Privacy Policy
Last updated: January 13th 2026
This Privacy Policy explains how personal data is collected, used, disclosed, and protected when you access or use the KashFlash platform, including our website, mobile applications, and related services (collectively, the “Platform”).
The Platform is operated by ADVALOR LIMITED (“KashFlash”, “we”, “us”, or “our”).
By using the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The data controller responsible for your personal data is:
ADVALOR LIMITED
Incorporated in England and Wales
20 - 22 Wenlock Road, N1 7GU, London, United Kingdom
If you have questions about this Privacy Policy or our data practices, you may contact us at: privacy@kashflash.com
2. Scope and Users Worldwide
KashFlash is operated from the United Kingdom but is available to users worldwide.
We process personal data in accordance with:
the UK General Data Protection Regulation (“UK GDPR”);
the EU General Data Protection Regulation (“GDPR”), where applicable; and
other applicable data protection laws depending on the user’s location.
3. Personal Data We Collect
We may collect the following categories of personal data:
3.1 Information You Provide:
email address
username or account identifier
communications with support
verification information where required for fraud prevention
3.2 Automatically Collected Information:
IP address
device identifiers
device type, operating system, browser
timestamps and usage data
referral and attribution data
3.3 Activity and Reward Data:
completed offers or activities
Points earned, reversed, or forfeited
redemption history
fraud and abuse risk signals
We do not intentionally collect special category data (such as health, biometric, or political data).
4. How We Use Personal Data:
We process personal data for the following purposes:
operating and maintaining the Platform
creating and managing user accounts
tracking participation and reward eligibility
detecting, preventing, and investigating fraud, abuse, and misuse
enabling redemptions through third-party providers
communicating with users regarding accounts or support
complying with legal and regulatory obligations
5. Legal Bases for Processing
We process personal data based on one or more of the following legal grounds:
Performance of a contract (providing the Platform and rewards)
Legitimate interests (fraud prevention, security, analytics, service improvement)
Legal obligations (compliance with applicable laws)
Consent, where required (e.g. certain cookies or marketing communications)
6. Sharing of Personal Data
We may share personal data with:
infrastructure and hosting providers
analytics, attribution, and fraud-prevention partners
offer providers and advertisers (solely for tracking and validation purposes)
redemption and payout providers
professional advisers or authorities where required by law
We do not sell personal data.
7. Third-Party Partners and Services
The Platform integrates third-party services to provide offers, analytics, attribution, fraud detection, and redemptions.
These third parties may process personal data independently under their own privacy policies. KashFlash is not responsible for the data practices of third-party services.
8. International Data Transfers
Your personal data may be transferred to and processed in countries outside the UK or EEA.
Where such transfers occur, we implement appropriate safeguards, such as:
adequacy decisions;
standard contractual clauses; or
other lawful transfer mechanisms.
9. Data Retention
We retain personal data only for as long as necessary to:
provide the Platform;
fulfil the purposes described in this Policy;
comply with legal obligations;
resolve disputes; and
enforce our Terms of Service.
Retention periods may vary depending on the type of data and applicable requirements.
10. Your Rights
Depending on your location, you may have the right to:
access your personal data
correct inaccurate data
request deletion of data
restrict or object to processing
request data portability
withdraw consent where processing is based on consent
Requests can be submitted via privacy@kashflash.com
11. Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
However, no system is completely secure, and we cannot guarantee absolute security.
12. Cookies and Tracking Technologies
We use cookies and similar technologies to:
operate the Platform;
analyse usage;
prevent fraud; and
improve performance.
You may manage cookies through your browser settings. Where required, we obtain consent before using non-essential cookies.
13. Children’s Privacy
The Platform is not intended for individuals under 18 years of age.
We do not knowingly collect personal data from minors.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Where changes are material, we will take reasonable steps to notify users through the Platform. Continued use of the Platform constitutes acceptance of the updated Policy.
15. Contact
For privacy-related questions or requests, contact:
privacy@kashflash.com