Privacy Policy
Loopxo is operated by Titan Integrated Technology FZE LLC (“Titan”, “Loopxo”, “we”, “us”, or “our”).
We respect your privacy and are committed to handling personal data transparently, securely, and responsibly.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, when it may be disclosed, how long we retain it, and the choices and rights available to you.
This policy applies to:
the Loopxo website, including loopxo.app
the Loopxo Store application and business dashboard
Loopxo customer web applications and store pages
the Loopxo Wallet mobile application
other Loopxo services that link to this Privacy Policy
1. Who We Are
Loopxo is a customer relationship, loyalty, rewards, business management, billing and engagement platform operated by Titan Integrated Technology FZE LLC.
Titan Integrated Technology FZE LLC Office CWS-1V-228292 26th Floor, Amber Gem Tower Sheikh Khalifa Street Ajman, United Arab Emirates
For privacy questions, requests or complaints, contact support@loopxo.app.
2. Our Role and the Role of Stores
Loopxo connects customers with independent businesses such as salons, car-care businesses, cafés, pet-care businesses and other participating merchants.
For information relating to your Loopxo account, Loopxo identity, authentication, platform security, Loopxo communications and operation of the Loopxo platform, Titan Integrated Technology FZE LLC generally determines how and why the information is processed.
Participating stores separately determine how they manage their direct commercial relationship with their customers.
For certain store-specific information, Loopxo may process information on behalf of the participating store while also processing certain information where necessary to operate, secure and administer the Loopxo platform.
A participating store does not gain access to your activity with other Loopxo stores.
3. Customer Information We Collect
Account and identity information
A Loopxo customer account requires a verified mobile number and a verified email address. Customers use OTP-based authentication and do not create a customer password.
You may also voluntarily provide a name or display name, date of birth, and profile photo. Providing a full legal name is not required. Date of birth and profile photo are optional.
A profile photo is used for your own Loopxo account experience. Participating stores cannot view your profile photo.
Store relationship and activity information
When you interact with a participating store through Loopxo, we may process:
• store memberships
• visits
• purchase and billing history
• invoices
• services or products purchased
• amounts spent
• discounts
• loyalty points and points history
• rewards
• promotional offers and offer redemptions
• appointment or order information where applicable
• payment status and transaction references
• customer feedback
• other structured information generated through Loopxo features
Feedback submitted through Loopxo may remain associated with your customer account and the relevant store relationship. Stores are not provided with an unrestricted free-text field for recording arbitrary personal information about customers.
4. Information Stores Can See
A participating store may access information relating specifically to its own relationship with you. Depending on the Loopxo features being used, this may include:
• your name or display name
• your mobile number
• your visits to that store
• purchases and billing history with that store
• invoices relating to that store
• loyalty points and rewards relating to that store
• offer activity
• appointments or orders
• spending and customer relationship information
• feedback you provide relating to that store
Information stores cannot see
• your email address
• your profile photo
• your relationships with other Loopxo stores
• your visits to other stores
• your purchases from other stores
• your points or rewards with other stores
• other private Loopxo account information that is not relevant to that store relationship
Date of birth
Your date of birth is optional. A particular store may see it only if you explicitly permit that specific store to access it. You may withdraw that permission at any time.
The same permission-based principle will apply if Loopxo introduces additional optional profile fields that may be shared with stores in the future.
5. Sensitive Information and Device Access
Loopxo does not intentionally request unrelated or sensitive personal information unless it is reasonably necessary for a specific feature, service or legal requirement and is appropriately disclosed at the point of collection.
The current Loopxo platform is not intended to be used as a medical-record system. Businesses should not use general Loopxo fields to upload or record clinical records, diagnoses, prescriptions, test results or other medical-record information unless Loopxo expressly introduces a feature designed and disclosed for that purpose.
Loopxo Wallet does not currently request general access to your contacts, microphone, camera, or files.
If you choose to add or change a profile photo, Loopxo Wallet may request access to your device photo library so you can select an image. We use the selected image for your profile and do not use photo-library access for unrelated purposes.
