Acceptable Use Policy

Last updated: 4 December 2025

Unity Systems Ltd

4–8 Ludgate Circus, London, EC4M 7LF

support@unity-loyalty.co.uk | law@unity-loyalty.co.uk

1. Purpose

The purpose of this Acceptable Use Policy (“AUP”) is to define acceptable and prohibited uses of the Unity Loyalty platform (“Service”), including loyalty cards, merchant dashboards, APIs, messaging tools, and any associated systems.

This policy applies to:

  • All customers using Unity loyalty cards
  • All merchants using Unity services
  • All employees and contractors of Unity Systems Ltd
  • Any third parties accessing Unity infrastructure

This AUP ensures the platform remains secure, fair, lawful, and reliable.

2. General Principles

Users and merchants must:

  • Use the Unity platform responsibly and lawfully
  • Respect data privacy and security requirements
  • Avoid behaviour that harms users, Unity, or merchants
  • Comply with all applicable laws and regulations
  • Follow all Unity policies, contractual terms, and instructions

Failure to comply may result in suspended access or account termination.

3. Acceptable Use

3.1 For Customers

Customers may use the Unity loyalty card to:

  • Earn and redeem points in accordance with merchant rules
  • Receive permitted communications
  • Access their account and manage preferences
  • Store their card in Apple Wallet or equivalent tools
  • View transaction and points history

3.2 For Merchants

Merchants may use the Unity dashboard to:

  • View customer loyalty activity
  • Issue or redeem points
  • Create permitted marketing campaigns (SMS/email/push/geo-push)
  • Manage store-level settings and staff access
  • View analytics and performance data
  • Use Unity APIs for authorised integrations

4. Prohibited Activities (Customers & Merchants)

Users and merchants may not:

4.1 Data Misuse

  • Access data belonging to any other merchant or customer
  • Attempt to bypass access controls
  • Scrape, export, harvest, or replicate platform data
  • Share account logins with unauthorised parties

4.2 Fraudulent or Abusive Behaviour

  • Create fake or duplicate user accounts
  • Manipulate point balances
  • Issue points without genuine transactions
  • Redeem points dishonestly
  • Hack, tamper, or interfere with systems
  • Submit false merchant claims

4.3 Platform Misuse

  • Interfere with platform security or performance
  • Attempt reverse engineering, code extraction, or API tampering
  • Introduce malware, viruses, or malicious code
  • Overload the platform through botting or automation

4.4 Unlawful Marketing

Merchants cannot send:

  • Marketing without explicit opt-in consent
  • Misleading or deceptive promotions
  • Excessive or spam-like communications
  • Prohibited content (hatred, violence, illegal goods, discrimination)

Unity may monitor for marketing abuse.

4.5 Location-Based Abuse

  • Misuse or simulate geo-push triggers
  • Attempt to track user location outside Apple Wallet rules
  • Falsify device location for fraudulent rewards

Unity does not collect GPS data and prohibits attempts to work around this.

4.6 Misrepresentation

  • Impersonate Unity or other businesses
  • Claim false affiliations
  • Misrepresent rewards or program benefits

5. Additional Merchant Responsibilities

Merchants must:

5.1 Manage Staff Access Responsibly

  • Assign appropriate roles only
  • Disable access for former employees immediately
  • Prevent credential sharing

5.2 Use Communications Tools Properly

  • Honour opt-out requests immediately
  • Provide accurate promotional information
  • Avoid excessive messaging
  • Follow CAP/ASA advertising rules

5.3 Ensure Reward Fairness

  • Apply rules consistently for all customers
  • Maintain transparency
  • Avoid discriminatory practices

Unity reserves the right to review merchant behaviour and enforce corrective action.

6. API Use & Technical Restrictions

If a merchant uses Unity APIs, they must not:

  • Exceed rate limits
  • Use undocumented or private endpoints
  • Store or transmit sensitive data in unsecured form
  • Probe or scan Unity infrastructure
  • Integrate with systems that endanger data security

Unity may restrict API access if abuse is detected.

7. Monitoring & Enforcement

Unity may:

  • Monitor system usage for compliance
  • Audit merchant activity
  • Investigate suspicious transactions
  • Disable marketing tools
  • Freeze or delete accounts implicated in fraud
  • Suspend merchants violating this AUP
  • Report unlawful activity to authorities

Unity will take proportional action depending on severity.

8. Consequences of Violation

Violations may result in:

  • Warning notice
  • Temporary suspension
  • Permanent account closure
  • Removal of marketing access
  • Deletion or reversal of fraudulent points
  • Contract termination (merchant side)
  • Legal action or regulatory reporting

Unity will notify merchants or customers when action is taken where appropriate.

9. Reporting Issues

Customers or merchants may report violations or suspicious activity to:

📧 support@unity-loyalty.co.uk

📧 law@unity-loyalty.co.uk

Unity encourages responsible reporting of security vulnerabilities (coordinated disclosure).

10. Policy Updates

Unity may update this AUP:

  • Annually
  • When regulatory requirements change
  • After incidents or misuse cases
  • When platform features evolve

Users and merchants will be notified of major updates.

Download as Word document