Privacy Policy

Last updated: January 13th 2026

This Privacy Policy explains how personal data is collected, used, disclosed, and protected when you access or use the KashFlash platform, including our website, mobile applications, and related services (collectively, the “Platform”).

The Platform is operated by ADVALOR LIMITED (“KashFlash”, “we”, “us”, or “our”).

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.


1. Data Controller

The data controller responsible for your personal data is:

ADVALOR LIMITED

Incorporated in England and Wales

20 - 22 Wenlock Road, N1 7GU, London, United Kingdom

If you have questions about this Privacy Policy or our data practices, you may contact us at: privacy@kashflash.com


2. Scope and Users Worldwide

KashFlash is operated from the United Kingdom but is available to users worldwide.

We process personal data in accordance with:

  • the UK General Data Protection Regulation (“UK GDPR”);

  • the EU General Data Protection Regulation (“GDPR”), where applicable; and

  • other applicable data protection laws depending on the user’s location.


3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Information You Provide:

  • email address

  • username or account identifier

  • communications with support

  • verification information where required for fraud prevention

3.2 Automatically Collected Information:

  • IP address

  • device identifiers

  • device type, operating system, browser

  • timestamps and usage data

  • referral and attribution data

3.3 Activity and Reward Data:

  • completed offers or activities

  • Points earned, reversed, or forfeited

  • redemption history

  • fraud and abuse risk signals

We do not intentionally collect special category data (such as health, biometric, or political data).


4. How We Use Personal Data:

We process personal data for the following purposes:

  • operating and maintaining the Platform

  • creating and managing user accounts

  • tracking participation and reward eligibility

  • detecting, preventing, and investigating fraud, abuse, and misuse

  • enabling redemptions through third-party providers

  • communicating with users regarding accounts or support

  • complying with legal and regulatory obligations


5. Legal Bases for Processing

We process personal data based on one or more of the following legal grounds:

  • Performance of a contract (providing the Platform and rewards)

  • Legitimate interests (fraud prevention, security, analytics, service improvement)

  • Legal obligations (compliance with applicable laws)

  • Consent, where required (e.g. certain cookies or marketing communications)


6. Sharing of Personal Data

We may share personal data with:

  • infrastructure and hosting providers

  • analytics, attribution, and fraud-prevention partners

  • offer providers and advertisers (solely for tracking and validation purposes)

  • redemption and payout providers

  • professional advisers or authorities where required by law

We do not sell personal data.


7. Third-Party Partners and Services

The Platform integrates third-party services to provide offers, analytics, attribution, fraud detection, and redemptions.

These third parties may process personal data independently under their own privacy policies. KashFlash is not responsible for the data practices of third-party services.


8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK or EEA.

Where such transfers occur, we implement appropriate safeguards, such as:

  • adequacy decisions;

  • standard contractual clauses; or

  • other lawful transfer mechanisms.


9. Data Retention

We retain personal data only for as long as necessary to:

  • provide the Platform;

  • fulfil the purposes described in this Policy;

  • comply with legal obligations;

  • resolve disputes; and

  • enforce our Terms of Service.

Retention periods may vary depending on the type of data and applicable requirements.


10. Your Rights

Depending on your location, you may have the right to:

  • access your personal data

  • correct inaccurate data

  • request deletion of data

  • restrict or object to processing

  • request data portability

  • withdraw consent where processing is based on consent

Requests can be submitted via privacy@kashflash.com


11. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

However, no system is completely secure, and we cannot guarantee absolute security.


12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • operate the Platform;

  • analyse usage;

  • prevent fraud; and

  • improve performance.

You may manage cookies through your browser settings. Where required, we obtain consent before using non-essential cookies.


13. Children’s Privacy

The Platform is not intended for individuals under 18 years of age.

We do not knowingly collect personal data from minors.


14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Where changes are material, we will take reasonable steps to notify users through the Platform. Continued use of the Platform constitutes acceptance of the updated Policy.


15. Contact

For privacy-related questions or requests, contact:

privacy@kashflash.com