Effective date: 4th March 2026
Our commitment
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate in the circumstances.
Personal information we collect
- Registration data: name, email, password hash, region, preferences.
- Cashback data: click IDs, retailer, time, order ID, currency, order value, commission earned, cashback, approval and paid dates, and status (pending/confirmed/paid/declined).
- Technical data: IP address, device/browser info, logs.
- Cookies/identifiers: used to attribute purchases and prevent fraud.
- Support/claims: communications and evidence for missing cashback.
Why we collect and use information
- To operate our coupons and cashback services and credit rewards to your account.
- To process withdrawals and maintain financial records.
- To provide support and investigate claims.
- To prevent fraud and secure our platform.
- To improve our services and communicate updates/offers with your consent.
Consent
We obtain your consent to collect, use, and disclose your information unless otherwise permitted or required by law. You may withdraw consent at any time, though this may impact our ability to provide certain features (e.g., cashback tracking).
Disclosure to third parties
- Retailers and affiliate networks for validation and payment of commissions.
- Service providers (hosting, analytics, fraud prevention, customer support, payout partners) under contractual safeguards.
- Legal authorities as required by law.
Cross-border transfers
Your information may be processed in other countries. We use contractual and technical measures to protect personal information, and our service providers are required to provide comparable levels of protection.
Retention
We retain personal information only as long as necessary for the purposes identified, including compliance with legal, tax, and audit obligations.
Your rights
- Access to your personal information and information about its use and disclosure.
- Request correction of inaccurate or incomplete information.
- Challenge our compliance via our Privacy Officer.
Cookies and tracking technologies
We use cookies and similar technologies for functionality, analytics, and cashback attribution. You can manage cookies via your browser. Disabling certain cookies may affect cashback tracking.
Security
We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit, and monitoring.
Contact the Privacy Officer
Email: [email protected]
You may also contact the Office of the Privacy Commissioner of Canada if you have concerns about our practices.
Browser extension
We offer the Love Cashback browser extension for Google Chrome. The extension detects when you visit a cashback-eligible store and lets you activate cashback with one click. In addition to the data described above, the extension processes the following:
- Authentication token – when you sign in via the extension, an API token is stored locally in your browser (using Chrome's storage API) to keep you signed in. No passwords are handled by the extension.
- Tab URL matching – the extension reads the URL of your active browser tab to check whether the website you are visiting is a cashback-eligible store. URLs are compared in-memory against a locally cached list of stores and are not recorded, stored, or transmitted.
- Cached store data – a list of participating store domains is cached locally in your browser and refreshed periodically. This data contains no personal information.
- Profile display – your first name and cashback balance are fetched from the Love Cashback API and displayed within the extension popup. No additional personal data is collected beyond what is already held by the platform.
All extension code runs locally in your browser. No browsing history, page content, or personal information is collected or transmitted by the extension beyond the authenticated API requests described in this policy. You can remove the extension and its locally stored data at any time via your browser settings.
Changes
We may update this policy periodically and will post the latest version here.