Legal
Privacy Policy
Last updated: September 2026
1. Who we are
Looge Ltd. is the data controller for personal information collected through looge.co.uk. We are a company registered in England and Wales (company number: 17304881), with our registered address at Suite RA01, 195–197 Wood Street, London, E17 3NU.
To contact us about this policy or your personal data, email [email protected].
2. What data we collect
Account data
Your email address and the preferences you set within your account (such as saved venues, email opt-ins, and consent records for account-linked settings). If you register with an email address and password, your password is stored hashed — never in plain text. If you choose “Continue with Google”, we never receive or store a password; instead Google sends us your email address, your name, your profile picture, and your Google account identifier, which we use to create and identify your account.
Usage data
Pages you visit, events you save, searches you make, and other interactions with the site. This is collected both by us and by the analytics services described below.
Technical data
IP address, browser type and version, device type, operating system, and referring URLs. This data is collected automatically by our hosting provider and analytics services.
Communications
We may send you the following types of email, each with a separate opt-out:
- Looge email updates — a personalised Wednesday digest with taste-matched picks, plus Sunday’s editorial newsletter. One opt-in controls both. Opt-in only; unsubscribe any time via your account settings or the link in each email.
- The Monthly Note — once a month: what we have built, what is worth rediscovering, and where Looge has expanded to. Separate opt-in from the Wednesday digest and Sunday newsletter; turning one on does not turn on the other. Opt-in only; unsubscribe any time via your account settings or the link in each email.
- Watchlist alerts — a notification when a film on your watchlist is showing at a London venue. Triggered by adding a film to your watchlist. Stop by removing the film from your watchlist.
- Watch words — a notification when a new event matches a watch word you have saved. Triggered by saving a watch word on your account. Stop by removing the watch word in your account settings. Optional weekly email digest if you turn that on separately.
- Screening reminders — a day-before reminder for events you have marked as Going. Triggered by saving an event as Going. Stop by removing the Going status in your account settings.
All alert and reminder emails include an unsubscribe link and a List-Unsubscribe header for one-click opt-out in email clients.
Stickers, flyers, and bookmarks carrying a Looge QR code link to our registration page with campaign tracking parameters (so we can tell which physical item was scanned) but do not pre-select the Looge email updates opt-in above — that box is always unchecked by default and only reflects your choice if you tick it yourself.
3. How we use your data
- To provide and maintain the Looge service, including account management and personalised event recommendations.
- To send you Looge email updates — the Wednesday personal digest and Sunday editorial newsletter — if you have opted in.
- To send you The Monthly Note about Looge itself, if you have separately opted in to that.
- To understand how the service is used so we can improve it.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with our legal obligations.
Our lawful bases for processing under the UK GDPR are:
- Contract — to provide the service you signed up for.
- Legitimate interests — to improve the service, maintain security, and prevent misuse.
- Consent — for marketing emails (each type opted into separately) and analytics cookies. You can withdraw consent at any time, for each type independently.
4. Analytics and tracking services
We use the following third-party analytics tools on our site. Browser analytics tools are only activated after you accept analytics via the cookie banner. Their use is subject to your acceptance of their respective privacy policies.
Google Analytics 4
Provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Collects anonymised usage data (pages viewed, session duration, referral source) to help us understand how visitors use the site. Data may be transferred to Google’s servers in the USA under Standard Contractual Clauses approved by the European Commission and recognised under UK adequacy regulations.
PostHog
Provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA.
Collects product analytics data including page views, feature usage, and click events to help us understand how features are used. We use PostHog’s EU-hosted infrastructure. Data remains within the EU and is processed under Standard Contractual Clauses.
Microsoft Clarity
Provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.
Records anonymised session replays and generates heatmaps to help us understand how visitors interact with pages and identify usability issues. Microsoft Clarity does not collect personally identifiable information. Data may be transferred to the USA under Standard Contractual Clauses.
Sentry
Provided by Functional Software, Inc. (Sentry), 45 Fremont Street, San Francisco, CA 94105, USA.
Captures application errors and performance data to help us diagnose and fix technical issues. Error events may include technical information such as browser type, page URL, and anonymised session identifiers. Data may be transferred to the USA under Standard Contractual Clauses.
Provided by Reddit, Inc., 548 Market St #16093, San Francisco, CA 94104, USA.
Measures whether visits referred by Reddit ads lead to signups. For signed-in users, this includes your email address, hashed (SHA-256) in your browser by Reddit’s own pixel before it is sent — we do not transmit your email in plain text. Data is transferred to Reddit’s servers in the USA under Standard Contractual Clauses.
Vercel Web Analytics and Speed Insights
Provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Measures page performance and aggregate site usage so we can understand load times and improve the public browsing experience. Looge loads these tools only after analytics consent.
4a. AI-powered features
Looge uses AI to power discovery features including the AI search box (“Ask Looge”), weekend planner, cultural journeys, and city briefings. We also use AI internally to help classify events, score taste fit, draft newsletters, and suggest venue tags. These uses send limited data to Anthropic, PBC to generate responses or editorial/admin suggestions.
Anthropic
Provided by Anthropic, PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA.
