Privacy Policy

Last updated: 1 November 2026

Who we are

Loofi is a trading name of LOOFI LTD, a company registered in England and Wales (company number 16765423), registered office 32 King Street, Bridport, Dorset DT6 3QD. We sell plant-based cleaning sponges. For any privacy question, contact us at hello@loofi.co.uk.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the “data controller” for the personal information you give us. We are registered with the Information Commissioner's Office (ICO) under reference ZC123063.

What we collect

When you place an order or contact us, we may collect:

Your name
Delivery and billing address
Email address
Phone number (if you provide one)
Order history and correspondence with us

We do not see or store your full card details. Card payments are handled directly by our payment providers (see below).

How we use it, and our legal basis

To fulfil your order (process payment, deliver goods, handle returns) — legal basis: performance of a contract with you.
To answer your enquiries — legal basis: our legitimate interest in responding to you.
To meet legal duties (e.g. keeping records for tax) — legal basis: legal obligation.

We do not send marketing emails, and the site has no newsletter sign-up. If that changes we will update this policy and ask for your consent first.

Who we share it with

We only share your data with the suppliers who help us run the shop:

Payment processing: Stripe (they process your payment; see their own privacy policy).
Delivery: Royal Mail, to deliver your order.
Website hosting: Vercel, which hosts the site.
Fonts: Google Fonts. Our pages request typefaces from Google's servers, which means Google receives your IP address when a page loads. See the note below.

We never sell your personal data to anyone.

Note on Google Fonts. This is accurate for the site as it stands today: the shop loads its typeface from Google's servers, so Google receives visitors' IP addresses. It is the only third party contacted by the site itself. Self-hosting the font file would remove this data flow entirely and let you delete this bullet — a small change, worth doing.

How long we keep it

We keep order records for as long as needed to fulfil the order and then for 6 years to meet UK tax and accounting requirements, after which we delete or anonymise them.

International transfers

Some of our providers (e.g. Stripe, Vercel, Google) may process data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law (such as the International Data Transfer Agreement or adequacy regulations).

Your rights

Under UK data protection law you have the right to: access the personal data we hold about you; have it corrected or erased; restrict or object to our use of it; and data portability. To exercise any of these, email hello@loofi.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to help first.

Changes

We may update this policy; the “last updated” date shows when.