Recast.Rewards ← Back to Home
Legal

Privacy Policy

Effective Date: April 6, 2026  ·  Last Updated: April 6, 2026  ·  Data Controller: Recast Designs

Table of Contents

  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. Legal Basis for Processing
  5. How We Share Your Information
  6. Data Retention
  7. Cookies and Tracking
  8. Third-Party Services
  9. Data Security
  10. Your Rights
  11. Children's Privacy
  12. International Data Transfers
  13. Changes to This Policy
  14. Contact Us

✅ Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how we protect it. We do not sell your personal data to third parties.

1. Who We Are

Recast Rewards is operated by Recast Designs ("we," "us," or "our"). This Privacy Policy applies to all personal data collected through the Recast Rewards platform at recast-rewards.web.app ("Platform"), including during account registration, referral submission, and use of platform features.

Recast Designs acts as the data controller for personal data collected through the Platform. For any privacy-related enquiries, contact us at info@recastdesigns.com.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account or use the Platform, we collect:

  • Identity Data: First name, last name
  • Contact Data: Email address, phone number
  • Professional Data: Country of residence, LinkedIn profile URL, referral strategy description
  • Referral Submission Data: Business names, contact persons, contact information, and contextual details of businesses you refer
  • Communications: Messages sent via the Partner Network community chat

2.2 Information Collected Automatically

When you access the Platform, we and our service providers may automatically collect:

  • Technical Data: IP address, browser type and version, device type, operating system
  • Usage Data: Pages visited, features used, time and duration of sessions, referring URLs
  • Authentication Data: Login timestamps and session tokens managed by Firebase Authentication

2.3 Information About Referred Third Parties

When you submit a referral, you provide us with information about the referred business and contact person. You represent that you have a lawful basis to share this information with us and that you have informed or are authorised to share the contact details of the referred party.

CategoryExamplesSource
IdentityName, display nameYou, directly
ContactEmail, phone, countryYou, directly
ProfessionalLinkedIn URL, referral approachYou, directly
FinancialCommission amounts, payout recordsGenerated by platform
ReferralBusiness names, contact detailsYou, directly
TechnicalIP, browser, deviceAutomated collection
UsageFeature interactions, session dataFirebase Analytics

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Account Management: To create and manage your partner account, verify your identity, and maintain your dashboard
  • Referral Processing: To receive, track, and process your referral submissions through the sales pipeline
  • Commission Calculation and Payment: To calculate commissions owed, maintain earnings records, and process payouts
  • Platform Improvement: To understand how the Platform is used and improve its features, performance, and user experience
  • Communications: To send you account notifications, commission updates, and important platform announcements
  • Security and Fraud Prevention: To detect, investigate, and prevent fraudulent referrals, unauthorised access, and other prohibited activities
  • Legal Compliance: To comply with applicable legal obligations, respond to legal processes, and enforce our Terms of Service
  • Customer Support: To respond to your enquiries and resolve disputes

We will not use your personal data for any purpose that is incompatible with the purposes set out above without obtaining your prior consent.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contract Performance: Processing necessary to fulfil our obligations under the Partner Agreement and these Terms
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations
  • Consent: Where we rely on your consent (e.g., for optional communications), you may withdraw it at any time without affecting the lawfulness of prior processing

5. How We Share Your Information

We do not sell, rent, or trade your personal data. We may share your information in the following limited circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who process data on our behalf and under our instructions, including:

  • Google Firebase — Authentication, database storage (Firestore and Realtime Database), and hosting
  • Google Analytics — Aggregated usage analytics

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.2 Business Operations

Referral submission data (business names, contact details) is shared internally within Recast Designs' sales team for the purpose of following up on your referral. Your identity as the referring partner is maintained in our records.

5.3 Legal Requirements

We may disclose your data where required by law, court order, or government authority, or where we believe disclosure is necessary to protect our rights or the safety of others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of Recast Designs, your data may be transferred to the successor entity, subject to the same privacy protections.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy and as required by applicable law:

  • Active account data: Retained for the duration of your account and for a period of 3 years after account closure to support commission disputes or legal claims
  • Referral and commission records: Retained for a minimum of 5 years for financial record-keeping purposes
  • Communication data (community chat): Retained for up to 12 months and subject to deletion by the platform administrator
  • Usage and technical data: Typically retained for 13 months by Google Analytics

When data is no longer required, we securely delete or anonymise it.

7. Cookies and Tracking Technologies

The Platform uses the following types of cookies and similar technologies:

  • Essential Cookies: Required for authentication and session management. These cannot be disabled without breaking core platform functionality.
  • Preference Cookies: Store your language preference (English or Arabic) using localStorage.
  • Analytics Cookies: Google Analytics uses cookies to collect aggregated, anonymised usage data to help us improve the Platform.

By using the Platform, you consent to the use of essential and preference cookies. You can opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-on.

8. Third-Party Services

The Platform is built on Google Firebase infrastructure. By using the Platform, your data is processed through Firebase services governed by Google's privacy policies. We encourage you to review:

  • Google Firebase Privacy and Security: firebase.google.com/support/privacy
  • Google Privacy Policy: policies.google.com/privacy

We are not responsible for the privacy practices of third-party services linked from the Platform. We recommend reviewing their policies independently.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

  • HTTPS encryption for all data transmitted between your device and the Platform
  • Firebase Authentication for secure account access and session management
  • Firestore and Realtime Database security rules that restrict data access to authorised users only
  • Role-based access controls limiting admin access to authorised personnel

While we take data security seriously, no system is completely immune from breaches. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by law.

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data, subject to legal retention requirements
  • Right to Restriction: Request that we restrict how we process your data in certain circumstances
  • Right to Data Portability: Request your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@recastdesigns.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

11. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without verified parental consent, we will delete that data promptly.

If you believe a minor has registered on the Platform, please notify us immediately at info@recastdesigns.com.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries where Google Firebase infrastructure operates. These countries may have different data protection laws.

Where such transfers occur, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms to ensure your data is protected to an adequate standard.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and notify active partners by email where required.

Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or how we handle your data, please contact:

  • Data Controller: Recast Designs
  • Email: info@recastdesigns.com
  • Platform: recast-rewards.web.app

We are committed to resolving privacy concerns promptly and transparently.

© 2026 Recast Designs. All rights reserved.
Home Terms of Service Partner Agreement