Loyalty Programme Terms And Conditions UK Retailers Need

Launching a points scheme, loyalty card or member discount can be a lovely way to bring customers back to your shop. It also gives you a reason to keep talking to your best customers without relying only on one off sales.

But once customers start earning rewards, the rules matter. If your terms are vague, you can end up with awkward disputes about expired points, changed rewards, duplicated accounts or whether someone agreed to receive marketing emails.

The good news is that loyalty programme terms don't need to be complicated. They just need to be clear, fair and written around how your retail business actually works.

Do You Need Loyalty Programme Terms And Conditions?

Yes, if customers can earn points, rewards, member only prices or perks, you should have loyalty programme terms and conditions.

Your terms are the rulebook for your scheme. They explain what customers can expect, what you're allowed to change, and what happens if something goes wrong.

For a small retailer, this can cover things like:

• Who can join the loyalty programme
• How customers earn points or rewards
• What points are worth
• Whether points can expire
• How member discounts apply
• What happens to returns and refunds
• When you can suspend an account for misuse
• How you can change or close the scheme
• What marketing messages customers may receive

Say Maya runs a small coffee shop in Manchester. She offers one point for every pound spent, and 100 points can be exchanged for a free hot drink. If Maya doesn't explain whether points expire, whether points are earned on gift cards, or what happens after a refund, she'll be left making decisions case by case. That can feel unfair to customers and messy for the team.

Written terms help you keep things consistent. They also give staff something clear to point to when a customer asks why they didn't earn points on a purchase.

What Legal Rules Apply To A Retail Loyalty Scheme?

A few UK rules can apply, mainly around consumer fairness, advertising, data protection and marketing.

The main legal areas to think about are:

• Consumer Rights Act 2015: your terms need to be fair and transparent when dealing with consumers.
• Digital Markets, Competition and Consumers Act 2024: the unfair commercial practices rules prohibit misleading actions and omissions around rewards, prices and important limits. The old Consumer Protection from Unfair Trading Regulations 2008 may still be relevant to conduct before 6 April 2025.
• CMA enforcement powers: the Digital Markets, Competition and Consumers Act 2024 also gives the Competition and Markets Authority stronger direct enforcement powers, including financial penalties for consumer law breaches from 6 April 2025.
• UK GDPR and the Data Protection Act 2018: you need a lawful basis for using customer personal data and a clear privacy notice.
• Privacy and Electronic Communications Regulations: these rules affect email, SMS and certain other direct marketing messages.
• CAP Code: advertising and promotions should be accurate, fair and not misleading.

Most small retail loyalty schemes are perfectly manageable from a legal perspective. The key isn't to promise more than you can deliver, hide limits in small print, or use customer data in ways customers weren't told about.

If your scheme is more complex, for example customers pay money into a wallet, buy credits, or pay a subscription for membership benefits, you should get tailored advice. Paid membership, stored value and financial style features can raise extra issues that a simple points card won't.

What Should Your Loyalty Programme Terms Include?

Your loyalty terms should include the practical rules customers need to understand before they join and while they use the scheme.

Who Can Join

Be clear about eligibility. For example, you might say the programme is only open to UK residents aged 18 or over, or that employees can't participate.

If you sell both online and in store, explain whether customers can use the same account in both places and how this fits with your online shop terms.

How Customers Earn Points Or Rewards

Spell out the basic earning rule. For example:

• 1 point for every £1 spent
• 1 stamp for each qualifying drink purchased
• 10% off for members on selected full price items

You should also say what doesn't qualify. Common exclusions include delivery fees, gift cards and gift card purchases, charity donations, heavily discounted items, staff purchases or purchases made before joining.

How Customers Redeem Rewards

Customers need to know how rewards are used. For example, can rewards be used online, in store, or both? Can they be used with other offers? Is there a minimum spend?

If rewards have no cash value and can't be exchanged for money, say so clearly.

Returns, Refunds And Cancelled Orders

Your terms should explain what happens if a customer returns an item after earning points.

For example, you might say points earned on a purchase will be deducted if the customer returns the item. If a reward was used on a returned item, you can explain whether the reward is restored to the account, refunded as points, or lost if the terms say so fairly.

