Privacy policy
In short. We collect only what Loop needs to work. We do not sell your information, we do not show ads from other companies, and we do not track you across other apps or websites. Shops you follow or use can see your name and what you do with them. You can delete your account at any time.
1. Who we are
Loop is a service run by Yone IT Ltd, a company registered in England and Wales (company number [company number]), registered office [registered office address]. Loop is a product of Yone IT Ltd offered under the Custoo name. We are the "controller" of your personal information for the purposes of UK data protection law. We are registered with the Information Commissioner's Office (ICO), registration number [ICO registration number].
Questions about this policy or your information: loop@custoo.co.uk.
2. Who this covers
This policy covers people who use the Loop app or website as customers (following shops, claiming offers, collecting stamps), and people who use Loop for a shop (owners, managers and team members). Loop is for use in the United Kingdom and for people aged 16 or over.
3. What we collect, why, and our legal basis
| What | Why we use it | Legal basis |
|---|---|---|
| Account details: your name, email address and password (we keep a scrambled version of the password, never the password itself). | To create and run your account, sign you in, and send password-reset emails. | Contract (providing Loop to you) |
| What you do in Loop: shops you follow, snooze or hide, posts you save, hide or report, offers you claim and events you register for (with their codes), loyalty cards, stamps and rewards. | To make the features work, show you the right things, and let shops honour your codes and rewards. | Contract |
| What you have seen: that a post was shown to you and for how long, and whether a sponsored post was shown or opened. | To give shops a count of how many people saw their posts, to charge and limit sponsored posts fairly, and to stop showing you the same thing again. | Legitimate interests (running and measuring the service) |
| Your approximate location, if you allow it on your phone. It is sent with a request to put nearby shops first. We do not store it. If you type a postcode instead, we use it to find that place and do not keep it. | To show what is near you. | Consent (your phone's location permission) |
| Photos and videos you choose or take for a shop's posts or profile (shops only). | To show them in the posts and profile you create. | Contract |
| Camera use to scan codes or take pictures, and microphone use when filming a video for a post. | Scanning happens on your phone and the picture is not stored by us. Posts you make are stored. | Consent (your phone's permission) |
| Notification settings and device token, once notifications are available and you allow them. | To send notifications you have asked for. | Consent |
| Shop business details (shop owners): shop name, category, address, postcode, phone, website, opening hours, description, team members and their roles. | To show your shop to customers and run the dashboard. Most of this is public by design. | Contract |
| Billing details (shop owners): your plan, add-ons, credits, and invoice records. Card details are collected and held by Stripe; we never see your card number. Stripe tells us the status of your payments and subscription. | To take payment, apply the right plan, issue invoices and keep records. | Contract and legal obligation (accounting records) |
| Technical information: IP address, app version and device type, and errors, in our server records. | To keep Loop secure, stop password guessing and misuse, and fix faults. | Legitimate interests (security and reliability) |
| Messages and reports: emails you send us and reports you make about a post. | To answer you and to review reported content. | Legitimate interests and, for legal claims, legal obligation |
We do not make decisions about you by automated means that have legal or similarly significant effects. We do not send marketing emails. If we ever do, we will ask first.
4. What shops can see about you
Loop connects customers and shops, so shops can see some information about you. When you follow a shop, claim its offer, register for its event, or collect its stamps, that shop (its owner, managers and team members) can see:
- your name and initials;
- when you followed and whether you have notifications on for that shop;
- which of its offers or events you claimed or attended, and your codes;
- your stamps and rewards at that shop.
Shops cannot see your email address, your location, or anything about other shops. A shop only sees counts of how many people saw its posts, not who. Each shop decides for itself how it uses what it sees, and must follow data protection law (see our terms for shops). If you do not want a shop to see your name, do not follow it or claim its offers, or delete your account.
5. Who else we share information with
We do not sell your information. We share it only with:
- Shops, as described above.
- Service providers who work for us: Microsoft (Azure) for hosting, file storage and sending our emails; Stripe for shop payments; postcodes.io (we send it a postcode, nothing else, to find a place on the map); and, once notifications are available, Apple and Google (and Firebase) to deliver them. They may only use the information to provide their service to us.
- Professional advisers and authorities, such as our accountants, lawyers, insurers, the police or a regulator, where we are required to by law or to protect people or our rights.
- A buyer, if the business is ever sold, on the same terms as this policy.
6. Where your information is kept
Loop's servers are in the United Kingdom (Microsoft Azure, UK South). Some of our providers, such as Stripe and Microsoft, may handle limited information outside the UK. When they do, it is protected by the UK's approved safeguards (an adequacy decision, or the International Data Transfer Agreement or UK Addendum).
7. How long we keep it
| Information | How long |
|---|---|
| Your account and what you do in Loop | Until you delete your account, then it is removed or made anonymous (see Delete your account) |
| Which posts were shown, and sponsored post records | Up to 24 months |
| Server records (IP address, errors) | Up to 90 days |
| Reports about posts | Up to 24 months after they are resolved |
| Emails you send us | Up to 24 months after we last wrote to you |
| Invoices and payment records (shops) | 6 years, as the law requires for accounts |
| Backups | They expire on a rolling basis, and deleted accounts are not restored from them |
Stamps, codes and offers you claimed stay counted in a shop's totals after you delete your account, but without your name, so they no longer point to you.
8. Your rights
You have the right to: be told what we hold about you and get a copy; have wrong information corrected; have your information deleted; ask us to limit or stop using it; object to use based on legitimate interests; receive your information in a portable format; and withdraw consent at any time (for example by switching off location or notifications in your phone's settings). These rights do not apply in every case, but we will tell you if we cannot act and why.
To use a right, email loop@custoo.co.uk. We will reply within one month. You can delete your account yourself in the app at any time. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we would like the chance to put it right first.
9. How we protect it
Loop uses encrypted connections (HTTPS), keeps passwords only in scrambled form, limits who can reach the systems, and limits sign-in attempts. No system is perfectly secure. If a breach seriously affects you, we will tell you and the ICO as the law requires.
10. Children
Loop is not for anyone under 16. If you think a child has made an account, email loop@custoo.co.uk and we will delete it.
11. Cookies
The Loop website and shop dashboard use only the small files needed to keep a shop owner signed in and remember which shop they are working in. These are strictly necessary, so no consent banner is shown. We do not use advertising or analytics cookies, and we do not track you across other websites. If that changes, we will ask first. The app does not use cookies.
12. Changes to this policy
If we change this policy in a way that matters to you, we will tell you in the app or by email before it takes effect. The version and date are at the top of this page.