Privacy Notice

1. Who is responsible for your information

Little Loop is the name of the marketplace service operated by TheLoop Ltd. Privacy questions and requests can be sent through Help and support.

For UK data-protection purposes, the controller is TheLoop Ltd (company number 17484218).

You can also email wearelittleloop@gmail.com, including if you cannot sign in.

2. Information we collect

Depending on how you use Little Loop, we may process account identifiers and contact details; your display name and profile information; listing text, photos, prices and item details; approximate/local listing location information; saved items and saved searches; requests, transaction status and handover information; messages; reports, blocks, feedback messages and support requests; optional feedback reply addresses; email preferences and delivery records; payment-related references and status; and technical information needed to secure and operate the service.

Do not upload children's personal information, private addresses or other unnecessary personal information in listing photos or descriptions.

3. How we use information

We use information to create and secure accounts; publish and manage listings; provide nearby search; connect buyers, sellers and swappers; operate messages, notifications and transaction features; process card-payment status and seller payouts where selected; prevent fraud and misuse; investigate reports; provide support; comply with legal obligations; send notifications and saved-search updates you request or enable; respond to feedback; and understand and improve the service.

4. Our lawful bases

We rely on contract necessity for account administration, publishing your listings, requests, messaging, saved searches you request and payment administration. We rely on legitimate interests for proportionate security, fraud prevention, moderation and support: our interests are protecting members and running a reliable marketplace. We rely on legal obligation where we must keep accounting records or respond to a binding legal requirement. Where an optional activity requires consent, we ask for it separately and you can withdraw it without affecting earlier lawful processing.

5. What other people can see

Marketplace listings and their photos can be visible to people browsing Little Loop. Other members may see your display name and information you choose to include in a listing or message. Public listing views show a general area or town rather than your stored full postcode. Messages are available to conversation participants and authorised administrators where access is reasonably required for support, safety or legal purposes.

6. Location information

Location information associated with a listing is used to support nearby search and distance features. If you choose to use your current location for search, your browser or device may ask permission to provide location coordinates so Little Loop can calculate nearby results. Do not put your full home address in a public listing. Share exact handover details privately only when needed.

7. Payments

For cash transactions, payment is arranged directly between members. For item card payments, Stripe provides the payment and payout infrastructure. Full card details are entered with Stripe and are not stored in Little Loop listing or chat records. We retain the transaction references, amounts, payment status, payout status and related records reasonably needed to operate and support the transaction.

8. Service providers

We use service providers to operate Little Loop, including Vercel for hosting and privacy-focused web analytics, Supabase for authentication, database and file storage, Stripe for item card payments and seller payouts, SumUp for optional listing boost payments, and Resend for sending service emails and delivering feedback to our team. These providers process information for us or provide their own regulated service under their applicable terms. We limit access to what is reasonably needed for the relevant function.

If you choose Google sign-in, Google supplies the account information needed to sign you in. Emails you send to our Gmail support address are processed by Google. Postcode lookups use Postcodes.io to resolve the postcode you enter. Resend processes recipient email addresses, service-email content and delivery status and, for feedback, your message, chosen topic and optional reply address. Feedback is delivered to our team Gmail inbox, where Google also processes it. Service emails are separate from marketing; manage available notifications and saved-search updates in your account. These services have their own privacy notices.

9. Cookies, analytics and device storage

Little Loop uses essential authentication cookies where needed to keep you signed in and secure your session. Vercel Web Analytics is used for aggregate statistics on public information and listing pages and does not use analytics cookies. We exclude account, sign-in, chat, transaction, support and feedback pages, remove URL query parameters and fragments, and replace individual listing identifiers with a generic listing path. You can turn analytics off on our cookies page. The site can also use local device storage for short-lived drafts and preferences; for example, a listing or purchase draft interrupted by sign-in can be restored and is no longer restored after 24 hours. Expired draft data is removed when the draft is next accessed, or when you clear your browser storage.

See our Cookies & device storage notice for more detail.

10. Retention

We keep personal information only for as long as reasonably needed for the purposes described above, including providing the service, resolving transactions and disputes, preventing abuse, maintaining necessary records and meeting legal obligations. Deleted or archived marketplace content may remain in transaction, security or backup records for a limited period where necessary. We review account-closure and deletion requests rather than deleting information another member needs for an ongoing transaction or legal claim automatically. Notification-delivery queue records are normally removed after 30 days; sent-message payloads are removed from that queue once delivery is confirmed. Feedback and support correspondence is kept while we investigate or respond, or where needed for related disputes or legal obligations. Limited abuse-prevention records are used to control feedback submission rates. Provider email-delivery and security records follow the relevant provider retention arrangements.

11. International processing

Some technology providers may process information outside the UK. Where applicable, transfers rely on UK adequacy regulations. For other restricted transfers, relevant providers' data-processing terms provide contractual safeguards such as the UK Addendum to the EU Standard Contractual Clauses. You can request information about the safeguards used for your information, and a copy of relevant safeguards, by emailing wearelittleloop@gmail.com; unrelated confidential information may be redacted. Provider processing locations and subprocessors can change, so these arrangements are reviewed.

12. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access your personal information, correct it, ask for deletion or restriction, object to certain processing, receive certain information in a portable form, or withdraw consent where processing relies on consent. You can make a request through Help and support. You can also email wearelittleloop@gmail.com without an account. We normally respond to rights requests within one month; where the law permits an extension, we will explain it. You also have the right to complain to the UK Information Commissioner's Office.

13. Security

We use technical and organisational measures designed to protect account and marketplace information. No online service can guarantee absolute security, so please use a strong unique password where password sign-in is available and keep account access secure.

14. Changes

We may update this notice as Little Loop changes. We will publish the current version here and change the date above. Where a change materially affects how we use personal information, we will provide an appropriate additional notice.