Loomi HealthTech Ltd (“GlucoSync”, “we”, “us”) is the data controller for the personal data collected through this website. This policy explains what we collect, why, and the rights you have over your data under UK GDPR and the Data Protection Act 2018.
Data we collect
We collect the following personal data directly from you:
- Waitlist signups — your email address, when you join the waitlist.
- Contact form submissions — your name, email address, subject, and message content.
We also collect the following data automatically, only where you have given consent:
- Analytics data — pages visited, approximate location, and device/browser type, via Google Analytics (GA4). This is only collected if you accept cookies — see our Cookie Policy for details.
Why we use it (lawful basis)
- Waitlist emails — legitimate interest / steps taken at your request, to notify you when GlucoSync becomes available.
- Contact form data — legitimate interest, to respond to your enquiry.
- Analytics data — consent, given or withdrawn via the cookie banner at any time.
We also use limited technical data (such as IP address) for spam and rate-limiting protection on our forms, on the basis of legitimate interest in keeping the site secure and usable.
How long we keep it
Waitlist and contact form data is kept only for as long as needed for the purpose it was collected for — typically until launch communications are sent (for waitlist signups) or your enquiry is resolved (for contact submissions), after which it is deleted unless we are required to keep it for a longer period by law. Analytics data is retained in line with our Google Analytics configuration.
Who we share it with
We use the following processors to run this website. None of them are permitted to use your data for their own purposes:
- Supabase — database hosting for waitlist and contact form data.
- Vercel — website hosting.
- Google (Analytics) — analytics processing, only after consent is given.
- Cloudflare — bot protection on our contact form.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted
- Restrict or object to how we use your data
- Request a copy of your data in a portable format
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, please contact us.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date.