Loyalty programmes run with Volta
Privacy
Last updated 31 October 2026
This explains what happens to your data when you join a shop's points programme run with Volta: what is kept, why, who sees it, and how you take it back. The short version: the shop keeps your first name and mobile to give you points, never your card number, and you can download or delete everything from your points page.
Who is responsible
The shop where you joined is responsible for your data (the "controller"). It decides what the programme offers and what messages it sends.
Volta runs the programme for the shop (the "processor"): QUIET FREQUENCY, UNIPESSOAL LDA. (NIF 519 091 647), Rua da Infantaria 88, 1350-170 Lisboa, Portugal. Volta only uses your data to run the programme for that shop, never for itself and never for another shop.
Questions or requests: ask at the shop, or write to support@getvolta.xyz.
What is kept
- What you tell us when you join: first name, mobile number, language, birthday (day and month, optional), your neighbourhood (optional, only shown to the shop as totals by neighbourhood), and how often the shop may message you and about what.
- Your cards, as a code. When you pay, the shop's payment terminal tells Volta the last 4 digits and the network (Visa, Mastercard…). Volta turns them into a code that only works for that shop, then forgets the digits. That code is how your next payments are recognised.
- Your visits: the date, time and amount of each card payment with a card on your account, your points and the rewards you received.
- The texts we sent you (welcome, reward, codes, messages) and whether they arrived.
- When you accepted the programme terms.
What is never kept
Your full card number, its expiry date or security code. Volta never sees them: it only reads what the shop's terminal provider gives it.
People who haven't joined
The shop's terminal sends every card payment. For cards that haven't joined, Volta keeps only the amount, the time and the card code, so the shop can count returning visits. They aren't linked to a name or a number.
Why, and on what basis
- To give you points and rewards: recognising your card, counting your points, texting you your welcome link, your reward and the codes to add a card. This is the programme you asked to join (contract).
- To send you the shop's news and offers, only if you said yes, and never more often than you chose (consent). Each message has a link to stop.
- Your birthday treat, only if you gave your birthday (consent).
Who sees it
- The shop's staff, in the counter app: your first name, visits and points. Not your mobile number.
- The shop's owner, in the dashboard: your first name, mobile number, answers, visits and points.
- The services Volta uses to run the programme, under contract and only for that purpose: Supabase (database), Vercel (hosting), Twilio (text messages), Resend (emails to the shop). The shop's payment terminal provider (Revolut, Viva Wallet or SumUp) is where payment data comes from.
Your account data is stored with Supabase in the European Union (Frankfurt, Germany). The services that send your texts and emails (Twilio, Resend) are based in the United States; those transfers are protected by the European Commission's standard contractual clauses.
Your data is never sold, never shared with other shops, and never used for advertising.
How long
As long as you are a member. When you leave the programme, your account is deleted straight away: your answers, cards, points and rewards. If the shop stops using Volta, its programme's data is deleted within 30 days.
Your rights
From your points page, under My details, cards and privacy, you can:
- see and download your data;
- correct your first name, language, birthday, neighbourhood and message choices;
- stop messages ("No thanks"), or use the link at the end of any message;
- remove a card;
- leave the programme and delete your data.
For anything else (changing your number, a copy of something specific, objecting), ask the shop or write to us. You can also complain to the Portuguese data protection authority, the CNPD (cnpd.pt).
Keeping it safe
Your points page opens with a secret link: keep it to yourself. Card codes are made with a key unique to each shop, so they can't be matched across shops. Payment-provider keys are stored encrypted. Only Volta's servers write to the database.
Changes
If this changes in a way that matters, we'll tell you by text before it applies.