Effective Date: 03/09/2026 V2
 

1. Welcome to The Herd (Who We Are)

We are Llama Money Limited ("Llama", "we", "our", "us"), company no. 16929526, registered in England, Unit 14 The Boathouse Business Centre, 1 Harbour Square, Wisbech, Cambs, United Kingdom, PE13 3BH. We are building a money platform for students and young people. This policy covers our website, waitlist, marketing, and the Llama app.

One thing to know up front: Llama does not hold, move, or process your money. The app is an organising tool. We never collect bank details or card numbers, and any payments between you and your mates happen outside Llama through your own bank. This policy explains how we collect, use, and protect your personal data, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Llama is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

2. The Data We Collect

Account & Identity Data: name, email address, university or campus, country, your Herd Number, and profile picture if you add one. Lobby & Activity Data: lobbies you create or join, lobby names and images, promises (pledge amounts) you record, confirmations of payments made outside Llama, deal codes you redeem, and prize draw entries. Messages & Content: messages, images and other content you share in lobby chats. Technical Data: IP address, device type, operating system, app version, push notification token, time zone, and crash or diagnostic data. Usage Data: how you interact with the website and app (screens viewed, features used, clicks), and the source that brought you to us, such as a QR code, invite link, or referral code, including who referred you. Marketing Data: your marketing preferences and communication history with us.

3. How and Why We Use Your Data (Lawful Bases)

• To run the app for you (lawful basis: contract). Creating your account, running your lobbies, showing promises and confirmations to your lobby, delivering deals and draws, and sending essential service emails and notifications such as verification, invites, and security notices.

• To keep Llama safe and working (legitimate interests). Moderation and abuse handling, security, fraud prevention, fixing bugs, understanding usage so we can improve the product, and measuring which campaigns and referral links work.

• To market to you (consent). Promotional emails, campus drops, events and launch news, only where you have opted in (see Section 5).

• To meet our legal obligations (legal obligation). Record keeping, responding to lawful requests, and enforcing our Terms.

4. Lobby Visibility & Chat Access (Please Read)

Inside your lobby, activity is visible by design. Lobby members can see who has joined, what each member has promised, what has been confirmed as paid, and messages posted in the lobby chat. That transparency is how Llama keeps group money fair, so do not post anything in a lobby you would not want that lobby to see. Nothing is public to people outside your lobby unless you share it.

Can Llama see messages? Lobby chats are private between members, and we do not routinely read them. However, authorised Llama staff can access messages and content where necessary to investigate reports of abuse or rule breaking, provide support you have asked for, keep the platform secure, or comply with legal obligations. Access is restricted to authorised roles, used only for those purposes, and never for advertising or selling to anyone.

5. Marketing Consent & Communications

If you tick the marketing consent box, you agree to receive promotional emails, early access invites and marketing updates from Llama. You can withdraw consent at any time via the "Unsubscribe" link in any marketing email, in your app settings, or by emailing join@llamacard.co.uk with "Opt Out".

Opting out of marketing does not affect your place in the Herd, your Herd Number, or your account. You will simply stop receiving promotional messages. We will still send essential service messages (like security notices, verification emails, and lobby invitations you have triggered), because the app cannot run without them. Push notifications can be switched off any time in your device settings.

 

6. Who We Share Your Data With

We use trusted providers who process data on our behalf under contract: Verticode (app development, hosting and database), Wix (website and waitlist forms), HubSpot (CRM and email marketing), Mailjet (transactional email), and push notification delivery services. All are vetted for UK GDPR compliant safeguards. Where any provider processes data outside the UK, we ensure appropriate legal safeguards (such as approved contractual clauses) are in place.

Brand partners (the venues and brands behind our deals) receive aggregated, anonymised statistics only, for example how many codes were redeemed, and never your personal data.

We may also disclose data where required by law, or to protect Llama, our users, or others.

 

7. Data Security & Retention

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, and we limit access to those who need it.

We keep personal data only as long as necessary: account data for as long as your account is active; lobby content and messages while the relevant lobby and accounts exist; waitlist data until launch conversion or opt out; and limited records afterwards only where we have a legal reason (for example security logs or legal claims). You can delete your account at any time in the app (Settings, then Delete Account) or by emailing us. Deletion removes your personal data from active systems, subject to those limited legal retentions. If you unsubscribe from marketing, you come off our marketing lists immediately.

 

8. Your Legal Rights

Under UK data protection law you can: access a copy of your data; correct inaccurate data; delete your data (right to be forgotten); object to processing, including direct marketing; restrict processing in certain scenarios; and port your data to another service. To exercise any right, contact join@llamacard.co.uk and we will respond within one month.

You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to sort any concern first.

Our ICO number is - C1991363 

 

9. Cookies & Analytics

Our website uses essential cookies and basic analytics to understand traffic and improve the experience. Where non essential cookies are used, you will be asked before they are set.

 

10. Changes to This Policy

We will update this policy as Llama grows. For example, when in app payment features launch, this policy will be updated and you will be told before anything changes. The effective date at the top always shows the current version.

 

11. Contact Us

Questions, rights requests, or anything else : Email: join@llamacard.co.uk Address: Llama Money Limited, 9 Willow Road, Stamford, PE9 2FF