When handled properly, loyalty programmes help us to tailor offers and services to our customers' needs and reward their loyalty.
Under the Data Privacy Manual, you cannot share personal data with a third party unless:
a) There is a legitimate business reason to do so;
b) The data is limited to that which is necessary for the purpose(s); and
c) The right contractual requirements and security controls are in place.
In addition, for direct marketing, there are Mandatory Rules that must be followed