Privacy Policy

Effective date: 1 January 2026. This Privacy Policy explains how SeeGap collects and uses personal data through our website, our cashback claim pages and our brand dashboard.

Who we are

SeeGap is a receipt-verified cashback platform for FMCG brands. The Services are operated by SeeGap Ltd, a company incorporated in Ireland (company number 761945) with its registered office at Hartnett Enterprise Acceleration Centre, Moylish Park, Limerick, V94 E8YF, Ireland.

For most Campaign activity, including cashback claims, receipt verification and feedback collection, we act as a data processor on the instructions of the Brand running that Campaign. In limited cases, such as running our own website, marketing and enquiries, we act as data controller in our own right.

What data we collect

When you submit a receipt or claim cashback through a Campaign, we may collect:

your name, email address and phone number;
a photo or upload of your receipt, and the purchase details it contains (retailer, product, date and amount paid);
the payout details needed to pay cashback owed to you;
basic eligibility information requested for a Campaign, such as age range or general location;
feedback or survey responses you choose to give; and
technical data such as your IP address and device type, used to process your claim and help detect fraud.

Why we process your data, and our legal basis

To verify and pay cashback claims (contractual necessity and the Brand's legitimate interests).
To operate and improve our website and Services (our legitimate interests).
To respond to enquiries and manage Brand accounts (contractual necessity).
To meet legal and regulatory obligations (legal obligation).
To send marketing communications, where you have given your consent, which you can withdraw at any time.

Who we share your data with

The Brand running the Campaign, as the data controller for that Campaign's activity.
Payment providers, to pay cashback owed to you.
Fraud prevention providers, to help detect duplicate or fraudulent claims.
Cloudflare, our hosting and security provider.
Google Analytics, to understand how our website is used.
Professional advisers, regulators or law enforcement, where required by law.

We do not sell your personal data. Some of our providers may process data outside the EEA, where we rely on safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep your data

We keep Campaign data for as long as necessary to verify and pay claims, and no longer than the retention period agreed with that Brand. As a default we retain Campaign data for 90 days after a Campaign ends, except for records we must keep longer for legal, tax or fraud-prevention reasons. We retain a hashed version of your email for up to 3 years to prevent fraudulent or duplicate claims.

Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

Your rights

Under the GDPR and the Irish Data Protection Act 2018, you have the right to be informed, access your data, have inaccurate data corrected, request erasure, restrict or object to processing, and data portability. To exercise these rights, contact us at hello@seegap.com.

Children's data

Under Irish law, the digital age of consent is 16. We do not knowingly collect personal data from anyone under 16 without appropriate consent.

How to complain

If you have concerns, contact us first at hello@seegap.com. You may also lodge a complaint with the Irish Data Protection Commission: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, or via dataprotection.ie.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.

Contact

Questions about this policy can go to hello@seegap.com.