Privacy Policy

This Privacy Policy explains how Looped ("we," "us," or "our") collects, uses, shares, and protects information when you visit loopedbelt.com, request a quote, or buy something from us. It applies to this website only.

1. Information We Collect

When you place an order. Checkout is hosted and operated by Stripe. You leave our website and enter your details on a Stripe-hosted page. Stripe collects, on our behalf:

• Name and email address
• Billing and shipping address, and phone number if you provide one
• Payment card details — entered directly into Stripe, never transmitted to or stored on our servers
• Order contents, amount, and purchase history
• Device, browser, and network signals Stripe uses to detect and prevent fraud

We receive from Stripe the order details and contact information we need to fulfill and support your purchase — plus the card brand, country, and last four digits. We never receive your full card number, expiry date, or security code.

When you request a quote or send us a message. Our quote and contact forms are processed by Formspree, which forwards the submission to us by email. We collect:

• Name and email address
• Business or organization name (quote form only)
• Order details, quantities, and anything else you choose to write in your message

When you simply browse. Our hosting provider and content delivery network keep standard server logs in order to serve pages and protect the site from abuse. These typically include:

• IP address, and the approximate region derived from it
• Browser type, operating system, and device type
• Pages requested, timestamps, and referring URL

We do not run analytics software, advertising pixels, or any tracker that builds a profile of you across sites. We do not attempt to identify individual visitors from server logs.

2. How We Use Your Information

We use what we collect only to:

• Process payments and fulfill and ship your order
• Send order confirmations, shipping notices, and delivery updates
• Handle returns, refunds, warranty claims, and support requests
• Respond to quote requests, messages, and business inquiries
• Detect and prevent fraud, abuse, and chargebacks
• Keep the records tax, accounting, and consumer-protection law requires us to keep

We do not sell or share your personal information, we do not use it for targeted advertising, and we do not add you to a marketing list because you bought something. If we ever offer a newsletter, it will be opt-in and separately consented to.

3. Legal Bases for Processing

If you are in the UK, the European Economic Area, or another region with similar law, we rely on these legal bases:

• Performance of a contract — to take payment, fulfill your order, and provide support
• Legal obligation — to retain tax and transaction records
• Legitimate interests — to keep the site secure, prevent fraud, and answer inquiries you send us
• Consent — where consent is required, and only until you withdraw it

4. Third-Party Services

We keep the list of companies that touch your data deliberately short. These are all of them:

• Stripe — processes payments and hosts our checkout. Stripe is a PCI-DSS Level 1 certified payment processor and acts as an independent controller of the payment data it collects. See Stripe's Privacy Policy.
• Formspree — receives and forwards quote and contact form submissions. See Formspree's Privacy Policy.
• jsDelivr — the content delivery network that serves the animation library used on this site. Loading a page from it discloses your IP address to jsDelivr. See jsDelivr's Privacy Policy.
• Our hosting provider — stores and serves this website and keeps the server logs described in Section 1.
• Shipping carriers — receive your name and delivery address so they can deliver your order.

We may also disclose information when the law requires it, to enforce our Terms of Service, or to protect our rights and the safety of others. If Looped is ever acquired or merged, customer data may transfer with the business; we will post notice here before that takes effect.

5. Cookies and Tracking

This website sets no cookies of its own. We run no analytics, no advertising pixels, and no cross-site tracking.

When you continue to checkout, Stripe sets cookies on Stripe's own domain that are strictly necessary to process the payment and to detect fraud. Those cookies are governed by Stripe's Cookie Policy, not by this one. Because we set no tracking cookies ourselves, there is no consent banner to click and nothing to opt out of on our side.

We honor Global Privacy Control and Do Not Track signals by default, in the sense that there is no tracking here to switch off.

6. Data Retention

• Order and transaction records — kept at least 7 years, as tax and accounting rules require
• Quote inquiries — kept up to 24 months after our last exchange, then deleted
• Support correspondence — kept up to 24 months after the issue is resolved
• Server logs — retained by our hosting provider on their standard schedule, typically under 30 days

Stripe retains payment records on its own schedule under its own policy.

7. Security

This site is served over HTTPS. Card data is entered directly into Stripe and never passes through our systems. We limit access to order and inquiry data to the people who need it to run the business.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and any required regulator within the timeframe the applicable law sets.

8. International Transfers

We operate in the United States, and our service providers may process and store data in the United States and elsewhere. If you are in the UK or the European Economic Area, this means your data may be transferred outside your home country. Where that happens, our providers rely on Standard Contractual Clauses or another approved safeguard.

9. Your Rights

Depending on where you live, you may have the right to:

• Know what personal data we hold about you and get a copy of it
• Correct data that is inaccurate or incomplete
• Delete your personal data, subject to records we are legally required to keep
• Receive your data in a portable, machine-readable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent
• Not be discriminated against for exercising any of these rights

California residents. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding twelve months. We do not knowingly sell the personal information of anyone under 16.

To exercise any right, reach us via our contact form. We respond within 30 days. We may need to verify your identity — usually by confirming the email address or order number tied to the request — before we act. If you are in the UK or EEA and are not satisfied with our response, you may complain to your local data protection authority.

10. Children's Privacy

This website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, reach us via our contact form and we will delete it.

11. Changes to This Policy

We may update this policy as our business or the law changes. The "Last updated" date at the top reflects the most recent revision. If a change materially affects how we handle your personal data, we will post a clear notice on this page, and email you where we have your address and the law requires it.

12. Contact Us

Questions, requests, or complaints about this policy — reach us here and we will get back to you:

See also our Terms of Service.