Privacy Policy

Join a more exclusive club



Your privacy is important to us.


By using this website you are acknowledging that you have read and agreed to this privacy policy and terms of service and are consenting to the practices described here. This privacy policy is created to be compliant with the European General Data Protection Regulation (GDPR).

This policy will explain how Wrkit will use information provided by yourself and third parties.

References to “Wrkit”, ”we”, and ”our” means Wrkit, its subsidiaries including Affinity Financial Network Ltd, Affinity Financial Network UK Limited, Wrkit Ltd, POWR, My Trust Benefits, and any associated companies from time to time. (AFN Ltd and AFN (UK) Ltd are both wholly owned subsidiaries of Wrkit Ltd)



All Features

Wrkit provides software as a service to our clients to help them with authorised users' engagement with their organisations. The services are provided through Wrkit’s portal where authorised users can view and avail of one or more of our great tools. These tools include and are not limited to Lifestyle Savings, Learning, Wellbeing, Recognition, and Surveys. Different data is gathered and used in each of these tools as described below.

Where your organisation is the provider of these services, they are the data controller of respective personal data and Wrkit is engaged as a data processor acting under their authority. As we are not the controller of the data, we do not decide the legal basis of the processing.

If an authorised user has signed up to one of our portals which Wrkit has created on their own merit, then Wrkit will be the data controller and data processor.

Users can log onto our portal and view this privacy policy to see how their data is processed at all times.

We only collect data that is necessary for our business needs and no more. We collect personal data for personalisation, to create a user account to use the service and so we can contact you (newsletters, competitions, rewards, cashback, transactions etc.) If users don’t provide Wrkit with an email address, they will not be able to create a user account to log in. You or your employer/member group/recruitment business may supply us with your personal information to create an account.

We may use your data to advise your employer/member group/recruitment business of your registration, to notify you about changes to our services, terms and conditions and/or policies, to carry out our obligations arising from our Service Agreement with your employer/member group/recruitment business.  

We may use aggregated data to perform overall analytics. User clicks, open rates and general user habits, logs etc may also be stored for overall analytics or service issues.  

You can object to us using your data as described above but we will unable to provide our service to you.  

It is possible that member groups you are part of may sign up to our service. These groups may include trade unions. Be aware that membership of trade unions is considered special data under GDPR legislation. By signing up to our service you are consenting to us that you may be a member of a trade union.  

If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can give consent on his/her behalf to the processing of his or her personal data in accordance with this Privacy Policy.

We may also use your data to:

  • Process any products/services you have contacted us about
  • Administer any future agreements we may have with you
  • Fulfil any orders placed through our site
  • Record details of your visits to our site including but not limited to, traffic data, location data, web logs and other communication data, whether this is required for our own billing purposes or otherwise and the resources you access whilst visiting the Wrkit site
  • Conduct research on any information you provide during surveys, although this is at the user’s discretion
  • Conduct competition draws, when a user elects to enter a competition
  • Manage any communication notified by you or by a third party and for client services, research and statistical analysis
  • Send you push notifications if have opted in for them.



All Features:

First name, surname, email address, phone number (optional), postal address, gender, age bracket, wellbeing score, bank account number if you would like to claim your cashback (this is deleted once processed, last 4 digits of the IBAN number are kept for reference), form submissions, competition entries, IP address, Information which is provided to us by your Employer / Member Group.

The data you provide to us may be held on a computer, computer database, e-mail system, imaged documents, files, and letter and/or in any other way reasonable within the operation of a business.

We may store your data on our CRM system for various reasons such as you are a HR client of ours or have submitted a ticket to us through our site. This data is kept for as long as is necessary for our business needs as per our data retention policy.


Feature: Lifestyle Savings and Learning

Any payment transactions for Hot Deals are provided through our payment processing services provider; we do not possess or retain any payment information. These are PCI compliant.  


Feature: Survey

For our survey tool, a user’s answers will not be identifiable to that specific user. Only an overall score will be shown. If you create a survey, we ask that no personal or sensitive data be captured in survey answers.


Feature: POWR/Wellbeing

POWR will generally collect your personal information directly from you, when you interact with the service via our website or by email.

When you undertake POWR assessments, the answers to the assessment questions are not recorded but the overall assessment score is recorded. When you participate in a POWR behavioural management plan (BMP) or participate in post BMP course assessment, the information you provide and details of your interaction with POWR will be recorded. Your information is stored as an electronic record. Each time you interact with POWR new information may be added to your record.


