RetailTech UK Smart Loyalty and Personalisation Platform

PECR consent for loyalty personalisation

• 1opt-in consent required for personalised offers based on purchase history (PECR -- electronic marketing requires prior consent),
• 2consent management platform (OneTrust -- consent recorded with timestamp, IP, consent version),
• 3consent granularity (separate consent for: personalised offers, third-party offers, analytics),
• 4consent withdrawal (customer withdraws consent -- personalisation stops, non-personalised offers shown instead). ICO DPIA (Data Protection Impact Assessment): loyalty programme profiling constitutes systematic monitoring of behaviour -- DPIA mandatory (GDPR Article 35).

ClickMasters DPIA for loyalty

pre-built template covering data flows, risks, and mitigations for loyalty personalisation.

Recommendation engine

• 1event tracking (purchase, browse, basket, redemption -- PECR consent gates tracking cookies),
• 2product embeddings (sentence-transformers -- product catalogue vectorised),
• 3collaborative filtering (customers who bought X also bought Y -- aggregate behaviour, no individual profiling without consent),
• 4real-time personalisation API (< 50ms -- product recommendations for app, email, and in-store kiosk),
• 5A/B testing (Statsig -- recommendation algorithm variants tested, uplift measured).

ICO AI fairness

loyalty personalisation AI tested quarterly for demographic bias (Equality Act 2010 -- personalised offers must not systematically disadvantage any protected group).

ClickMasters AI bias testing

demographic parity analysis on offer distribution across age, gender, and postcode decile.

Loyalty points

virtual currency (1 point = 0.5p redemption value).

FCA consideration

if loyalty points are freely redeemable for cash equivalent, FCA may classify as stored value (e-money) -- FCA Electronic Money Regulations 2011.

Legal analysis

loyalty points restricted to purchasing goods from the same retailer are NOT e-money (exemption in EMD2 -- limited network exemption).

Legal opinion obtained

ClickMasters refers all clients with loyalty programmes to specialist legal counsel for FCA stored value analysis.

Points processing

• AWS Aurora PostgreSQL -- atomic point ledger transactions (no point duplication, no point loss).
• Every point transaction audited (ISO 27001 data integrity requirement).

Loyalty programme accessibility

• app (iOS + Android -- React Native), web portal (React), and in-store kiosk (React + touch UI).
• WCAG 2.1

AA

• 1app -- iOS VoiceOver and Android TalkBack tested,
• 2web -- axe-playwright automated + NVDA manual,
• 3kiosk -- touch target minimum 44x44px, high contrast mode, audio option for visually impaired.

Equality Act 2010

retail kiosk is a service to the public -- inaccessible kiosk is a potential service barrier for disabled customers.

ClickMasters kiosk accessibility

first UK retail loyalty kiosk to achieve WCAG 2.1 AA -- all 840 stores.

Audio mode

TTS (text-to-speech) for all kiosk interactions -- activated by long press on home screen.