Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains how LOOPSIO Ltd ("LOOPSIO", "we", "us", "our") collects, uses, and protects personal data when you visit loopsio.com, contact us, subscribe to our newsletter, or engage us for services.

We are committed to handling your data lawfully, transparently, and securely under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

LOOPSIO Ltd is a private limited company registered in Scotland.

Company name: LOOPSIO Ltd
Company number: SC742314
Registered office: 48 West George Street, Suite 2/3, Glasgow, G2 1BP, United Kingdom
ICO registration number: ZC186024
Contact email: hey@loopsio.com

LOOPSIO is the data controller for personal data collected through this website and during the course of our business relationships.

2. What personal data we collect

Information you provide to us directly:

Name, email address, company name, phone number, and any other details you submit through our contact form, newsletter signup, or by emailing us.
Project information, requirements, and correspondence shared during client engagements.
Information shared when you respond to our outreach or attend our events.

Information collected automatically:

Technical data such as IP address, browser type, device information, operating system, referring URL, and pages visited.
Usage data collected via cookies and similar technologies (see Section 8).
Analytics data collected via Google Tag Manager and Google Analytics.

Information from third parties:

Publicly available business information (e.g. Companies House, LinkedIn) when we conduct outbound outreach.
Information from our clients about their staff or contacts where we are engaged to deliver services.

We do not knowingly collect special category data (such as health, religion, or biometric data) through this website.

3. How and why we use your data

We use personal data for the following purposes, relying on the lawful bases shown:

Responding to enquiries and providing services — to reply to your messages, prepare proposals, and deliver contracted work (lawful basis: performance of a contract, or steps taken at your request before entering one).
Newsletter and marketing communications — to send you updates you have signed up for; you can unsubscribe at any time (lawful basis: consent).
Business development and outreach — to contact businesses we believe may benefit from our services, using professional contact details (lawful basis: legitimate interests in growing our business; you can object at any time).
Website analytics and improvement — to understand how visitors use our site and improve it (lawful basis: consent for analytics cookies).
Legal and administrative obligations — to keep accounting records, comply with tax law, and manage disputes (lawful basis: legal obligation and legitimate interests).

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

4. Who we share your data with

We share personal data only where necessary, with service providers who process it on our behalf under appropriate contractual safeguards:

Webflow — website hosting and form processing.
Google — Google Workspace (email and documents), Google Analytics, and Google Tag Manager.
Airtable — client and project record management.

We may also share data with professional advisers (accountants, lawyers, insurers), with authorities where legally required, and with a buyer or successor in the event of a business sale or restructuring. We never share your data with third parties for their own marketing purposes.

5. International transfers

Some of our service providers (including Webflow, Google, and Airtable) store or process data in the United States. Where personal data is transferred outside the UK, we rely on safeguards recognised under UK GDPR, such as the UK Extension to the EU-US Data Privacy Framework, UK International Data Transfer Agreements, or standard contractual clauses with the UK addendum.

6. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected:

Enquiries that do not become clients — up to 12 months after last contact.
Client records and correspondence — for the duration of the engagement and up to 6 years afterwards, in line with limitation periods and accounting requirements.
Newsletter data — until you unsubscribe or we delete inactive subscribers.
Analytics data — retained in aggregated form per Google Analytics settings.

7. Your rights

Under UK GDPR, you have the following rights:

Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure — to ask us to delete your data in certain circumstances.
Right to restrict processing — to limit how we use your data in certain circumstances.
Right to data portability — to receive your data in a structured, commonly used format, or to ask us to transfer it to another provider.
Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
Rights relating to automated decision-making — we do not make decisions about you based solely on automated processing.

To exercise any of these rights, email hey@loopsio.com. We will respond within one calendar month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would, however, appreciate the chance to address your concerns directly before you approach the ICO.

8. Cookies and tracking technologies

Our website uses cookies and similar technologies to function correctly and to help us understand how visitors use the site.

Strictly necessary cookies are essential for the website to operate and do not require consent. These include cookies set by Webflow to load the site and process form submissions.

Analytics cookies are set by Google Analytics (via Google Tag Manager) to collect aggregated information about how visitors use our site. These are only set with your consent.

Marketing cookies may be set by third parties if we run advertising campaigns. These are only set with your consent.

You can manage your cookie preferences through any cookie banner displayed on the site and through your browser settings. Most browsers let you block or delete cookies — see aboutcookies.org for guidance. Disabling cookies may affect how the website works for you.

9. Security

We take appropriate technical and organisational measures to protect personal data, including:

Encrypted connections (HTTPS) across our website.
Access controls and least-privilege permissions across our internal systems.
Two-factor authentication on critical systems including Google Workspace and GitHub.
Secure password management and regular review of access.

No system is fully secure, but we work hard to protect your data and respond promptly to any incident.

10. Children's privacy

Our website and services are aimed at businesses and adults. We do not knowingly collect personal data from children under 13 through this website. If you believe we hold such data, please contact us and we will delete it.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before sharing any personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through our website or, where appropriate, by email.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

LOOPSIO Ltd
48 West George Street, Suite 2/3
Glasgow, G2 1BP, United Kingdom
Email: hey@loopsio.com