Account Security And Misuse

Give yourself a clear right to suspend or close accounts if there's misuse. This can include fraud, multiple accounts created to gain extra joining bonuses, sharing codes publicly, using someone else's account without permission or reselling rewards.

The wording should be reasonable. You don't want a term that lets you cancel an account for any reason with no explanation, especially if customers have built up rewards.

Changes And Closure

Your business may need to change point values, reward options or how the scheme works. Your terms should explain when and how you can make changes, and how you'll tell customers.

This is one of the most important parts to tailor to your business. A generic template may give you a broad right to change anything at any time, but that can create fairness issues if customers lose rewards without proper notice.

Can You Change Rewards After Customers Have Earned Points?

Yes, you can usually change rewards, but your terms need to be fair, transparent and careful about points customers have already earned.

Retail schemes often need to change. Suppliers increase prices, margins shift, seasonal ranges end, and a reward that made sense last year may not work now.

The risk is changing the deal after customers have relied on it. If customers earn points because you advertised a particular reward, then you suddenly remove or devalue that reward without notice, they may reasonably feel misled.

To handle changes fairly, consider wording your terms to say:

• You may change available rewards, point values or earning rates from time to time.
• You'll give reasonable notice of significant changes where practical.
• Changes won't unfairly remove rewards already redeemed.
• If you're closing the scheme, customers will usually have a set period to redeem existing points.
• You may make urgent changes without advance notice if needed for fraud prevention, legal compliance or technical issues.

What counts as reasonable notice depends on the scheme. A small cafe changing its free drink reward may not need the same process as a national retailer with thousands of customers and high value points balances.

A practical approach is to give clear notice by email, in your app, on your website or at checkout. If the change materially affects earned points, give customers a fair chance to use them before the change takes effect.

Can Loyalty Points Expire In The UK?

Yes, loyalty points can expire in the UK, but the expiry rule should be clear, fair and easy for customers to find.

There isn't one general UK law that says all retail loyalty points must last for a specific number of months or years. Instead, your expiry terms are judged through consumer fairness and transparency.

A fair expiry term usually tells customers:

• When points expire, for example 12 months after they're earned or after 18 months of account inactivity
• Whether all points expire at once or on a rolling basis
• How customers can check their points balance and expiry date
• Whether you'll send reminders before expiry
• Whether expired points can ever be reinstated

A hidden expiry rule is where businesses can get into trouble. If your website heavily promotes earning rewards every time customers shop, but the expiry period is buried somewhere customers won't see it, that can create complaints and consumer law risk.

You should also be careful with very short expiry periods. A rule that points expire after a few weeks may be difficult to justify unless the scheme is clearly a short campaign or limited time promotion.

If you're running a stamp card, points app or birthday reward, put the expiry rule close to the offer itself. For example, 'Birthday reward valid for 30 days' is clearer than hiding the limit in a long terms page.

Do You Need Consent To Send Marketing To Loyalty Members?

Yes, you usually need either valid consent or a lawful soft opt in basis before sending loyalty members marketing emails or texts.

A loyalty programme often involves collecting names, email addresses, phone numbers, purchase history and preferences. That information is personal data, so UK GDPR and the Data Protection Act 2018 apply.

You should tell customers, in plain language:

• What personal data you collect
• Why you use it
• Whether you use purchase history to personalise offers
• Who you share it with, such as your email platform or loyalty app provider
• How long you keep it
• How customers can exercise privacy rights

For email and SMS marketing, the Privacy and Electronic Communications Regulations are the key rules. For individuals, you generally need consent unless the soft opt in applies.

The soft opt in may apply where:

• You obtained the customer's contact details during a sale or negotiations for a sale.
• You're marketing your own similar products or services.
• You gave the customer a clear chance to opt out when you collected their details.
• You give them a clear unsubscribe option in every marketing message.

If someone joins your loyalty programme without buying anything, the soft opt in may not fit neatly. In that situation, it's usually safer to ask for clear marketing consent.

Don't bundle marketing consent with acceptance of the loyalty terms. A customer should be able to join the scheme without being forced into unrelated marketing where consent is required. You can still send service messages that are genuinely about the loyalty account, such as password resets, points balance updates or expiry notices, but avoid turning those into promotional emails unless you have the right basis.