Feature:Chrome Extension “Saving Spotter”

When using chrome extension we collect the following data:

  • Date and time when you browse
  • Anonymized IP address from which you browse
  • Aggregated domain names being browsed

We never share any data with 3rd parties and we only use the collected data for aggregated statistical analysis. You browsing habits, websites you browse, IP address from which you browse is anonymous and we can never identify your detailed information.



We may disclose your personal data to third parties:

If we or a substantial amount of our assets are acquired by a third party, your personal data may become one of the transferred assets

If we are under a duty to disclose or share your personal data in order to comply with a legal obligation, or in order to enforce or apply our Terms & Conditions and other agreements; or to protect the rights, property, or safety of ourselves, our customers, or others.

When considering a proposal, administering a communication, handling complaints or making decisions regarding Partner Providers, including whether to continue or to extend an existing arrangement.

when we share with participating merchants in order to fulfill your purchase transaction, shipping address and other personal information that may be required to complete such transaction;



We do not provide this data to any third party. We do not monitor your browsing preferences outside of our web sites.

Our site will record unique information from your computer such as your IP address, user agents and referring address.

We may monitor this information:

  • To help find problems on our website
  • To help to administer our website
  • To help to identify unique users of services.
  • To help gather broad demographic information to help us improve our site



Users have the right to fair processing. You can contact Wrkit at any time where relevant to:

  • Request access to information that Wrkit has on you
  • Correct any information Wrkit have on you
  • Delete information Wrkit has about you
  • Restrict/object to processing of your personal data
  • Your right to data portability


Users can edit their contact details by logging into their Wrkit portal and clicking on their profile. Users can fill out a form at the bottom of their profile page if they would like to make a subject access request, delete their profile, or object to processing.

Note where Wrkit is not the controller then the user shall submit these requests through their organisation / member group.

Wrkit will ensure that all Personal Information created, or collected by us directly from individuals is accurate and, where appropriate, kept up to date, and ensure that any Personal Information which is inaccurate or incomplete is erased or rectified in accordance with user’s or controllers instructions.

You may unsubscribe from our newsletters anytime by clicking the unsubscribe link at the bottom of any newsletter we send you.

If you would like to restrict/delete/correct/object to any processing please email



All Features

We will only keep your personal information for as long as is necessary for the purposes outlined in this Privacy Policy. Users have the right to have their personal data deleted except where we are required to retain it to satisfy legal, regulatory and accounting requirements.

When deleted, it will be removed from all live systems. Data will not be deleted from current backups. However, in case of a data restoration from backups, user data will not be restored in to live system. All backups going forward from this time will not include deleted user data. Backups will only be kept for as long as is a business necessity.

Where the provider terminates their contract with Wrkit or user requests deletion of profile, user data will be deleted as soon as possible. This will take up to 180 days so that we can process and pay pending cashback in user’s account if applicable.

Form submissions / competition submissions are kept for 3 months for legal purposes and are then deleted.

Within the Lifestyle Savings feature, Hot Deal transactions are kept for as long as is a business necessity in case of complaints, warranties and for accounting purposes.



Wrkit have appointed John Doherty as Data Protection Manager

If you feel that your data has not been processed fairly, then please contact your organisation / member group or email us at

Alternatively, you have the right to write a complaint to:


Data Protection Commissioner
Canal House
Station Road
R32 AP23 Co. Laois


Information Commissioner's Office
Wycliffe House
Water Lane



Your data will be stored with our hosting provider in the UK (Fail over site in Germany). Our hosting provider and their data centre are ISO27001 certified. Backups may sometimes be stored with Amazon AWS EU with prior encryption.

Where someone sends us a query, this will be stored as a ticket in our CRM system – this data will be stored in the EU. This is kept for as long as is a business necessity. Your query may be passed on to a relevant third party depending on your query or else we will use the data to respond to your request.



Wrkit treat IT security and data privacy as a priority. Any personal information that you provide to Wrkit or its subsidiaries will be treated with the highest standards of security and confidentiality and handled in accordance with Data Protection laws and the General Data Protection Regulation.

We take all reasonable technical and organisational measures to prevent the loss, misuse, unauthorised access, disclosure, or alteration of your personal data.

These measures include:

  • Applying various levels of access control to restrict access to your personal information to employees and contractors who require a level of access as part of their role.
  • Working with experienced, specialised consultants to help develop and maintain the security of our platforms.
  • Regularly reviewing and auditing our security and data protection policies and procedures to ensure a high level of operational security is maintained.


