Privacy Policy

The Care Loop operates this website and platform. For any privacy question or to exercise your rights, contact us at [contact email]. Where required, we act as the data controller for the personal data described here.

• Account data: name, email, password (stored hashed), account type (shopper or brand) and, for brands, company name.
• Product & usage data: products you scan, save or interact with, and the Conscious Index results shown to you.
• Technical data: device, browser, IP address, and analytics events (only where you have consented to analytics cookies).
• Communications: messages you send us and your support history.

We process personal data to:

• provide and secure your account and the platform;
• deliver Conscious Index scores and personalised features;
• respond to your requests and provide support;
• improve and analyse the product (where analytics consent is given);
• comply with legal obligations and prevent abuse.

Legal bases (GDPR Art. 6): performance of our contract with you (providing the service), our legitimate interests (security, improvement), your consent (analytics and marketing cookies), and compliance with legal obligations.

We do not sell your personal data. We share it only with trusted service providers that help us run the platform (such as hosting, database, authentication and analytics providers) under contractual confidentiality and data-protection terms, and where required by law.

Your data may be processed in countries outside your own. Where we transfer data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

We keep personal data only for as long as needed for the purposes above or as required by law. When you delete your account, we delete or anonymise associated personal data within a reasonable period, except where retention is legally required.

If you are in the EEA or UK, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• erase your data ('right to be forgotten');
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with your local supervisory authority.

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to opt out of the 'sale' or 'sharing' of personal information, and not to be discriminated against for exercising your rights. We do not sell your personal information. To exercise any right, contact us at [contact email].

We use cookies and similar technologies as described in our Cookie Policy. You can change your choices at any time via "Cookie settings" in the footer.

We use technical and organisational measures including encryption in transit, access controls and row-level security to protect your data. No system is perfectly secure, but we work to keep your data safe.

The platform is not directed at children under 16, and we do not knowingly collect their personal data.

We may update this policy from time to time. Material changes will be notified through the platform or by email where appropriate. The "last updated" date above reflects the latest version.