6. Technical, Device and Security Information
When you use Loopxo, we may automatically process limited technical information necessary to operate, secure and improve the service, including:
• IP address
• device type
• operating system
• app version
• login timestamps
• device identifiers
• push-notification tokens
• security events
• OTP request and verification events
• rate-limit events
• suspected fraudulent or abusive activity
• application errors
• technical or diagnostic logs
OTP and security logs are normally retained for up to 6 months, unless they are required for longer because of an active security investigation, fraud investigation, dispute or legal obligation.
We do not retain OTP codes longer than necessary for authentication and security purposes.
7. Store Owner and Staff Information
When a business creates and operates a Loopxo store, we may collect information relating to the store owner, including name, email address, mobile number, account information, store affiliation, business information, subscription and billing information, store usage information, and relevant security and authentication information.
Store owners create and manage access for their staff. For staff access, Loopxo currently records only the staff member's name, together with the system information necessary to associate that staff access with the relevant store and permissions.
Loopxo does not currently require store owners to upload business-verification or identity documents such as commercial registrations, trade licences, VAT certificates, passports, or owner identification documents.
If this changes, this Privacy Policy and the relevant collection notice will be updated as necessary.
8. Website and Waitlist Information
If you submit information through the Loopxo website or waitlist, we may collect:
• business name
• your name
• business email address
• phone number
• country
• business type
• number of locations
• any optional message you provide
We use waitlist information only for communications connected to Loopxo, including launch information, onboarding, product information and follow-up relating to your interest in Loopxo.
Waitlist information belonging to a person or business that does not become a Loopxo customer is normally retained for up to 12 months, unless there is a valid reason or legal requirement to keep it longer.
9. How We Collect Personal Data
We may collect personal data from different sources depending on how you use Loopxo:
• directly from you when you create or update an account, join a store, submit information, contact support, change preferences, or otherwise use Loopxo
• from a participating Business when it records information relating to its direct relationship with you, such as visits, purchases, invoices, appointments, orders, points, rewards, offers or feedback
• from service providers that support authentication, messaging, payments, app distribution, security, infrastructure or other Loopxo functionality
• automatically from your device or use of the Platform where necessary for authentication, security, reliability, fraud prevention, diagnostics and core technical operation
Where information is obtained from a participating Business, that Business is responsible for ensuring that it has an appropriate basis to provide or record the information through Loopxo.
10. How We Use Personal Data
We may process personal data to:
• create and maintain Loopxo accounts
• verify email addresses and mobile numbers
• authenticate users
• provide the Loopxo Wallet and customer applications
• create and maintain store/customer relationships
• calculate and manage loyalty points and rewards
• operate offers and promotions
• provide invoices and transaction history
• process appointments and orders where applicable
• deliver essential notifications
• provide customer support
• provide store-management functionality
• prevent fraud, misuse and unauthorized access
• enforce rate limits and security protections
• investigate suspicious activity
• troubleshoot technical problems
• monitor service reliability and performance
• improve Loopxo products and features
• personalize the in-app experience
• meet legal and regulatory obligations
• establish, exercise or defend legal claims
• protect Loopxo, participating stores, customers and other users
We process personal data only where we have an appropriate legal basis under applicable law, which may include your consent, providing services requested by you, performing contractual obligations, complying with legal obligations, protecting vital interests, or another basis permitted by applicable law.
11. Personalization
Loopxo may use your activity within Loopxo to personalize your experience, for example by displaying more relevant offers, rewards, store content, notifications, or features based on your store relationships, points, rewards and activity.
This personalization is for the Loopxo experience. We do not sell this information to advertisers or use it to create third-party advertising profiles.
12. Marketing and Promotional Notifications
Loopxo may send promotional messages through push notifications. Participating stores may also send promotional push notifications to their own Loopxo customers.
Promotional notifications are optional
Promotional push notifications are off by default and require an active opt-in. Customers can separately control promotional notifications from Loopxo and from individual stores.
Customers can withdraw marketing consent at any time. Withdrawing marketing consent does not prevent necessary service communications such as OTPs, security alerts, invoices, appointment updates, order-status updates, account notices, or other essential service messages.
13. Store Mobile-Number Use
Participating stores may see the mobile number associated with customers belonging to their store relationship.
A store's access to that mobile number through Loopxo does not automatically give the store permission to use the number for independent SMS, WhatsApp, telephone or other external marketing. A store must obtain any separate consent required before using customer contact information for external marketing.
