UPDATED 30 SEPTEMBER 2026
Privacy notice
Business details and complaints
Autivia is a trading name of S.H. Services.
Dutch Chamber of Commerce number: 69367604.
VAT identification number: pending confirmation.
The visiting address is shielded in the Dutch Business Register because it is also a home address.
Send questions, privacy requests and complaints to shahraze.haider@gmail.com. For a complaint, include your business name, what happened and the resolution you want. Autivia will acknowledge it and respond as soon as possible.
The short version
Autivia is a loyalty-card platform for small businesses. Two different kinds of personal data move through it, and they have different owners: the details your business sends us when you ask us to set up a programme, and the details of your customers that live inside that programme. You are the controller of the second kind. We are the processor.
When you request a programme
The request form asks for your business name, your name, your email address, and optionally your country, city, website, how many locations you have and what you have in mind. We use those details for one thing: to reply, and to set the programme up if you decide to go ahead. Requesting costs nothing, adds you to no marketing list and starts no subscription and no charge.
The form is hosted in the app, at https://loyalty.autivia.agency/start?lang=en. We keep a request for twelve months if it does not become a customer, so that a follow-up conversation does not start from zero.
When you complete the loyalty readiness check
The check requests no name or email address. When you finish, it sends your answers, score and recommendations to Autivia by email through Resend. We use completed checks to understand what businesses need and improve the assessment. Optional notes are included, so please leave out names, customer details and other identifying information. Completing a check does not subscribe you to marketing emails.
Your result appears immediately even if sending fails. The result page tells you whether the submission service accepted your answers and offers a retry if it did not.
Inside a loyalty programme: your customers' data
When a customer joins your programme they give their first name and email address, and they answer separately whether they want emails beyond their card. While they are a member, the programme records stamps, visits, rewards and milestone bonuses against their card, plus the date they joined and any note your staff add at the counter. On a points programme it also records the amount staff key in at the counter and the points that purchase earned, any refund, a referral and what it was worth, and any VIP perk handed over.
You decide why you collect that data and what you do with it. Autivia processes it on your instructions, to run the card, the reward rules, the emails you switched on and the reporting you asked for. We do not use your customers' data for our own marketing, we do not sell it, and we do not buy lists. Autivia's platform administrators can open a member record when that is needed to run or support the service, and they carry out an erasure when you ask for one.
Every marketing email we send for you carries an unsubscribe link, and a customer can read their card without receiving any email beyond the card link itself. We do not send email on behalf of your payment provider.
Exports and reporting
Your dashboard can export your members, their visits and your monthly numbers as a CSV file. That is your data, and the export exists so you can take it with you. Each export is recorded against the account that requested it, with the date and the number of rows.
The monthly report contains aggregated numbers about your programme, not your customers' personal details.
Payments
There is no online checkout yet: setup is agreed with a person and invoiced. When a payment provider is connected, card details will be handled by that provider's own checkout and never stored by Autivia. If you need the current invoicing details for a purchase, ask us and we will send them.
Who processes data for us
Supabase hosts the database, Vercel hosts the applications, and Resend sends the emails when email is switched on. Each of them processes data on our instructions under its own terms: Supabase, Vercel, Resend.
Retention
Invoices and payment records are kept for seven years where Dutch tax law requires it. Data inside a live programme is kept for as long as the programme runs. If a business leaves, ask us for an export of its programme data and we will provide it. When a customer asks their programme for erasure, what identifies them goes: name, email address, phone number, birthday, the marketing consent, and the free text your staff typed against the card, which can carry a name or a remark. The old card link stops opening the record. Your programme's own numbers stay, so your reporting still adds up: balances, dates, amounts and the kinds of movement, held against a record marked as anonymised.
Your rights and theirs
A customer with a question about their card data should ask the business they joined, because that business decides what the programme does. If your business needs help answering such a request, or wants to exercise its own rights (access, correction, deletion, restriction, objection, portability), email the address below. You can also complain to the Dutch Data Protection Authority. The programme does the arithmetic its own rules need: a balance, a reward, a VIP tier, an expiry date, and which customers are due a reminder, all worked out from the activity recorded on the card. Autivia does not use your customers' data for its own marketing and does not sell it.