Privacy Policy - LoopaLoop.uk

Last update: March 2026

1. WHO WE ARE

LoopaLoop.uk is a digital platform that facilitates the exchange of used items between private individuals through a system of internal credits called "LoopaPoints".

  • Data Controller: LoopaLoop
  • Privacy Contact: privacy@loopaloop.uk

2. WHAT DATA WE COLLECT

Data you provide to us

  • Registration: name, email, password
  • Profile: photo, presentation, preferences (optional)
  • Listings: item photos, descriptions, category, LoopaPoints value, collection area
  • Payments: data required for subscriptions and LoopaPoints purchases (managed by certified external providers)
  • Communications: messages exchanged with other users to organize trades

Data collected automatically

  • IP address, browser type, and device type
  • Browsing data and platform usage
  • Location information (only if authorized)

What we DO NOT collect

We do not request or process sensitive data (ethnic origin, political opinions, religion, health, etc.). We invite you not to include such information in your listings or profile.

3. WHY WE PROCESS YOUR DATA

We use your data to:

PurposeLegal Basis
Create and manage your accountPerformance of contract
Publish and manage your listingsPerformance of contract
Facilitate trades and communications between usersPerformance of contract
Manage the LoopaPoints system and transactionsPerformance of contract
Provide support and handle reportsPerformance of contract
Comply with tax and accounting obligationsLegal obligation
Ensure platform securityLegitimate interest
Send promotional communications (only with consent)Explicit consent

4. HOW WE PROCESS YOUR DATA

Processing is carried out using computer and telecommunications tools, adopting adequate security measures to protect data from unauthorized access, loss, or disclosure.

Your data is accessible only to:

  • Authorized personnel of the Controller
  • External service providers appointed as Data Processors (e.g., hosting, payments, email)
  • Other users, limited to data necessary for trades (name, profile photo, approximate area, reviews)

5. WITH WHOM WE SHARE DATA

Personal data is not sold or transferred to third parties for marketing purposes.

They may be communicated to:

  • Technical service providers who support us in managing the platform (always in compliance with GDPR)
  • Competent authorities, only if required by legal obligations or to prevent illegal activities
  • Other users, limited to information necessary to enable trades (e.g., name, area, reviews)

Any transfers of data outside the European Economic Area or UK take place in compliance with the guarantees provided by the GDPR.

6. HOW LONG WE RETAIN DATA

Type of dataRetention period
Active account dataFor the entire duration of the account
Data after account closureUp to 24 months (for legal obligations or litigation)
Billing data7 years (UK tax obligations)
Messages and chats60 days after the conclusion of the trade
ReviewsFor the duration of the account + 24 months
Data for marketingUntil withdrawal of consent

You can request the deletion of your data at any time, subject to legal obligations that require its retention.

7. YOUR RIGHTS

Under the GDPR and UK Data Protection Act, you have the right to:

  • Access your personal data and receive a copy
  • Rectify inaccurate or incomplete data
  • Delete your data ("right to be forgotten")
  • Restrict processing in certain circumstances
  • Receive your data in a structured format (portability)
  • Object to processing for marketing or legitimate reasons
  • Withdraw consent at any time (for purposes based on consent)

To exercise your rights, write to: privacy@loopaloop.uk

We respond within 30 days. The exercise of rights is free, except for manifestly unfounded or excessive requests.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) (www.ico.org.uk).

8. COOKIES AND SIMILAR TECHNOLOGIES

We use technical cookies necessary for the functioning of the platform and, only with your consent, cookies for analysis and personalization.

You can manage cookie preferences at any time via the cookie banner or browser settings.

9. SECURITY

We adopt technical and organizational measures to protect your data, including:

  • Encryption of communications (HTTPS)
  • Protection of access with secure credentials
  • Regular data backups
  • Privacy training for personnel

In the event of a data breach that presents a risk to your rights, we will inform you promptly.

10. MINORS

The platform is reserved for adult users. We do not knowingly collect data from minors. If we become aware of an account managed by a minor, we will deactivate it and delete the related data.

11. CHANGES TO THIS POLICY

We may update this Policy to adapt to new regulations or improve our services. Material changes will be communicated to you with reasonable notice. Continued use of the platform after the changes take effect constitutes acceptance.

12. CONTACTS

For questions about this Policy or the processing of your data:

  • 📧 Email: privacy@loopaloop.uk
  • Data Protection Officer (DPO): dpo@loopaloop.uk

Note: This Policy is drafted in accordance with the UK GDPR and the Data Protection Act 2018.