Privacy Policy

This policy applies to the PipMiles website, the PipMiles apps for iPhone and Android, our emails and notifications, and any other place that links to it. It applies to members, people who contact us, newsletter subscribers and visitors.

It does not apply to brokers, app stores, banks, crypto platforms or other third parties, even if we link to them. They decide how they use your information under their own policies.

Account information: your name, email address, mobile number, country, city, password (stored by our authentication provider in hashed form only), referral code, membership tier, display currency and your notification and marketing choices.

Broker information: the broker you link, your broker account number, platform, the sign up link or partner code used, verification status and the lots and product summaries that brokers report to us so we can credit PipMiles earned.

Programme records: your PipMiles ledger, targets reached, tier history, saved rewards, cashback claims, their status and payment references.

Payout information you choose to save so we can pay cashback: for bank payouts the account holder name, bank name, account number, branch or sort code, IBAN, SWIFT or BIC and bank country; for crypto payouts the wallet address, network and asset.

Support and contact information: messages you send to us, broker requests, contact form submissions and our notes on them.

App and device information: the device model, operating system and app version, a push notification token issued by Apple or Google, and an identifier we generate for each device you sign in on. If you turn on Face ID, Touch ID or fingerprint unlock, the check happens on your device. We never receive your biometric data.

Website usage information as described in section 13.

We do not collect broker trading passwords, card numbers or other credentials that would let anyone place trades or move funds. The apps do not access your contacts, photos, camera, microphone or precise location. Do not send us identity documents, health information or other special personal information unless we ask for it for a specific legal reason. If you send it unsolicited we will delete it where we can.

From you, when you sign up, link a broker, save payout details, claim cashback, contact us or change your settings. From your use of the website and apps. From participating brokers and their reports, when you ask us to link an account. From people who refer you, who give us only your referral code. From service providers that host, secure, email or notify on our behalf.

If you do not give us information we need to run your membership, verify a broker account or pay a claim, we may be unable to provide that part of the programme.

To create, secure and run your account and the programme, including verifying broker accounts, crediting PipMiles earned, awarding target bonuses, reviewing tiers and paying cashback claims. Basis: performing our contract with you.

To prevent and investigate fraud, abuse, duplicate accounts, money laundering and breaches of our terms, and to protect our members, partners and business. Basis: our legitimate interests and our legal obligations.

To keep financial, tax and audit records, answer lawful requests from authorities and defend legal claims. Basis: legal obligation and legitimate interests.

To send service messages about your account, claims and security, and to call or message you on your mobile number about them, for example to help you link a broker account or confirm a cashback payment. These are part of the service and you cannot opt out of them while you are a member.

To send programme news and offers by email, notification, phone call, SMS or WhatsApp if you have agreed or if the law allows us to contact existing members about similar services. Basis: consent or legitimate interests. You can opt out at any time.

To understand how the website and apps are used and improve them. Basis: legitimate interests.

We do not sell personal information, we do not share it for third party advertising, and we do not use it to track you across other companies' apps or websites. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Fraud and eligibility flags are reviewed by a person before we act on them.

The apps send push notifications only if you allow them in your device settings. You can turn them off at any time in those settings or choose which activity messages you receive in your account. Marketing emails include an unsubscribe link that works with one click.

We use the mobile number you give us to call you, send SMS messages and message you on WhatsApp about your account and support. When we message you on WhatsApp, WhatsApp's own privacy terms also apply to that conversation. If you have agreed to marketing, we may also contact you there about programme news and offers. Tell us during the call or in a reply, change your marketing choice in your account, or email support@pipmiles.com to stop marketing calls and messages at any time.

Participating brokers and their reporting channels, to confirm that an account is yours and to obtain the volume we are allowed to see.

Service providers that process information on our instructions, including our database and authentication host, our website host, our email delivery provider, Apple Push Notification service and Google Firebase Cloud Messaging for notifications, and banks or crypto platforms we use to pay cashback.

Apple and Google as operators of the app stores, under their own terms, when you download or update the apps.

Professional advisers such as auditors, accountants and lawyers, under a duty of confidence.

Courts, regulators, tax authorities, law enforcement or other parties when the law requires it, or when we reasonably believe it is needed to protect the rights, property or safety of our members, partners, us or the public.

A buyer, investor or successor if all or part of our business is sold, merged or restructured, who must then protect the information as this policy describes.

Every operator that processes information for us must keep it confidential, secure it appropriately and use it only on our instructions.

Our service providers may store or process information in other countries, including the European Union, the United Kingdom and the United States. When we transfer personal information across borders we do so as POPIA and other applicable law allow, for example to operators bound by contract to protect it to a standard at least equal to this policy, or where the transfer is needed to perform our contract with you.

Account and profile information: while your account is open. When you delete your account it is removed or replaced as set out in our Account Deletion Policy.

PipMiles ledger, target and tier history, cashback claims, payment references, linked broker account numbers and audit logs: kept after deletion without your name or contact details, for as long as tax, company and anti fraud law requires and for the period in which a legal claim could be brought, which is generally five (5) to seven (7) years after the last transaction.

Saved payout details: until you remove them or delete your account. Payout details attached to a paid claim are kept with that claim as a payment record.

Support messages: for as long as needed to resolve the matter and any dispute that follows, then deleted or de identified.

Website usage information: up to thirteen (13) months.

Marketing preferences: until you opt out, after which we keep only what is needed to respect your choice.

Copies in encrypted backups are overwritten on our providers' rolling schedule and are not used for any other purpose in the meantime.

You can delete your account at any time in the iPhone or Android app under Account, on the website under Profile, or by emailing support@pipmiles.com from the address on your account. Our Account Deletion Policy at pipmiles.com/account-deletion explains what happens, what we must keep and for how long.

We use technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit, access controls based on staff roles, row level security in our database, append only financial and audit records, and logging of staff actions.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You must keep your password and devices secure. If we become aware of a security compromise that affects your personal information, we will notify you and the relevant regulator as the law requires.

Subject to POPIA and other law that applies to you, you may ask whether we hold personal information about you and request a copy of it, ask us to correct or delete it, object to processing based on our legitimate interests or for direct marketing, restrict processing, and withdraw consent where we rely on consent. If the law of your country gives you a right to receive your information in a portable format, you may also ask for that. Withdrawing consent does not affect processing already done.

Many details can be updated directly in your account. For anything else, email support@pipmiles.com from the address on your account. We may need to verify your identity before we act, and we will respond within the time the law requires, normally within thirty (30) days. We may refuse or limit a request where the law allows, for example where we must keep records or the request is manifestly unfounded, and we will tell you why.

You may complain to the Information Regulator (South Africa) using the contact details and complaint forms published at inforegulator.org.za, or to the data protection authority where you live. We would appreciate the chance to resolve your concern first.

We use cookies and similar tools that are necessary to run the site and keep you signed in. You can block cookies in your browser, but some features may not work.

We run our own website analytics to understand how the site is used and improve it. We record the pages you view, how long they are on screen, the website or campaign link that brought you, your approximate location (country and city, worked out from your connection), and your device, browser and operating system. A random identifier stored in your browser lets us count returning visits. We do not store your IP address, and this information is not shared with advertisers or sold. If you have an account, these visits are linked to it, including visits from before you signed up. We keep this information for up to thirteen (13) months.

The programme is only for adults aged eighteen (18) or older. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy from time to time. The date at the top will change, and we will tell you by email or in the account before a material change takes effect where practicable. The current version always applies.

Questions about this policy: support@pipmiles.com.