Rewards Club — Privacy Policy

Effective date: 31 August 2026 · Version 1.1

This Privacy Policy explains how No Limits For General Trading LLC ("Rewards Club", "we", "us", or "our") collects, uses, shares, and protects personal data when you use the Rewards Club mobile application and loyalty program (the "Service"). It applies to members, prospective members, and visitors to our boutiques who interact with the Service.

1. Who We Are

Rewards Club is operated by No Limits For General Trading LLC, registered at Meethaq Tower, Princess Basma Street, Abdoun, Amman 11191, Jordan. For questions about this policy or your personal data, contact us at rewardsclub@nolimitsjo.com.

2. Information We Collect

2.1 Information you provide

Account details: name, username, email address, phone number, and password.
Profile information: profile photo or initials, and any details you choose to add to your profile.
Community content: posts, photos, and comments you share on the Community feed.
Communications: messages you send to our support team.

2.2 Information collected automatically

Transaction data: purchases, points earned and redeemed, offers used, and boutique locations visited, captured when your QR pass is scanned at checkout.
Device and usage data: device type, operating system, app version, and how you interact with the Service, collected through standard mobile analytics.
Approximate location: the boutique location associated with a transaction, and, if you enable location permissions, your device's approximate location to show nearby boutiques or offers.

2.3 Information from third parties

If you sign in or link a social account, we may receive your name and email from that provider, subject to your settings with them.
Boutique/Store staff may record details of an in-store redemption at the point of sale.

3. How We Use Your Information

To create and administer your Rewards Club account and track your points and tier status.
To process redemptions, generate one-time codes, and honor offers.
To personalize the offers, perks, and content shown to you.
To send transactional messages (e.g., points earned, tier changes, code expiration) and, where you have opted in, marketing communications about new collections, offers, or events.
To moderate the Community feature and enforce our Terms of Service.
To detect and prevent fraud, abuse, and security incidents.
To comply with legal, tax, and accounting obligations.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we rely on: performance of the contract between you and Rewards Club (to operate the loyalty program), your consent (for marketing communications and optional location access, which you may withdraw at any time), our legitimate interests (to keep the Service secure and to improve it), and compliance with legal obligations (such as tax record-keeping).

5. Sharing Your Information

We do not sell your personal data. We share it only in the following circumstances:

Service providers who host our infrastructure, send communications, process analytics, or support customer service on our behalf, under contractual confidentiality obligations.
Boutique / Store staff, to the extent necessary to verify your identity and process a redemption at checkout.
Professional advisors (legal, accounting) where necessary for their services to us.
Regulators, courts, or law enforcement where required by law or to protect our rights, users, or the public.
A successor entity in the event of a merger, acquisition, or sale of assets, subject to the same protections described in this policy.

6. Community Feature Visibility

Content you post to the Community feed, including your username, post text, photos, and like counts, is visible to other Rewards Club members. Do not include personal information in a Community post that you do not want other members to see.

7. Referrals and Point Gifting

Referrals. When a member shares their referral code and another person registers using it, we process the fact of the referral relationship: the referrer's account, the referred member's account, the code used, and whether and when the referred member completes their first qualifying purchase. The referred person provides their own registration details directly to us when they sign up; referrers do not submit another person's personal data through the Service. If you share your referral code with someone outside the Service (for example by message), you are responsible for having a lawful basis to contact that person. We use referral data to credit referral rewards, to enforce the program's limits, and to detect and prevent self-referral and other fraudulent or manufactured referral activity, on the basis of performing our contract with both members and our legitimate interest in preventing abuse.

Point gifting. For every transfer of points between members we process the sender's identity, the recipient's identity, the amount, the date and time, and the status of the transfer, including whether the sender chose to hide their name from the recipient. Choosing a hidden gift affects only what the recipient sees: the Company always retains the complete transfer record, including the sender's identity. We use this data to execute the transfer, to show each member their own transaction history, to resolve disputes, and to detect and prevent fraud and abuse, on the basis of performing our contract with both members and our legitimate interest in keeping the program safe. Transfer records are retained as described in Section 8.

8. Data Retention

We retain your account and transaction data for as long as your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account as described in Section 10; some transaction records may be retained where required by law even after account deletion.

9. Security

We use technical and organizational measures, including encryption in transit, access controls, and QR code tokens that do not expose your payment details, to protect your personal data. No system is completely secure, and we encourage you to use a strong, unique password and to safeguard your device.

10. Your Rights

Subject to applicable law, including Jordan's Personal Data Protection Law No. 24 of 2023 where it applies, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your account and associated personal data, subject to legal retention requirements.
Object to or restrict certain processing, including marketing communications (you can opt out at any time via in-app settings or by using the unsubscribe link in any marketing email).
Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
Lodge a complaint with the competent data protection authority in your jurisdiction.

To exercise these rights, contact us at rewardsclub@nolimitsjo.com. We may need to verify your identity before actioning a request.

11. Children's Privacy

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us at rewardsclub@nolimitsjo.com and we will take steps to delete it.

12. Cookies and Similar Technologies

Our website and app may use cookies, SDKs, or similar technologies for authentication, analytics, and remembering your preferences. Where required by law, we will present a cookie consent mechanism on our website and allow you to manage non-essential cookies.

13. International Data Transfers

If we or our service providers process your data outside your country of residence, we take steps to ensure it receives an equivalent level of protection, such as contractual safeguards with our processors.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Effective date" at the top of this page reflects the date of the current version.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at rewardsclub@nolimitsjo.com or Meethaq Tower, Princess Basma Street, Abdoun, Amman 11191, Jordan.