Effective date: 4th March 2026
Introduction
We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles (IPPs). This policy explains what we collect, how we use it, and your rights.
Information we collect
- Account details (name, email, password hash).
- Cashback tracking data (click IDs, retailer, timestamps, order details, order spend, commission & cashback earned, and status).
- Device/technical data (IP address, user agent, logs).
- Cookies and unique identifiers used for attribution and analytics.
- Support communications and claim documentation.
Why we collect it
- To operate our coupons and cashback services and allocate rewards to your account.
- To process withdrawals and keep records.
- To provide support and investigate missing cashback claims.
- To prevent fraud and ensure platform security.
- To improve services and send updates/offers where you opt in.
Disclosing your information
We disclose personal information to retailers and affiliate networks to verify transactions, to service providers (hosting, analytics, payments, fraud tools, customer support), and to authorities where required by law.
Overseas transfers
If personal information is transferred outside New Zealand, we take reasonable steps to ensure comparable safeguards are in place, or rely on permitted grounds under the Privacy Act 2020.
Retention & security
We keep information only as long as necessary for the purposes described or as required by law. We apply safeguards such as encryption in transit, access controls, and monitoring.
Your rights
You can request access to and correction of your personal information. Contact: [email protected].
Cookies & tracking
Cookies help us attribute purchases for cashback and enhance performance. Some cookies are essential. You can manage cookies in your browser settings.
Browser extension
We offer the Love Cashback browser extension for Google Chrome. The extension detects when you visit a cashback-eligible store and lets you activate cashback with one click. In addition to the data described above, the extension processes the following:
- Authentication token – when you sign in via the extension, an API token is stored locally in your browser (using Chrome's storage API) to keep you signed in. No passwords are handled by the extension.
- Tab URL matching – the extension reads the URL of your active browser tab to check whether the website you are visiting is a cashback-eligible store. URLs are compared in-memory against a locally cached list of stores and are not recorded, stored, or transmitted.
- Cached store data – a list of participating store domains is cached locally in your browser and refreshed periodically. This data contains no personal information.
- Profile display – your first name and cashback balance are fetched from the Love Cashback API and displayed within the extension popup. No additional personal data is collected beyond what is already held by the platform.
All extension code runs locally in your browser. No browsing history, page content, or personal information is collected or transmitted by the extension beyond the authenticated API requests described in this policy. You can remove the extension and its locally stored data at any time via your browser settings.
Updates
We may update this policy. Changes will be posted here with a new effective date.