March 22, 2025
At WingsFast, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you use our website and mobile app (collectively, "Services").
By using our Services, you consent to the practices described in this policy.
1. Information We Collect
We collect the following types of information to provide and improve our Services:
Personal Information: When you register, we collect your name, email address, phone number, and date of birth to verify that you are at least 18 years old, ensuring compliance with our eligibility requirements.
Financial Information: To facilitate card-linked Cashback (rebates), we will collect your payment card details. However, we do not store full card numbers; instead, we will use tokenized versions through secure third-party services that are PCI-DSS compliant, as we plan to implement in the future to enhance security.
Social Media Data: If you choose to link your Instagram or TikTok account for boosted Cashback (rebates), we collect data such as your follower count, engagement metrics (likes, comments, shares), and post content. This data is used to calculate your social score, which determines your eligibility for higher rebate percentages.
Transaction Data: We will collect information through third-party services that are PCI-DSS compliant about your purchases from partner brands, including purchase amounts, dates, and merchant details, to calculate and credit your Cashback (rebates) accurately.
Device and Usage Information: Our App collect data about your device, such as IP address, browser type, operating system version, and app usage, as well as how you interact with our Services, using cookies and similar technologies. For our mobile app, we may collect device identifiers to enhance functionality.
2. How We Collect Information
We collect information in the following ways:
Directly from You: When you register, link your accounts, or provide information through forms on our website or app.
Through Social Media APIs: With your explicit consent, we access your social media data via the platforms' APIs, such as Instagram and TikTok, to calculate your social score and verify posts for rebates.
Automatically: Through cookies and other tracking technologies when you visit our website or use our app, collecting data like page views and session duration.
From Third Parties: Such as payment processors for withdrawal details, affiliate networks to track purchases, social media platforms for API data and Transaction Data that will be implement in future , ensuring seamless service delivery.
3. How We Use Your Information
We use your information for the following purposes:
Provide and Improve Our Services: To process your Cashback (rebates), verify social media posts, and calculate your social score based on your social media data to determine your eligibility for boosted rebates.
Communicate with You: To send you updates about your account, service notifications, and promotional offers, but only if you have given your consent. You can opt-out at any time by following the unsubscribe instructions in the communication or by contacting us.
Analyze Usage Patterns: To understand how users interact with our Services, improve functionality, and prevent fraud, using analytics tools like Google Analytics.
Comply with Legal Obligations: To meet regulatory requirements, resolve disputes, and enforce our Terms and Conditions.
4. Sharing and Disclosure of Information
We share your information with the following parties:
Service Providers: Such as payment processors GoCardless and Stripe for handling withdrawals, data storage providers for secure storage, and analytics companies like Google for usage insights.
Affiliate Networks: To track your purchases and credit rebates, ensuring accurate reward distribution.
Social Media Platforms: For API access to collect social media data, with your consent, to calculate your social score and verify posts.
Legal Authorities: If required by law, to comply with legal processes, protect our rights, or respond to legal requests.
We do not sell your personal information to third parties for their own marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
Encryption of data in transit and at rest to prevent unauthorized access.
Secure storage with access controls, limiting who can view or process your information.
For financial data, we use PCI-DSS compliant tokenization to ensure that no raw card numbers are stored on our systems, enhancing security, as we plan to implement in the future.
However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with the Services. We may also retain data to:
Comply with legal obligations, such as tax laws or regulatory requirements.
Resolve disputes and enforce our agreements.
Prevent fraud and maintain the integrity of our Services.
Once no longer needed, we will securely delete or anonymize your data.
7. Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure: You can request deletion of your data, subject to legal obligations.
Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
Right to Object: You can object to processing for direct marketing or other legitimate interests.
Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: If we rely on your consent for processing, you can withdraw it at any time, affecting future processing.
You can also manage your linked social media accounts and revoke access through your account settings, which will stop further data collection from those accounts.
To exercise these rights, please contact us at privacy@wingsfast.com. We may require verification of your identity before processing your request.
8. Children's Privacy
Our Services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will take steps to delete the data and terminate the account.
11. Third-Party Links
Our Services may include links to third-party websites or services, such as partner brand sites or social media platforms. These third parties have their own privacy policies, and we are not responsible for their practices. We recommend reviewing their policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website and app and, where appropriate, by email. Your continued use of the Services after such changes constitutes your acceptance of the new policy.
13. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Email: privacy@wingsfast.com.