← Back

Data Retention Policy

Last updated: October 2026

This translation is provided for convenience only. In case of any discrepancy between language versions, only the French version is legally binding.

1. Principles

Goodly keeps data for as long as needed to run the Merchant's loyalty programme, then deletes it. Logs and technical data are purged automatically every day according to the periods below.

No automatic deletion or anonymisation is applied to merchant accounts or to their customers' records: they are only deleted at the request of the Merchant or the customer.

2. Retention periods

DataRetention periodDeletion
Customer record (name, email, Wallet card)As long as the card and the Merchant's account existAt the request of the Merchant (dashboard) or the customer, or with the Merchant's account
History of stamps, points and rewardsAs long as the card and the Merchant's account existWith the customer's card or the Merchant's account
Merchant accountAs long as the account exists (no deletion for inactivity)On request, from the settings or by email — immediate deletion
Data from Shopify (sales, customer ↔ store links)Until the app is uninstalled, 24 months at mostshop/redact webhook (48 h after uninstallation); customers/redact for one customer
Sales sent by the connected point of sale24 monthsAutomatic daily purge
Staff activity log and stamp log90 daysAutomatic daily purge
Technical, security and access logs12 months maximumAutomatic daily purge
Internal audience measurement (no IP address)12 monthsAutomatic daily purge
Wallet notification log12 monthsAutomatic daily purge
Scheduled task log90 daysAutomatic daily purge
Rate limiter (abuse protection)7 daysAutomatic daily purge
Verification codes24 hours after expiryAutomatic daily purge
The Merchant's billing data10 years (Belgian accounting and tax obligations)At the end of the legal period
Database backups7 daysAutomatic rotation

3. Details

  • A few technical markers tied to a card (review already requested, welcome email already sent) are kept with the card so the customer is not contacted again; they are deleted with it.
  • Data deleted from the database may remain in backups until they rotate, i.e. for 7 days at most.
  • Periods specific to cookies and optional advertising measurement are listed in the cookie policy.

4. Deletion requests

An end customer may ask the merchant concerned or Goodly to delete their data; the Merchant can delete a customer from its dashboard. For any request: contact@goodly.be. See also the data processing agreement and the privacy policy.