Privacy Policy
1. Who we are
Loop CheckOut is operated by LoopTechLabs Limited, a company incorporated in Hong Kong. We provide a digital receipt platform that connects consumers and merchants at the point of sale. References to "Loop", "we", "us" or "our" in this policy refer to LoopTechLabs Limited.
If you have any questions about this policy, please contact us at privacy@loopcheckout.com.
2. Information we collect
From consumers:
- Email address and display name when you create an account
- Your unique Loop barcode identifier
- Receipt data: merchant name, date, time, itemised line items, amounts, and payment method as provided by the merchant
- Optional profile details you choose to provide: first and last name, date of birth, yearly income range, and home/work district. These fields are entirely optional and used only to personalise your own spending insights — you can leave them blank or clear them at any time
- An optional profile photo, if you choose to set one (selected from your device's photo library)
- App usage data: a defined list of in-app events (for example, sign-up completed or receipt viewed), together with your notification and marketing preferences. We do not record which screens you visit, and we do not record what you search for inside the app
- Device information: device type, OS version, app version, and push notification token
From merchants:
- Business name, address, and contact email
- Receipt and transaction data entered in the merchant app or forwarded to us by email from the merchant's point-of-sale system
- Dashboard usage data
3. How we use your information
We use the information we collect to:
- Deliver digital receipts to consumers in real time
- Operate and maintain the Loop CheckOut platform
- Send transaction notifications and product updates (you can opt out at any time)
- Generate spending summaries and insights displayed only to you
- Provide merchant analytics and transaction reporting
- Detect and prevent fraud, abuse, and security incidents
- Comply with our legal obligations under Hong Kong law
We do not sell your data to third parties. We do not use your receipt data for advertising purposes.
4. Direct marketing
This section is our notice under Part VIA of the Personal Data (Privacy) Ordinance (Cap. 486). It matches, word for word, the consent notice shown in the Loop CheckOut app, recorded as version v1-2026-07.
Loop CheckOut intends to use your personal data to send you direct marketing. This will not happen without your consent.
Both marketing settings are off by default. We treat silence as a refusal, not as consent. You turn them on yourself in the app under Profile, and we record which version of this notice you agreed to and when.
Data that will be used. This depends on which setting you turn on.
- Offers & promotions: Your Loop account (to deliver notifications to your device).
- Personalized offers: Your purchase history (merchants, items, amounts, visit dates) and, if you set it, your birthday.
What you may receive. Offers, promotions and rewards for retail, food & beverage and other goods and services from merchants on Loop — including merchants you have not shopped at yet.
Opting out. You can opt out at any time, free of charge, by turning this off — offers stop, receipts keep arriving. You control how many offers you get per week. You can also opt out by emailing privacy@loopcheckout.com, and we will action your request free of charge.
We do not pass your data to merchants for their own marketing. Merchants create offers on Loop and we deliver them. We do not provide, sell, or transfer your personal data to any merchant or other third party for that party’s own direct marketing, whether for gain or otherwise.
5. Data sharing
We share data only in the following circumstances:
- With merchants: When a consumer presents their barcode, the merchant's POS system links the transaction to that consumer's account. Merchants receive confirmation that the receipt was delivered but do not have ongoing access to the consumer's receipt history.
- Service providers: We use third-party providers for database hosting, authentication, email delivery, push notifications, and product analytics. Our primary database is hosted in Singapore, with backups in Tokyo, Japan; our email provider processes inbound and outbound email in Tokyo, Japan. Our analytics provider processes data in the United States (see section 9). Providers process data only as necessary to provide their services to us.
- Legal requirements: We may disclose information if required to do so by law, court order, or to protect the rights and safety of Loop, our users, or the public.
6. Data retention and account deletion
You can delete your account at any time from within the Loop CheckOut app, under Profile → Support → Delete account. Deletion takes effect immediately. There is no grace period and it cannot be undone, so the app shows you what you will lose and asks you to confirm before proceeding.
