Last updated: October 6, 2026
This privacy notice explains how Loopmark handles personal data for visitors in the United Kingdom, under UK GDPR and the Data Protection Act 2018. It covers this website and how our open-source software relates to your own processing.
For personal data collected on this website (for example contact forms, waitlist sign-ups, or cookie preferences), Loopmark is the data controller. Contact for privacy requests: privacy@loopmark.com If you self-host Loopmark, you (or your organisation) are typically the controller for leads, complaints, content, and other customer data you process through the software. We do not receive that data unless you send it to us.
This notice applies to: • This marketing and documentation website • Communications you start with us (email, forms, support) • Cookie and similar technology use on this site It does not replace your own privacy notices when you run Loopmark on your infrastructure.
Website visitors: IP address, browser and device information, pages viewed, approximate location derived from IP, and cookie identifiers. If you contact us or join a waitlist: name, email address, organisation (if provided), and message content. Preference data: language, theme, and cookie consent choices stored locally or via essential cookies.
We process website and contact data only where a lawful basis applies, including: • Legitimate interests: operating and securing the site, understanding aggregate usage, responding to enquiries (Art. 6(1)(f)) • Consent: non-essential cookies/analytics where required (Art. 6(1)(a)); you can withdraw anytime • Contract / steps prior to contract: if you ask us to provide a service or support tied to an agreement (Art. 6(1)(b)) • Legal obligation: where we must keep records or respond to lawful requests (Art. 6(1)(c))
When you run Loopmark yourself, audience research, posts, emails, complaints, leads, and API keys stay on systems you control. We do not access that data by default. You remain responsible for providing your own privacy information to end users, setting retention, and meeting UK GDPR obligations for that processing.
We follow the Privacy and Electronic Communications Regulations (PECR) for cookies. Essential cookies may be set without consent. Non-essential cookies are only set after you opt in via our cookie banner. See our Cookies Policy for details.
We may use trusted providers for hosting, email delivery, or analytics. They act as processors under written terms and may only process data on our instructions. We do not sell personal data. We may disclose data if required by UK law or to protect rights, safety, or security.
If a provider stores or processes data outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), UK Addendum to the EU SCCs, or an adequacy decision, where required.
Contact and waitlist records: kept only as long as needed to respond and manage the relationship, then deleted or anonymised. Server logs and security records: typically short periods unless needed for investigation. Cookie consent records: retained to demonstrate compliance for a reasonable period.
You may have the right to: • Access your personal data • Rectify inaccurate data • Erase data in certain cases • Restrict or object to processing • Data portability • Withdraw consent where processing is consent-based • Lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk To exercise rights, email privacy@loopmark.com. We aim to respond within one month as required by UK GDPR.
We use appropriate technical and organisational measures to protect personal data we control, including HTTPS, access controls, and least-privilege practices. See our Security page for more detail. No method of transmission or storage is 100% secure.
This site is aimed at businesses and professionals. We do not knowingly collect personal data from children under 13.
We may update this notice. The "Last updated" date will change when we do. Material changes will be highlighted on this page where practical.