Privacy Policy

This Privacy Policy explains how Loocls ("we", "us"), operated by [Legal entity name, address], collects, uses, and protects personal data when you use loocls.com and related services (the "Service").

For the purposes of the EU/UK General Data Protection Regulation ("GDPR") and similar laws, Loocls acts as the data controller for the account, business profile, and usage data described below, and as a data processor for data your customers submit through your Tenant Website (see our Terms of Service).

We collect the following categories of personal data:

• Account data — email address, password (stored as a salted hash), and account preferences.
• Business profile data — the name, address, contact details, category, and other information about the business you manage on the Service, whether entered manually or imported from third-party map/directory listings.
• Content — text, images, and other material you upload or that is generated on your behalf (descriptions, posts, review replies, website content).
• Usage data — log data, device/browser information, IP address, and interactions with the Service, collected to operate, secure, and improve it.
• Payment data — billing name and address, and transaction history. Card numbers and other sensitive payment details are collected and processed directly by Paddle, our payment provider and Merchant of Record; we do not see or store your full card details.

Where the GDPR applies, we process personal data on the following legal bases:

• Contract — to provide the Service you signed up for, including account management, content generation, and billing.
• Legitimate interests — to secure the Service, prevent fraud and abuse, and improve our product, balanced against your rights and interests.
• Consent — for optional features such as analytics cookies or marketing communications, where required. See our Cookie Policy.
• Legal obligation — where we must retain or disclose data to comply with applicable law (for example, tax or accounting records).

We share personal data with the following categories of subprocessors, solely to operate the Service:

Each subprocessor is contractually required to protect personal data and to use it only for the purposes we specify. We may update this list as our vendors change; material changes will be reflected here.

Our infrastructure, including our database provider, currently stores data in the region operated by that provider. This region may change over time as our infrastructure evolves, and we will update this Policy if it does.

Where personal data is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards recognized under applicable law, such as the European Commission's Standard Contractual Clauses (SCCs), or equivalent mechanisms adopted by our subprocessors.

We retain personal data for as long as your account is active and as necessary to provide the Service. After you close your account, we delete or anonymize personal data within a reasonable period, except where we must retain it for longer to comply with legal, tax, or accounting obligations, or to resolve disputes.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten"), subject to legal retention requirements;
• Port your data to another provider in a structured, machine-readable format;
• Object to processing based on legitimate interests, or withdraw consent where processing is based on consent;
• Restrict processing in certain circumstances.

To exercise any of these rights, contact us at [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

For any privacy-related questions or requests, contact us at:

[email protected]