Legal
Privacy Policy
Last updated: August 2026
1. Who we are
Looge Ltd. is the data controller for personal information collected through looge.co.uk. We are a company registered in England and Wales (company number: 17304881), with our registered address at Suite RA01, 195–197 Wood Street, London, E17 3NU.
To contact us about this policy or your personal data, email [email protected].
2. What data we collect
Account data
Your email address and the preferences you set within your account (such as saved venues, email opt-ins, and consent records for account-linked settings). If you register with an email address and password, your password is stored hashed — never in plain text. If you choose “Continue with Google”, we never receive or store a password; instead Google sends us your email address, your name, your profile picture, and your Google account identifier, which we use to create and identify your account.
Usage data
Pages you visit, events you save, searches you make, and other interactions with the site. This is collected both by us and by the analytics services described below.
Technical data
IP address, browser type and version, device type, operating system, and referring URLs. This data is collected automatically by our hosting provider and analytics services.
Communications
We may send you the following types of email, each with a separate opt-out:
- Looge email updates — a personalised Wednesday digest with taste-matched picks, plus Friday’s editorial newsletter. One opt-in controls both. Opt-in only; unsubscribe any time via your account settings or the link in each email.
- Watchlist alerts — a notification when a film on your watchlist is showing at a London venue. Triggered by adding a film to your watchlist. Stop by removing the film from your watchlist.
- Watch words — a notification when a new event matches a watch word you have saved. Triggered by saving a watch word on your account. Stop by removing the watch word in your account settings. Optional weekly email digest if you turn that on separately.
- Screening reminders — a day-before reminder for events you have marked as Going. Triggered by saving an event as Going. Stop by removing the Going status in your account settings.
All alert and reminder emails include an unsubscribe link and a List-Unsubscribe header for one-click opt-out in email clients.
Stickers, flyers, and bookmarks carrying a Looge QR code link to our registration page with campaign tracking parameters (so we can tell which physical item was scanned) but do not pre-select the Looge email updates opt-in above — that box is always unchecked by default and only reflects your choice if you tick it yourself.
3. How we use your data
- To provide and maintain the Looge service, including account management and personalised event recommendations.
- To send you Looge email updates — the Wednesday personal digest and Friday editorial newsletter — if you have opted in.
- To understand how the service is used so we can improve it.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with our legal obligations.
Our lawful bases for processing under the UK GDPR are:
- Contract — to provide the service you signed up for.
- Legitimate interests — to improve the service, maintain security, and prevent misuse.
- Consent — for marketing emails and analytics cookies. You can withdraw consent at any time.
4. Analytics and tracking services
We use the following third-party analytics tools on our site. Browser analytics tools are only activated after you accept analytics via the cookie banner. Their use is subject to your acceptance of their respective privacy policies.
Google Analytics 4
Provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Collects anonymised usage data (pages viewed, session duration, referral source) to help us understand how visitors use the site. Data may be transferred to Google’s servers in the USA under Standard Contractual Clauses approved by the European Commission and recognised under UK adequacy regulations.
PostHog
Provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA.
Collects product analytics data including page views, feature usage, and click events to help us understand how features are used. We use PostHog’s EU-hosted infrastructure. Data remains within the EU and is processed under Standard Contractual Clauses.
Microsoft Clarity
Provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.
Records anonymised session replays and generates heatmaps to help us understand how visitors interact with pages and identify usability issues. Microsoft Clarity does not collect personally identifiable information. Data may be transferred to the USA under Standard Contractual Clauses.
Sentry
Provided by Functional Software, Inc. (Sentry), 45 Fremont Street, San Francisco, CA 94105, USA.
Captures application errors and performance data to help us diagnose and fix technical issues. Error events may include technical information such as browser type, page URL, and anonymised session identifiers. Data may be transferred to the USA under Standard Contractual Clauses.
Provided by Reddit, Inc., 548 Market St #16093, San Francisco, CA 94104, USA.
Measures whether visits referred by Reddit ads lead to signups. For signed-in users, this includes your email address, hashed (SHA-256) in your browser by Reddit’s own pixel before it is sent — we do not transmit your email in plain text. Data is transferred to Reddit’s servers in the USA under Standard Contractual Clauses.
Vercel Web Analytics and Speed Insights
Provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Measures page performance and aggregate site usage so we can understand load times and improve the public browsing experience. Looge loads these tools only after analytics consent.
4a. AI-powered features
Looge uses AI to power discovery features including the AI search box (“Ask Looge”), weekend planner, cultural journeys, and city briefings. We also use AI internally to help classify events, score taste fit, draft newsletters, and suggest venue tags. These uses send limited data to Anthropic, PBC to generate responses or editorial/admin suggestions.
Anthropic
Provided by Anthropic, PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA.
When you use an AI discovery feature, your query, theme, or planning notes and a selection of upcoming event data (such as titles, venue names, dates, event types, and summaries) are sent to Anthropic’s API. If you provide a postcode for planning or journeys, that postcode is also sent to help find nearby events. Logged-in users may receive ranked suggestions using coarse taste context, but we do not send account credentials, email addresses, or full profile records. Internal AI processing uses event and venue programme data. Data is transferred to Anthropic’s servers in the USA under Standard Contractual Clauses. Anthropic does not use data submitted via the API to train its models.
4b. WhatsApp messaging
If you message our WhatsApp Business number, we receive and store your phone number and the content of your message so we can respond to you, verify the message came from WhatsApp, and prevent abuse. This applies whether or not you have a Looge account, and is separate from — and does not require — the Looge email updates described in section 2. We do not currently send WhatsApp marketing messages; if we introduce them, they will require your own separate opt-in, shown in your account settings, and you will always be able to stop them by replying “STOP” or unsubscribing in your account.
Meta / WhatsApp
Provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Messages sent to or from our WhatsApp Business number are transmitted and delivered via Meta’s WhatsApp Business Platform. Meta processes the phone number and message content as part of that delivery, under its own WhatsApp Business Messaging Policy, in addition to us.
7. Data retention and account deletion
We retain your account data for as long as your account remains active. You can delete your account at any time from your account settings page. When you delete your account:
- Your Looge account, saved events, preferences, watchlist, and all associated personal data are permanently deleted from our database.
- Your contact record is unsubscribed or suppressed in our Resend email audience so we do not keep sending optional emails.
- Your analytics profile is deleted from PostHog.
We aim to complete deletion across all systems within 30 days. Some anonymised or aggregated analytics data that cannot be linked to you as an individual may be retained. Error logs in Sentry may be retained for up to 90 days in line with Sentry’s data retention policy.
Subscription lifecycle analytics exclude account IDs, email addresses, names, and custom digest names. They retain the action time and broad newsletter settings for up to 400 days, with access restricted to administrators, so we can understand aggregate opt-in and opt-out trends.
You can also request account deletion by emailing [email protected].
8. Your rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Restriction — ask us to restrict how we use your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — for marketing emails, unsubscribe any time via your account settings; for analytics, use the “Cookie settings” link in the footer.
To exercise any of these rights, email [email protected]. We will respond within one calendar month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office: ico.org.uk.
9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will notify registered users of material changes by email before the updated policy takes effect.