Privacy Policy

1. Introduction

Further Forward Innovation Ltd. ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use LoopFast.io (the "Service").

We are the data controller for the personal information we process. We are registered in England and Wales and can be contacted at info@furtherforward.co.uk.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Payment Information: Billing details processed securely through Stripe (we do not store full payment card details)
• Profile Information: Any additional information you choose to add to your account
• Content: Data, files, and content you upload or create using the Service
• Communications: Messages you send to us for support or enquiries

2.2 Information Collected Automatically

• Usage Data: How you interact with the Service, features used, and actions taken
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, pages viewed, and referring URLs
• Analytics Data: Anonymised usage statistics collected via Convultra (GDPR compliant, cookie-free)
• Cookies and Similar Technologies: See Section 7 for details

3. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Create and manage your account
• Respond to your enquiries and provide customer support
• Send important notices about the Service, such as updates and security alerts
• Monitor and analyse usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Legal Basis for Processing

Under the UK GDPR, we process your personal information based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you (providing the Service)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security
• Consent: Where you have given specific consent for processing (e.g., marketing communications)
• Legal Obligation: Processing necessary to comply with applicable laws

5. How We Share Your Information

We do not sell your personal information. We share your information with the following trusted third-party service providers who help us operate the Service:

5.1 Stripe (Payment Processing)

We use Stripe to process payments securely. When you make a purchase, Stripe collects and processes your payment card details. We do not have access to your full card number. Stripe is PCI-DSS compliant and processes data in accordance with their privacy policy: https://stripe.com/privacy

5.2 Supabase (Database and Authentication)

We use Supabase to store your account information and application data. Your data is stored securely with encryption at rest. Supabase's privacy policy: https://supabase.com/privacy

5.3 Vercel (Hosting and Infrastructure)

We use Vercel to host and deliver the Service. Vercel may process technical data such as IP addresses and request logs. Vercel's privacy policy: https://vercel.com/legal/privacy-policy

5.4 Convultra (Web Analytics)

We use Convultra to collect anonymised analytics data to understand how visitors use the Service. Convultra is GDPR compliant and does not use cookies, instead utilising browser storage for privacy-friendly analytics. No personally identifiable information is collected through Convultra.

5.5 Other Disclosures

We may also share your information:

• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• With Your Consent: When you have given us permission to share your information

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain information for a reasonable period to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

Usage data and logs are typically retained for up to 12 months. Payment records may be retained longer as required for tax and accounting purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Improve performance and functionality

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly (authentication, security)
• Preference Cookies: Remember your settings and preferences

Cookie-Free Analytics

Our analytics provider, Convultra, does not use cookies. Instead, it uses browser storage to collect anonymised usage data in a privacy-friendly manner that does not require cookie consent.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

8. Your Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information (subject to legal exceptions)
• Restriction: Request that we limit processing of your information
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise these rights, contact us at info@furtherforward.co.uk. We will respond within one month of receiving your request.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest (via Supabase)
• Secure payment processing (via Stripe, PCI-DSS compliant)
• Access controls and authentication
• Regular security assessments

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK, including the United States where some of our service providers (Stripe, Vercel, Supabase) operate. Where this occurs, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard Contractual Clauses approved by the Information Commissioner's Office
• Other lawful transfer mechanisms

Our third-party providers maintain appropriate certifications and data protection agreements to ensure your data is protected.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at info@furtherforward.co.uk.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

15. Complaints

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):