Privacy policy

Who processes your data

The data controller is Looply Technologies LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States. For any privacy question write to hello@looplywatersports.com.

Which data we collect and why

It depends on how you use Looply.

• Visiting the site. The server hosting the site records technical connection data (IP address, page requested, date and time, browser type) in its logs, to keep the site running and protect it from abuse. Visit statistics (Google Analytics) are collected only if you accept cookies: see the dedicated section.
• Demo request. On demo.looplywatersports.com you leave your name, WhatsApp number and email. We use them to create your 48-hour trial login, send you the credentials and get back to you about the demo.
• Contact. If you write to us by email or WhatsApp, we keep your contact details and the content of the conversation in order to reply.
• Subscription. When a school activates Looply, we collect the contact person's details (name, email, phone), the school's billing details and the payment history. Card payments are processed by Stripe: we never see or store the full card number.
• Using the software. School users (owner, office, instructors) have an account with name, email, phone, role and login log, needed for security and for the service to work.

Legal basis

We process data because:

• it is needed to perform the contract, or to do what you ask before signing it (demo, free trial, subscription, support) — Art. 6(1)(b) GDPR;
• we have a legal obligation (invoices, accounting, tax) — Art. 6(1)(c);
• we have a legitimate interest in keeping the service secure and preventing abuse (server logs, login log, lockout after too many login attempts) — Art. 6(1)(f);
• you have given your consent, which you can withdraw at any time: this applies to site statistics (Google Analytics cookies) — Art. 6(1)(a).

The data inside the software belongs to the school

Each school uses Looply at its own address (schoolname.looplywatersports.com) and enters the data of its own students, clients, members and staff: lessons, memberships, accounts, signatures, medical certificates and so on. For this data the school is the data controller: it decides what to collect, why and for how long, and must inform its people with its own privacy notice.

Looply processes it only on the school's behalf, as data processor (Art. 28 GDPR), following its instructions: storing it on the server, backing it up, showing it to authorised users. We do not use it for our own purposes and we do not sell it to anyone. The data processing agreement required by Art. 28 GDPR is part of the subscription contract and is available on request.

If you are a student or client of a school that uses Looply and want to exercise your rights over the data about you, contact the school first: we are ready to help it answer you.

Site statistics and consent

To understand how many people visit the site and which pages they read we use Google Analytics 4 (Google Ireland Ltd. / Google LLC) with Google's consent mode (Consent Mode v2) and IP address anonymisation.

Until you accept in the banner, Google Analytics sets no cookies and does not link visits to an identifier. If you accept, the cookies _ga and _ga_* are created. You can change your mind at any time on the Cookies page. Details on the cookies, how long they last and how to decline them are on that page.

Who we share data with

We do not sell your data. It is seen only by the providers we need to run the service, each for its own task:

• Stripe (Stripe, Inc. / Stripe Payments Europe Ltd.): card payments and subscriptions.
• OVHcloud (OVH SAS, France): hosts the site, the demo, the software and the backups in data centres in France, in the European Union.
• Google: Google Analytics for site statistics (only with consent) and Google Fonts, from which the browser downloads the Poppins typeface (fonts.googleapis.com): the request sends your IP address to Google.
• WhatsApp (Meta Platforms): if you contact us on WhatsApp, messages go through WhatsApp under its own privacy rules.

We may also disclose data to the authorities where the law requires it.

Transfers outside the European Union

Looply Technologies LLC is based in the United States, so the data of people living in the European Union is also processed outside the EU. To protect it we use the standard contractual clauses approved by the European Commission (Art. 46 GDPR) with the providers involved and, where possible, providers that take part in the EU–US Data Privacy Framework, such as Google and Stripe.

The site, the demo and the software, with the schools' data and the backups, are hosted by OVHcloud in data centres in France, so inside the European Union.

How long we keep data

• Demo request: the trial school and the data left in the form are deleted within 30 days of the end of the demo.
• Email and WhatsApp contact: for as long as needed to reply and, if you become a client, for the length of the relationship.
• Subscription: for the whole length of the contract and then for as long as tax and accounting obligations require: 10 years for invoices and accounting records.
• School data in the software: for as long as the school is a client. After cancellation the school has 30 days to export it; then it is permanently deleted within 90 days of the end of the contract, backups included.
• Server logs: 12 months.
• Google Analytics: statistical data stays in Google Analytics for 14 months.

Your rights

If you live in the European Union, the GDPR gives you the right to:

• know whether we process data about you and get a copy (access);
• have it corrected if it is wrong or incomplete;
• have it deleted, when we no longer need to keep it;
• restrict processing or object to it, in the cases provided by law;
• receive your data in a machine-readable format (portability);
• withdraw consent at any time, without affecting what was done before;
• lodge a complaint with the supervisory authority of your country (in Italy, the Garante per la protezione dei dati personali).

To exercise them write to hello@looplywatersports.com. We reply within one month. We may ask you for something to verify it is really you.

If you live outside the EU, the rights under the law of your country apply; you can still write to us at the same address.

Security

The site and the software travel over an encrypted connection (HTTPS). Access to the software is protected by passwords, roles and permissions per area, a login log and lockout after too many failed attempts. We back up data regularly. No system is one hundred percent secure: if we become aware of a breach that affects you, we notify you as the law requires.

Minors

The site and the demo are aimed at schools and professionals, not at minors. Data of underage students may be entered into the software by the school (for example in memberships signed by a parent): in that case the school is the data controller and collects the necessary consents.

Changes to this policy

We may update this page when the service, the providers or the law change. The date at the top shows which version is in force. If the change is significant, we let clients know by email.

Contact

Looply Technologies LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110, United States
hello@looplywatersports.com