Iterum privacy notice

Iterum by Fidus is a digital loyalty service for local businesses. This page describes how we process the data of people who sign up for an Iterum loyalty card and of people who use the Iterum panel.

Who processes the data

Iterum is provided by FIDUS S.R.L., registered at Via Filippo Corridoni 25, 00195 Roma (RM), Italy, VAT/tax code 18535911004, REA RM-1790929, PEC fidus.srl@legalmail.it. For the data of customers who join a card, the data controller is the business that offers the card, and FIDUS S.R.L. processes that data on its behalf as data processor (Art. 28 GDPR). FIDUS S.R.L. is the controller for panel account data, for Iterum news sent to people who chose to receive it and for the campaign measurement described below. For any privacy question, email privacy@fidus.media.

Data and purposes

For the loyalty card we process the card identifiers, the progress status, the visits, points and rewards recorded by the staff and the Wallet technical data needed to deliver and update the card. First name, last name, date of birth and a recovery contact are there only if the customer chooses to enter them. For the panel we process the name, email, role and sign-ins of the people who use it, and the mobile number of the person who opens the account, which we use only to contact them and help with the account. For the subscription we process the buyer's billing details: name or company name, address, VAT number or tax code (codice fiscale), recipient code or PEC. They are needed to issue the electronic invoice, which the law requires (Art. 6(1)(c) GDPR). The data is used to create the card, run the programme, provide the service to the business and keep operations secure.

Customer choices

Sign-up can be pseudonymous and personal details are optional. Consent to news and offers from the business and consent to news from Iterum are two separate boxes, never pre-ticked: refusing them never stops anyone from using the card, and each can be withdrawn at any time by removing the tick on the card; for Iterum's news, also by emailing privacy@fidus.media.

How long we keep the data

A customer's data is kept for 24 months from the last use of the card, then deleted or anonymised automatically: the card is deactivated and the name, date of birth and consents are removed. The visits, points and rewards stay in the business's totals without the name, and so does the record of the consents given, as proof of consent. The customer can ask for deletion at any time. Invoices and the billing details of whoever buys the subscription are kept for 10 years, as the law requires (Art. 2220 of the Italian Civil Code).

Your rights

You can ask to access, correct, delete, restrict or port your data, or object to its processing. For card data, contact the business that offers the card; for data FIDUS S.R.L. processes as controller, email privacy@fidus.media. You can also complain to the Italian data protection authority (www.garanteprivacy.it).

Measuring Iterum campaigns

If you choose marketing cookies, Meta Pixel may receive a campaign-page visit and a confirmed free-trial start. For a new subscriber, after Stripe confirms the first successful nonzero automatic subscription payment, our server may also send Meta a Purchase event with the amount and currency. This server event includes a SHA-256 hash of the account email, Meta browser or click identifiers when available, the browser user agent from checkout, a checkout page URL and a stable event ID. We do not send Meta raw email, phone number or card details. Separately, when both analytics and marketing are chosen, Iterum may retain in its own funnel a category for the public entry page, a coarse referral class and the entry day to connect a trial to content in aggregate; for these three new dimensions, the browser context does not retain the full referrer or URL and they are not sent to Meta. The new browser context expires after 30 days; account-linked server attribution follows its existing expiry and withdrawal rules. A previous cookie choice does not authorize this new server reporting; you must choose again. You can withdraw marketing consent in cookie preferences; we then remove unsent attribution and queued events for your signed-in account. Withdrawal cannot undo data Meta already received. For questions, email privacy@fidus.media.

Meta Privacy Policy

Demo bookings and Meta

When you book a demo on iterum.fidus.media/demo, our server tells Meta Platforms Ireland (Conversions API) that a demo was booked, to measure and improve our ads. We send email, phone, first name, last name, city and country as SHA-256 hashes, plus the browser IP address and user agent, the ad click identifier when present and a stable booking identifier. After the call we may also send the outcome (attended, qualified, no-show, not interested). We do not send data in clear text or your answers to the questions. You accept this when, booking the demo, you accept this notice; we also rely on our legitimate interest in measuring advertising (Art. 6(1)(f) GDPR). You can object at any time by emailing privacy@fidus.media: from then on we send no further events for your booking. Objecting does not undo data Meta has already received.

Google Ads demo and trial measurement

If you allow marketing cookies and arrive from a Google ad, the Google Ads tag can read the ad click identifier and store attribution cookies. For trial measurement, we use the landing time saved in your browser for up to 30 days. When you confirm a demo booking or start a trial that Stripe has verified with a plan and valid payment method, we send Google Ads an event with an opaque identifier to prevent double counting. We do not send your name, phone number, email, form answers or payment details. You can withdraw consent in cookie preferences.