How Do You Prevent Account Misuse Without Upsetting Good Customers?

You prevent misuse by setting clear rules upfront and giving yourself a fair process to deal with suspicious activity.

Loyalty programmes can attract behaviour you didn't plan for, especially if the rewards are valuable. Customers may create multiple accounts, share referral or promotional giveaway codes on deal forums, use fake emails for joining bonuses or try to earn points on refunded purchases.

Your terms can reduce this risk by saying customers must:

• Provide accurate account information
• Keep login details secure
• Use only one account unless you allow otherwise
• Not transfer, sell or misuse rewards
• Not use the scheme for fraudulent, abusive or commercial purposes

You can also reserve rights to:

• Reverse points awarded in error
• Deduct points after refunds or cancellations
• Pause an account while you investigate suspicious activity
• Cancel rewards obtained through misuse
• Close accounts where there has been serious or repeated misuse

Try to build in judgement. A customer who accidentally created a duplicate account should be treated differently from someone creating 50 accounts to claim joining rewards.

It can help to have a simple internal process for your team: check the account history, look for a reasonable explanation, contact the customer if the issue isn't urgent, record the decision and apply the same approach consistently across similar cases.

How Do You Make Loyalty Terms Fair And Easy To Rely On?

You make loyalty terms fair by writing them in plain English, putting key limits where customers will see them, and avoiding one sided wording that goes further than your business needs.

Under the Consumer Rights Act 2015, consumer terms should be fair and transparent. A term can be at risk if it creates a significant imbalance between your business and the customer, to the customer's detriment, and isn't properly brought to their attention.

In practice, you should avoid terms that say you can:

• Cancel all points at any time for any reason, with no notice
• Change point values without telling customers
• Deny rewards even where the customer followed the rules
• Use customer data for broad purposes that weren't explained
• Apply hidden fees or unexpected conditions

Instead, make the customer journey clear. A good setup often includes:

• A short summary at sign up explaining the main earning, redemption and expiry rules
• Full loyalty programme terms customers can access easily
• A privacy notice linked or shown at the point of data collection
• A separate marketing consent tick box where needed
• Clear unsubscribe links in marketing emails
• Staff training so your team applies the rules consistently

Also check that your advertising matches your business terms and conditions. If your window sign says '20% off for members', but the discount excludes half your range, the exclusions should be clear before customers sign up or reach the till.

For online loyalty schemes, customers should be able to access the terms before joining, and key information shouldn't be hidden behind tiny text or unexpected pop ups after sign up.

What Documents Do You Need For A Loyalty Programme?

You usually need loyalty programme terms, a privacy notice and marketing consent wording, plus internal procedures for your team.

For a simple retail scheme, your document set may include:

• Loyalty Programme Terms And Conditions: the customer facing rules for joining, earning, redeeming, expiry, changes and misuse.
• Privacy Notice: explains how you collect and use customer personal data under UK GDPR.
• Marketing Consent Wording: clear opt in language for email or SMS marketing where consent is needed.
• Website Or App Terms: if customers manage points through an online account or app.
• Staff Guide: a short internal guide covering common customer questions, refunds and suspected misuse.

If you're using a third party loyalty platform, check their terms too. You should know where customer data is stored, who can access it, what happens if the platform has an outage, and how data is handled if you switch providers.

Templates can be useful as a starting point, but loyalty schemes vary a lot. Your terms work best when they reflect your actual rewards, point values, refund process, customer data flows and marketing plans.

Key Takeaways

• Loyalty programme terms and conditions help customers understand how points, rewards and member discounts work.
• UK consumer law expects your terms to be fair, transparent and not misleading.
• You can usually change rewards or set points expiry rules, but customers need clear notice and fair treatment.
• Marketing to loyalty members needs careful handling under UK GDPR, the Data Protection Act 2018 and PECR.
• Clear account misuse rules can protect your business while still treating genuine customers fairly.
• Your loyalty terms, privacy notice and sign up wording should all work together.

If you'd like help with loyalty programme terms, customer sign up wording, privacy notices and marketing consent, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.