If we become aware that there has been a security breach and that your personal data may have been compromised, we will contact you as soon as reasonably practical and we will take steps to rectify the breach.



Wrkit will not use your personal data for automated decisions or profiling.



Lifestyle Savings and Learning

We provide users with hundreds of offers provided by third party merchants. Where this data is provided by us to the third party to deliver a service to you, the processing is covered by this Privacy Statement.  Where you provide your data directly to a third party, Wrkit have no involvement in that transaction or access to the data and the processing is the responsibility of the third party. While we try to link only to sites that share our high standards and respect for privacy, we encourage you to read the third party’s privacy statement and terms before you disclose personal information to them. An example of this would be using one of our discount codes we provide, where you leave our site to redeem the discount.

For Hot Deals we pass on the data to the hot deal provider, so they can fulfil the order and deliver the item to you. Hot deal providers must agree to our data protection terms and fill out a security due diligence questionnaire to our standards. When an order is completed by the end-user, the merchant is the controller of the personal data it has received. The merchant is therefore responsible for determining the purpose and means of processing such data.

For insrance provider forms and call back forms as a redemption method, user’s details will be sent when submitting the form to the offer provider. After this Wrkit have no involvement in the transaction as the third party will then contact you directly. We store these forms for a limited time. They are then deleted as per our data retention policy above. Users should be aware that this information is being sent to the third party and the user will be subject to their privacy policies and terms thereafter.  

For some offers on our custom pages, by clicking through to access this resource or service, you will be connecting with a selected third party provider. In some cases, they will receive your email address when you click through. This and any further data you might choose to share with a third party provider will be processed and stored in accordance with their own GDPR procedures - this data will not be stored or processed by Us.



When a user is rewarded on our recognition platform, they may claim a gift card of a certain monetary amount. We use third parties to fulfil these orders. Wrkit will perform a security due diligence on each provider that we use.


Agents, consultants and related third parties

Wrkit, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include delivering our communications, maintaining databases, analysing data, and processing payments. When we do retain another company, we only provide them with the information that they need to perform their specific function, and they may only use such information for our benefit and the purposes for which they were engaged.



In general, Wrkit does not transfer your personal data outside of the European Economic Area (‘EEA’) region. Any transfers outside the EEA region will be stated in this privacy policy. In particular:

If an authorised user redeems a reward in our recognition platform then we use third-party providers to fulfil these orders. One of our recognition card providers process their payments in the US. This company is covered under the EU-US Privacy Shield Framework. The transfer is necessary for the performance of a contract between you and us / controller when signing up to the service

Also your data may occasionally be transmitted, held or processed outside of the EEA by staff who are employed by Wrkit in another jurisdiction.



Wrkit sends newsletters to Lifestyle Savings and POWR users regularly. These contain selected discounts and savings from multiple third-party providers. Where applicable and we are controller, users must opt in and give their consent, so they can receive these emails. Users can unsubscribe from these emails by clicking the link which is available at the bottom of every newsletter. Please note that where you unsubscribe from our marketing communications, you will still be subscribed to our service but you will no longer receive our newsletters.

Wrkit will send transactional emails to users and sometimes to other persons. This includes gifting a hot deal, receiving rewards and recognition, cashback purchases, sending and responding to queries, follow-up communications, account-related emails to members, and POWR related emails. Sending, receiving and responding to transactional email communications is inherent in Wrkit’s Services.



We collect, use and share the data that we have in the ways described above:

  • For the performance of a contract you enter in to with us when you sign up to our service
  • For legitimate purposes necessary to fulfill our terms of service. These include maintaining your account info, data which is automatically logged, service data (service data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you).
  • In order to comply with contracts/requests, set out by your organisation / member group who is the controller.
  • Consistent with your consent, which you may revoke at any time, namely our newsletters.
  • As necessary to comply with our legal obligations.


Wrkit expects that organisations/member groups have received appropriate consent, according to applicable privacy laws, from your employees/members before transferring, in any format, personal information to us.



Our services are not intended for and may not be used by minors. “Minors” are individuals under the age of 16 (or under a higher age if permitted by the laws of their residence). Wrkit does not knowingly collect personal data from Minors or allow them to register. If it comes to our attention that we have collected personal data from a Minor, we may delete this information without notice. If you have reason to believe that this has occurred, please contact customer support.



