyalty platform that BLU manages on behalf of a client venue (a “Client”).

1. Information We Collect

We collect the following categories of information:

  • Enquiry information: name, business name, email, phone number, venue type and any details you submit through our Contact or Book a Demo forms.
  • Account information: for client managers and staff, login credentials (via our authentication provider), role, business affiliation and platform activity.
  • End-customer information: on behalf of our Clients, loyalty program participants' contact details, visit and reward activity, collected via a Client's branded platform.
  • Technical information: IP address, browser type, device information and usage data collected automatically via cookies and similar technologies (see our Cookie Policy).

2. How We Use Information

  • To respond to enquiries and schedule consultations or demos.
  • To provide, operate and maintain client loyalty platforms.
  • To authenticate client managers and staff and control access to their platform.
  • To detect, investigate and prevent fraud, abuse and security incidents.
  • To improve our website, platform features and customer support.
  • To comply with legal obligations and enforce our agreements.

We only use personal information for the purposes described above, or for a purpose that is compatible with them. We do not use personal information for automated decision-making that produces legal or similarly significant effects without human involvement.

3. How We Share Information

We do not sell personal information. We share information only with:

  • Service providers who help us operate our infrastructure, such as our database and authentication provider (Supabase) and any other providers listed in our Data Processing page, each bound by contractual confidentiality and data protection obligations.
  • The relevant Client, where information relates to that Client's own loyalty platform and end customers.
  • Regulators, law enforcement or other third parties where required by law, or to protect the rights, safety or property of BLU, our Clients or others.
  • A successor entity in connection with a merger, acquisition or sale of assets, subject to that entity honouring the commitments in this Policy.

Each Client's platform and end-customer data is provisioned on independent infrastructure and is never pooled, merged or made visible to another Client of BLU.

4. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes and enforce our agreements, and then delete or anonymise it. Client platform data is retained in accordance with the agreement between BLU and the relevant Client, and is deleted following a transition period after that agreement ends (see our Data Processing page).

5. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the use of your personal information, and to receive a copy of it in a portable format. If BLU processes your information as a processor on behalf of a Client (for example, as a loyalty program member), we will direct your request to that Client where appropriate, or assist the Client in responding to it. To exercise these rights, contact us using the details in Section 9 below.

6. Security

We apply industry-standard technical and organisational safeguards to protect personal information, including encryption in transit, access controls, platform isolation between Clients, and restricting internal access to personnel who need it to provide support. No system is completely secure, and we encourage you to use strong, unique passwords for your account. If we become aware of a security incident affecting your personal information, we will notify affected individuals and/or Clients and any relevant regulator without undue delay, as required by applicable law.

7. Children's Privacy

Our website and client platforms are intended for business contacts, venue staff and adult loyalty program members. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us using the details below and we will take steps to delete it.

8. International Transfers

Information may be processed in a country other than your own, including the countries where our infrastructure providers operate. Where this occurs, we take reasonable steps, such as contractual safeguards with our providers, to ensure the information continues to receive an adequate level of protection.

9. Contact Us

Questions about this Policy, or requests relating to your personal information, can be directed to hello@goblu.tech.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page, and where changes are significant we will take reasonable steps to bring them to your attention.