When you use an AI discovery feature, your query, theme, or planning notes and a selection of upcoming event data (such as titles, venue names, dates, event types, and summaries) are sent to Anthropic’s API. If you provide a postcode for planning or journeys, that postcode is also sent to help find nearby events. Logged-in users may receive ranked suggestions using coarse taste context, but we do not send account credentials, email addresses, or full profile records. Internal AI processing uses event and venue programme data. Data is transferred to Anthropic’s servers in the USA under Standard Contractual Clauses. Anthropic does not use data submitted via the API to train its models.
4b. WhatsApp messaging
If you message our WhatsApp Business number, we receive and store your phone number and the content of your message so we can respond to you, verify the message came from WhatsApp, and prevent abuse. This applies whether or not you have a Looge account, and is separate from — and does not require — the Looge email updates described in section 2. We do not currently send WhatsApp marketing messages; if we introduce them, they will require your own separate opt-in, shown in your account settings, and you will always be able to stop them by replying “STOP” or unsubscribing in your account.
Meta / WhatsApp
Provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Messages sent to or from our WhatsApp Business number are transmitted and delivered via Meta’s WhatsApp Business Platform. Meta processes the phone number and message content as part of that delivery, under its own WhatsApp Business Messaging Policy, in addition to us.
5. The Looge mobile app
Looge is also an Android app, available on Google Play. It shares this website’s account system and database, so sections 1, 3, 7, 8, 9 and 10 apply to it in the same way. Section 2 describes what we collect on the website; the account data there is the same in the app, but the usage and technical data it describes is gathered by analytics services that the app does not contain. What the app collects instead is set out below — and it is less than the website, not more.
Location
The app can use your device’s location in two places, and only when you ask it to:
- What’s on near you— your coordinates are sent to our database to find events within a radius of you. They are used to answer that one request and are not stored: the coordinates travel in the body of the request, and our database provider’s logs record the address, method and headers of a request but not its body.
- Choosing your city— your coordinates never leave your device. The app compares them with a built-in list of city centres on the phone itself, and the only thing saved is which city you ended up with.
Location is read only while the app is openand only at the moment you use one of those two features. The app has no background location access and does not track your movements. Declining the permission costs you those two features and nothing else — you can still browse everything, and you can pick your city from a list.
Separately, and as with any visit to this website, the servers that answer the app’s requests see your IP address and derive a coarse location from it — roughly city and postal district. That is a property of connecting to the internet rather than of the location permission, it is much less precise than the device location described above, and it happens whether or not you grant that permission.
What the app does not do
The app contains no analytics, session-recording or advertising software. The services listed in section 4 — Google Analytics, PostHog, Microsoft Clarity, Vercel, Reddit conversion tracking — run on this website only and are not present in the app. The cookie categories in section 6 likewise describe the website; the app stores a small amount of data on your own device (your session, your chosen city, and a copy of the current listings so it works offline) and sends none of it anywhere.
Third parties in the app
- Google Play services — used for “Continue with Google” and for the map. Google may collect device and app identifiers under its own privacy policy when these are used.
- Expo — the app checks for software updates when it starts. That request carries your IP address and an identifier for the app installation, so the right update can be served.
- Supabase — the same database and authentication service that powers this website, described in section 7.
Your account and your rights
Your account is the same one you would use on this website: the same email address, saved venues, venue statuses, city preference and email opt-ins. Deleting your account from within the app deletes it everywhere, exactly as described in section 8, and every right in section 9 applies equally to data you created in the app.
8. Data retention and account deletion
We retain your account data for as long as your account remains active. You can delete your account at any time from your account settings page. When you delete your account:
- Your Looge account, saved events, preferences, watchlist, and all associated personal data are permanently deleted from our database, except the venue content records described in the next point.
- If you sent us content for a venue, such as a programme, a poster or a logo, we keep our record of each time you confirmed that you own it or are licensed to let us use it (section 7.3 of our Terms of Service). Each record holds the time, the venue, what was sent and the email address you confirmed with. We keep these records after your account is deleted because we may need them to establish, exercise or defend a legal claim about that content, such as a copyright claim over an image. We keep them only for as long as such a claim could still be brought, which in England and Wales is generally up to six years after the content is removed from Looge.
- Your contact record is unsubscribed or suppressed in our Resend email audience so we do not keep sending optional emails.
- Your analytics profile is deleted from PostHog.
We aim to complete deletion across all systems within 30 days. Some anonymised or aggregated analytics data that cannot be linked to you as an individual may be retained. Error logs in Sentry may be retained for up to 90 days in line with Sentry’s data retention policy.
Subscription lifecycle analytics exclude account IDs, email addresses, names, and custom digest names. They retain the action time and broad newsletter settings for up to 400 days, with access restricted to administrators, so we can understand aggregate opt-in and opt-out trends.
You can also request account deletion by emailing [email protected].
9. Your rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Restriction — ask us to restrict how we use your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — for marketing emails, unsubscribe any time via your account settings; for analytics, use the “Cookie settings” link in the footer.
To exercise any of these rights, email [email protected]. We will respond within one calendar month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office: ico.org.uk.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will notify registered users of material changes by email before the updated policy takes effect.