Last updated October 14, 2026

This policy explains how Shopley Inc. (Shopley, we, us or our) handles personal information in connection with CheQpoint Gift Card & Rewards and its related gift card, promotion and rewards services. It applies to merchant representatives, authorized users and individuals whose information is processed through participating merchant programs.

1 Information we collect

Information depends on the services used and the information supplied by merchants and program participants. It may include names, email addresses, telephone numbers, business and billing addresses, account identifiers, user permissions, communication preferences and information provided in support requests.

Program records may include gift card identifiers and balances, purchases, reloads, redemptions, adjustments, promotional credit and related transaction details. When rewards features are enabled, relevant registration and rewards activity may also be processed. These records can be personal information when associated with an identifiable individual.

Information can be provided directly by an individual, submitted by an authorized merchant, transferred as part of an authorized program migration or exchanged through connected services such as Clover. Connected-service access is used to support the functions authorized for the merchant’s program. Purchases and billing may involve payment information handled through the applicable payment provider.

2 How information is used

We use information to establish and administer merchant accounts, operate gift card and rewards programs, complete requested transactions, deliver digital gifts, apply promotions, provide reporting and respond to support requests. We also use necessary information to maintain the service, investigate errors or suspected fraud, send operational notices, meet legal requirements and enforce applicable agreements.

When processing customer program information on a merchant’s behalf, we act under the applicable service arrangement and lawful instructions. Merchants are responsible for their program choices and customer notices. Shopley remains responsible for its own handling of personal information.

3 Consent and other lawful processing

We obtain consent where required for the collection, use and disclosure of personal information. Depending on the circumstances and applicable law, consent may be express or implied. Information may also be processed without consent where a legal exception applies, including certain legal demands or fraud investigations. Consent to a new purpose will be obtained where required.

4 Sharing information

Information may be shared with the merchant operating the program and its authorized users, participating locations where the program allows shared use, and connected services needed for authorized functions. We also work with gift card processors, technology providers and other service providers that help deliver the services. Their access is subject to the applicable service arrangements and privacy obligations.

Information may be disclosed in response to lawful requests, to protect legal rights or investigate misuse, or in connection with a permitted business transaction such as a merger or sale, subject to applicable law. Separate providers, including Clover and payment providers, also handle information under their own policies when supplying their own services.

5 Retention

Personal information is retained for the period needed to operate the program, maintain accurate balances and transaction records, resolve disputes and meet legal or contractual obligations. The applicable period depends on the information and purpose. Account closure does not necessarily require immediate removal of records needed for outstanding balances, legal requirements or dispute resolution. Information no longer needed is deleted or made anonymous, subject to applicable retention requirements and backup processes.

6 Security and processing locations

Shopley uses administrative, technical and organizational measures intended to protect personal information against unauthorized access, loss, misuse or disclosure. No electronic system or transmission method can guarantee complete security. Keep account credentials confidential and report suspected unauthorized access promptly.

Delivering the services may involve providers operating in other jurisdictions. Personal information processed outside Canada may be subject to foreign laws and lawful access by authorities in those jurisdictions. Shopley remains accountable for the protections required of it when transferring information to providers for processing. Contact us for information about these arrangements.

7 Communications and your choices

You can opt out of promotional messages by using the unsubscribe instructions in the message or contacting its sender. Opting out of marketing does not prevent necessary transaction, gift delivery, security or account communications where permitted by law.

Where processing relies on consent, you may withdraw it by contacting Shopley or the responsible merchant, subject to applicable legal or contractual restrictions. Withdrawal does not affect lawful processing already completed. We will explain any consequences for services that require the information. Merchants must respect the communication preferences of their program participants.

8 Access and other privacy rights

Subject to applicable law, you may request access to your personal information, an explanation of its use and disclosure, or correction of inaccurate information. You may also request deletion or exercise other rights available in your jurisdiction. Legal requirements and permitted exceptions may limit a request, including where transaction or balance records must be retained.

For information associated with a merchant’s program, contact that merchant or Shopley. We will address requests concerning our own processing and assist the responsible merchant where appropriate. We may verify identity or authority before providing information or acting on a request. We respond within the periods required by applicable law. You may raise concerns with us or the relevant privacy regulator.

9 Changes to this policy

We may update this policy as the services or applicable requirements change. The updated date will appear at the beginning of the policy. Where required, we will provide additional notice or obtain consent before materially changing how personal information is handled.

10 Contact us

For privacy questions, concerns or requests, email [email protected] and identify your message as a CheQpoint privacy enquiry. Include the merchant or program involved so that we can direct the request appropriately. Do not include passwords or complete payment card details.

Shopley Inc. | 1-888-490-0003 | [email protected]
379 Adelaide Street West, 2nd Floor
Toronto, Ontario M5V 1S5, Canada