Skip to main content

The UK's Loyalty Points Community

Privacy Policy

Last updated: 20 February 2026

Who we are

CardPoints is operated by E-Tara Ltd, registered in England. Our registered address is Baytree House, Humberston Avenue, Grimsby, DN36 4SR. For data protection enquiries, please use our contact form.

What information do we collect?

We collect your name and email address when you subscribe to our newsletter or use our contact form. We do not collect any other personal information directly.

When you visit our site, our hosting provider (Vercel) and analytics tools (Google Tag Manager) may automatically collect technical data such as your IP address, browser type, device type and pages visited.

How do we use your information?

We use your email address to send you information about loyalty card offers that may be of interest to you. We use analytics data to understand how visitors use our site and to improve the service.

Affiliate links and third-party services

CardPoints earns commission through affiliate links. When you click an offer link, you may be redirected through affiliate networks (including Awin, Skimlinks and others) which set their own cookies to track the referral. These third parties have their own privacy policies governing how they process your data.

We also link to third-party retailer websites. Once you leave CardPoints, you are subject to the privacy policy of the site you are visiting. We are not responsible for the privacy practices of other sites.

When do we share information?

We never sell your personal information to third parties. We do not share your information with anyone outside of E-Tara Ltd, except where required by law or as described above in relation to affiliate networks and analytics providers.

How long do we keep personal information?

We keep your newsletter subscription information until you opt out of our mailing list. Analytics data is retained in accordance with the retention policies of our analytics providers.

Your rights

Under UK data protection law (UK GDPR), you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Request a copy of your data in a portable format

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

How do we protect your personal information?

We use secure servers and appropriate organisational measures to protect your personal information from unauthorised access, alteration, or destruction. All data is transmitted over HTTPS.

Children's privacy

CardPoints is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.

Use of Cookies

For information on how we use cookies, please see our Cookie Policy.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.