Any changes to this Privacy Policy will be posted on this page and will be effective immediately, please ensure you visit this policy frequently.




Cookies are tiny data files that some websites place on your computer or other device when you visit. They’re used by many website owners, including all Wrkit sites. Cookies are linked to the machine you use to visit our site and not to you as an individual. Unless you login or provide personal data through your use of this website, no personal information is collected.

Cookies are commonly used by websites to remember some aspect of your current or previous visit. This could include things like the choices you’ve made or preferences you’ve chosen during your visit. Websites commonly do this in order to improve or tailor your current and future visits to that site or other related sites.

One example may be when you visit a site that you have been to before, that site may use a cookie to check what information you’ve looked at previously to get an idea of the topics that may be of interest to you.

The information stored in a cookie can only be read by the website that placed the cookie or other sites that it has agreed to share information with.



At Wrkit, we are committed to protecting your privacy and security adhering to latest regulatory requirements.



Our policy is to use cookies only to improve the way we do business with you or when they’re essential to the way the site works.

The types of activities we may use cookies for are to:

  • store details that help you to manage accounts and policies online, such as user login details
  • find out how people use our sites, such as how often they visit, which pages they go to, and which links they click on, so that we can improve our sites
  • help us to provide relevant information, such as details of products, services and other information that you may be interested in
  • store information about which media players you use so that any video content appears correctly.

We do not use any cookies to store any personal data or other data that could be used to identify you as an individual.



We use two types of cookies:

Session cookies - these are cookies that are only stored while you are visiting the site

Persistent cookies - these are cookies that are stored until an expiry date set by the website or in your browser.



Below are the categories of Cookies we collect:

Essential: These cookies are necessary for the website to function and cannot be switched off. They enable you to move around our websites and use our features

Functional: These cookies enable the website to provide enhanced functionality and personalisation. These Cookies permit us to "remember" you in-between visits.

Marketing: To help promote our services to you in different formats. Users may opt in to push notifications.

Analytics: Analytical cookies help us to understand how visitors gain access to or read our content and interact with our Services. We collect statistical information about our visitors. Click this link to view the Google Analytics Privacy Policy - Google Analytics Privacy Policy.



All online accounts and secure areas of our site that require you to log in need to use cookies. Whenever you create an online account, the terms for your account will require you to agree to the use of these cookies.

For details of these cookies see below or please email



You can turn off cookies in your browser settings. If you do turn them off, it is important to remember that you will not be able to use some of the features on the Wrkit website.

You can find out more about turning off cookies at the independent website

For more information on the development of user-profiles and the use of targeting/advertising Cookies, please see if you are located in Europe or if in the United States.

To opt out of being tracked by Google Analytics across all websites, visit

If you have any questions about specific cookies or our cookie policy, please email us at



Most web browsers allow some control of cookies through the browser settings. To make it easier for you we have created links how to manage your browser’s cookies. Find out how to manage cookies on popular browsers:

To find information relating to other browsers, visit the browser developer's website.



Below is a list of the cookies we use on our sites:







Session Cookie


Necessary cookie for user to be able to login to the website



Session Cookie


This cookie holds information about the version of the site that user is using at the moment (desktop or mobile site)



Persistent Cookie

1 year

This cookie checks if user gave consent for the cookies



Persistent Cookie

1 month

This cookie keeps necessary information If user wants to use auto login / remember me feature



Persistent Cookie

1 day

Access Control cookie that checks if user should visit some other information page before accessing the website



Persistent Cookie

2 years(Set by Google)

Registers a unique ID that is used to generate statistical data on how the visitor uses the website

Analytics (Third Party)


Persistent Cookie

1 day

Used by Google Analytics to throttle request rate

Analytics (Third Party)


Persistent Cookie

1 day

Registers a unique ID that is used to generate statistical data on how the visitor uses the website

Analytics (Third Party)


Persistent Cookie

1 day

This cookie holds information about which server is user using currently and is used to keep user on the same server (session persistence)



Persistent Cookie

999 days

If user opts in to Web Push Notification this cookie holds information about last visited URL (No personal Data)



Persistent Cookie

9999 days

If user opts in to Web Push Notification this cookie holds information about user push notification id (No personal Data)



Persistent Cookie

9999 days

This cookie holds information about user preference regarding Web Push Notifications (No personal Data)



Privacy Policy is part of our overall Terms and Conditions of the service which can found by clicking here