Data Processing Addendum Overview
Last updated: June 17, 2026
This overview summarizes the baseline data-processing commitments QlessQ applies when acting as a service provider for Patron Loyalty tenant organizations. It supports security and legal review workflows and should be read alongside your Patron Loyalty Terms of Service. QlessQ does not sell personal information.
1. Roles
Tenant organization: data controller (or business) for patron profiles, loyalty balances, campaign audiences, and related Patron Data. QlessQ: data processor (or service provider) for Patron Data processed through the Loyalty Service.
2. Processing Scope
QlessQ processes Patron Data to deliver patron CRM, loyalty points, tiers, rewards, campaigns, referrals, and related analytics requested by the tenant. When QlessQ queue management is also licensed, visit and appointment outcomes may be ingested to award loyalty automatically. QlessQ may use aggregated or operational data for internal service analysis; it does not sell personal information.
3. Core Processor Commitments
Process personal data only on documented tenant instructions. Apply technical and organizational safeguards for confidentiality, integrity, and availability. Restrict personnel access to least privilege and business need. Support controller requests for deletion, anonymization, and consent-audit evidence exports (including patron portal legal consent records). Notify controllers of confirmed incidents as required by applicable law and contract. Do not sell personal information processed on behalf of tenants. Flow equivalent data-protection obligations to subprocessors listed at /subprocessors. Provide notice of material subprocessor changes through the published subprocessor register and, where required, to organization account owners before a new subprocessor begins processing Patron Data.
4. Cross-Border Processing
QlessQ may process data in multiple jurisdictions through infrastructure and communications subprocessors. Applicable transfer safeguards must be documented in customer contracting artifacts.
Contact
For questions about this document, email [email protected].