What deletion does. We remove your email address and phone number from our systems, permanently disable your sign-in, end all active sessions, deactivate your Loop Tag and QR code so no further receipts can be added to your account, and stop all marketing messages. Your email address is freed, so you can create a new account with it later if you wish.
What we keep, and why. A receipt is a record of a transaction between you and a merchant, and the merchant is legally required to keep its own business records — in Hong Kong, for at least 7 years under section 51C of the Inland Revenue Ordinance (Cap. 112). We therefore do not delete receipts, loyalty records, points ledgers or security audit logs when you close your account. Instead we remove the personal identifiers that link them to you. The merchant keeps its sales record; it no longer identifies you as the customer.
Your display name on shared items. If you shared a receipt or split a bill with another Loop CheckOut user, the name you chose stays visible to that person afterwards, in the same way an email you sent does not disappear when you close your email account. This is so the people you shared with keep a usable record. If you would prefer your display name removed as well, email privacy@loopcheckout.com and we will do it.
Deletion feedback. If you tell us why you are leaving, we store your answer without any link to you or your account, and we do not record the time of day. We cannot connect it back to you afterwards, so please do not include personal details in the optional comment box.
Data access and export. You may request a copy of the personal data we hold about you at any time by emailing privacy@loopcheckout.com. We recommend requesting this before deleting your account, since deletion is immediate and afterwards we can no longer identify which records were yours.
While your account is open, we retain your data for as long as the account remains active.
7. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and role-based access controls. Our infrastructure is hosted in data centres located in Asia. We conduct periodic security reviews and notify affected users promptly in the event of a breach.
8. Your rights under Hong Kong PDPO
Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:
- Request access to personal data we hold about you
- Request correction of inaccurate personal data
- Request deletion of your personal data (subject to legal retention obligations)
- Opt out of direct marketing communications at any time
To exercise any of these rights, contact us at privacy@loopcheckout.com. We will respond within 40 days as required by the Ordinance.
9. Cookies and analytics
Our websites use PostHog, a product-analytics service, to understand how they are used (for example, which pages are viewed and which links are clicked). This covers this website, the Loop CheckOut web app at app.loopcheckout.com, and the shared-receipt pages at receipts.loopcheckout.com. PostHog sets a first-party cookie to distinguish repeat visits and may collect technical information such as your IP address, browser, device type, and pages viewed. This data is processed on PostHog's United States infrastructure and is used only to improve our website and product; we do not use it for advertising, and we do not sell it. See PostHog's Privacy Policy for details.
We configure PostHog to create user profiles only for identified users, so if you are not signed in, no profile is built for you. We do not enable session recording, and we do not enable automatic capture of clicks or form interactions — only a defined list of events is recorded. If you sign in, we identify you to PostHog by your account identifier only; we do not send your name or email address. Receipt contents, exact transaction amounts, and the access links used to open a shared receipt are never sent to our analytics provider.
A notice is shown on your first visit. You can opt out of analytics at any time by enabling "Do Not Track" in your browser or by contacting us using the details below. The Loop CheckOut mobile apps use analytics only to measure product usage on the same basis; they do not use advertising cookies, session recording, or autocapture, and exact transaction amounts are never sent to our analytics provider.
10. Children
Loop CheckOut accounts are intended for users aged 13 and over. We do not knowingly create accounts for, or knowingly collect personal data from, children under the age of 13. A younger child may physically present a Loop barcode at a shop to have a receipt delivered to a parent's or guardian's account, but the account itself must be held and managed by someone aged 13 or older. If you believe a child under 13 has created an account or provided us with personal data, please contact us at privacy@loopcheckout.com and we will delete it.
11. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify registered users via the app or email. Continued use of Loop CheckOut after any update constitutes acceptance of the revised policy.
Contact
LoopTechLabs Limited
88 Kwai Cheong Road, Kwai Chung,
New Territories,
Hong Kong
privacy@loopcheckout.com