How Google uses data from partner sites

Session recording on the public pages

On Iterum's public pages (home page, guides and information pages, demo page), only with your consent to analytics cookies, FIDUS S.R.L. records in pseudonymous form how the page is used (clicks, scrolling, pointer movements, pages viewed, technical errors) to see where the page is unclear and improve it. The legal basis is consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time in the cookie preferences without any effect on using the site. The tool is OpenReplay, software we install and run ourselves on our own server in the European Union (ux.fidus.media). Form fields, and therefore the name, phone, email and business name you enter when booking the demo, are masked in the browser and never enter the recording. Recordings are not used for advertising or sent to Meta, are not used for automated decisions and are deleted after 30 days at most. To exercise your rights, email privacy@fidus.media. The technical details are in the cookie policy.

Section updated on 16 October 2026.

Session recording in the panel

When business owners, managers and staff, and FIDUS S.R.L. administrators, use the Iterum panel after signing in (including the counter web app), FIDUS S.R.L. records how the panel is used: clicks, taps, scrolling, pages viewed, browser technical errors and any failed requests, without their content. The purposes are support for the people who use the panel, finding and fixing errors, and product quality. The legal basis is our legitimate interest in providing a service that works and in assisting the people who use it (Art. 6(1)(f) GDPR); this recording does not depend on the analytics cookie choice. A recording is linked to an internal account identifier, the role and the business, never to a name, email or phone number. Whatever is typed into fields is masked in the browser, and so are the email addresses and numbers shown on the pages; the pages and lists that show the business's customers (customers and their records, recent activity, message recipients, exports, privacy requests, payments and invoices) are hidden entirely and never enter the recording. The tool is the same OpenReplay, installed and run by us on our own server in the European Union (ux.fidus.media). Recordings are not shared with the business, are not used for advertising, for automated decisions or to assess staff work, and are deleted after 30 days at most. If the browser sends Do Not Track or Global Privacy Control we do not record. You can object at any time by emailing privacy@fidus.media.

Section added on 17 October 2026.

Technical error reports

When an Iterum page, the panel or our server runs into a technical error, FIDUS S.R.L. collects an error report: the type and message of the error, the place in the program where it happened, the page address without its parameters, the browser and operating system, the approximate country and city (which the provider infers from the connection, without keeping the IP address), the last technical actions on the page (pages opened, buttons pressed, requests to the server without their content) and, if one of the session recordings described above is running during that visit, its code, so that we can review it on our own server. The report does not contain the IP address, cookies, what you type into fields, or the parameters and content of requests; card codes and personal links (enrolment, invites, counter tags) are masked before sending. The purposes are finding and fixing faults and keeping the service secure; the legal basis is our legitimate interest in providing a service that works (Art. 6(1)(f) GDPR). The tool stores nothing on your device and does not depend on the cookie choice. Reports are kept on our behalf by a provider specialised in error monitoring, acting as a processor (Art. 28 GDPR), on servers in the European Union, and are deleted after 90 days at most. They are not used for advertising or for automated decisions. The Iterum apps for iPhone and Android send error reports too: what they contain is explained in the “Mobile apps” section. You can object at any time by emailing privacy@fidus.media.

Section added on 17 October 2026, updated on 22 October 2026.

Mobile apps

The Iterum apps for iPhone and Android are for business owners and staff, not for card holders. To send you notifications we store an installation identifier created by the app, the Apple (APNs) or Google (Firebase Cloud Messaging) notification token, the system (iOS or Android), the app version and the language. Notifications travel through these services and only concern the business (for example a new customer, a reward redeemed, the weekly summary): never a customer’s personal data. The «Counter shift» (a Live Activity on iPhone, an ongoing notification on Android) only receives the location’s visit and reward totals. The camera and the NFC reader are used only to read the customer’s QR or NFC card at the counter: reading happens on the phone, images are neither stored nor sent, and our server only receives the code that was read, just as when a card is stamped from the panel. If an app closes because of an error, freezes, or an action fails unexpectedly, it sends an error report under the same rules as the “Technical error reports” section (same purposes and legal basis, same provider with servers in the European Union, deleted after 90 days at most): the type and message of the error, the place in the program where it happened, the names of the last screens opened, the phone model, the system and app versions, the phone’s technical state at that moment (for example free memory) and the approximate country and city. The report does not contain the IP address, the installation identifier, your account or any customer data; card codes and personal links are masked on the phone before sending. Face ID, Touch ID and fingerprint unlock are handled by the operating system: Iterum only receives the result, never biometric data. You can turn notifications off in the phone’s settings or by category in your account; signing out deletes the token. You can delete your account in the app (Account, then Delete account) or, if you can no longer sign in, at iterum.fidus.media/delete-account: access ends at once and the account’s personal data is erased after 30 days, except what the law requires us to keep, such as billing records (10 years).

Section updated on 22 October 2026.

The Italian version prevails.