Legal
Data protection and PDPL
Loyalty programmes run on personal data, so data protection is built into how LoyaltyJuice works rather than added afterwards. This page explains how the product supports your obligations under Oman’s Personal Data Protection Law (Royal Decree 6/2022) and similar GCC laws.
Last updated: 21 September 2026
Built into the product
Consent that is actually given
Marketing consent is a separate choice at joining, unticked by default, and stored with its date and time.
Automatic exclusion
Guests who have not opted in are excluded from every campaign audience, whoever builds it.
Minimum data
Joining needs a phone number. Name and birthday are optional.
Access on a need-to-know basis
Team roles and per-location access limit who can see guest data.
Export and deletion
Merchants can export guest data and handle access and deletion requests.
Roles
For guest data, the merchant is the controller and LoyaltyJuice acts as processor on the merchant’s instructions. For merchant account data, Al Kays International LLC is the controller.
Questions
If you need a data-processing agreement or have a question about how data is handled, contact us through the contact page. This page is a summary and not legal advice; please take advice on your own obligations.