14. Archived Stores and Notification Controls
Customers cannot delete an individual store relationship from their Loopxo account simply by removing the store. Customers may instead archive a store and mute that store's promotional push notifications.
Archiving affects how the store appears in the customer's Loopxo experience. It does not automatically erase legitimate historical records relating to that customer/store relationship.
The relevant store may continue to access its existing store-specific customer history where necessary and permitted. Muting promotional notifications does not prevent essential service notifications from being delivered.
15. Analytics and Product Improvement
Loopxo may process limited technical and operational metrics generated by the Platform to understand service usage, identify errors, improve performance, diagnose technical problems, improve product functionality, and maintain security.
If Loopxo introduces third-party analytics, crash-monitoring or similar optional technologies that materially change how personal data is processed, we will update the relevant disclosures and obtain consent where required. Loopxo does not use these activities to sell personal data or build third-party behavioral advertising profiles.
Loopxo may also use aggregated or anonymized information that cannot reasonably identify an individual customer or individual store for product development, analytics, business intelligence, performance analysis, statistical reporting, and anonymous platform-wide benchmarks.
For example, Loopxo may create aggregated insights concerning customer revisit patterns or business-category performance where individual customers and individual stores cannot reasonably be identified.
16. Cookies and Similar Technologies
Loopxo uses essential browser technologies where necessary to provide the service. These may include authentication/session storage, local browser storage, security-related storage, onboarding-state storage, application cache, and service-worker/PWA storage.
These technologies help maintain sessions, remember necessary application state, improve reliability and provide core application functionality.
Loopxo does not currently use advertising trackers such as Meta Pixel or Google Ads tracking for cross-site or cross-app behavioral advertising.
If Loopxo introduces optional analytics cookies, advertising technologies or materially different tracking technologies in the future, we will update our disclosures and obtain consent where required.
17. Payment Information
Loopxo does not store customers' full debit-card or credit-card numbers.
Where payments are processed through an external payment provider, payment-card information is handled by the relevant payment provider under its own security and privacy requirements.
Loopxo may retain limited information necessary for platform operation, such as transaction reference, payment status, transaction amount, payment method category, and information necessary for invoices, reconciliation or dispute management.
18. Service Providers
Loopxo uses trusted service providers to operate parts of the platform. These may provide cloud hosting and databases, authentication, email verification, SMS/OTP delivery, push-notification delivery, analytics and crash monitoring, payment processing, infrastructure, security, and customer support.
We disclose only the information reasonably necessary for these providers to perform services for Loopxo. They are not permitted to use Loopxo customer information for their independent marketing purposes merely because they provide a service to us.
Loopxo may maintain a separate subprocessor list so that technology providers can change without requiring the entire Privacy Policy to be rewritten.
19. We Do Not Sell Personal Data
Loopxo does not sell or rent personal data. We do not provide customer databases to data brokers or advertisers for their independent marketing.
20. Legal Disclosures
We may disclose personal data where reasonably necessary and legally permitted to comply with applicable law, comply with a valid court order, respond to a lawful request from a competent regulator or authority, investigate fraud or unlawful activity, enforce legal rights, defend legal claims, or protect the safety, rights and security of Loopxo, stores, users or others.
We do not treat a government or authority request as unrestricted permission to disclose personal information. Requests must have an appropriate lawful basis.
21. Business Transfers
If Titan Integrated Technology FZE LLC or Loopxo is involved in a merger, acquisition, restructuring, financing, sale of business or assets, or transfer to another legal entity, personal data may form part of that transaction where legally permitted.
Any successor receiving personal data will be required to handle that information in accordance with applicable privacy obligations. Where required by law, users will be informed of material changes affecting the controller or processing of their personal data.
22. International Data Transfers
Loopxo serves users in Oman, the United Arab Emirates and potentially other countries. Our technology infrastructure and service providers may process information in countries different from the country where you are located.
Loopxo currently uses infrastructure through which personal data may be hosted or processed in India and may also use service providers that process information in other countries.
Where personal data is transferred internationally, Loopxo will take the steps required under applicable law to protect that data. Depending on the circumstances, these may include evaluating the level of protection in the destination, contractual safeguards, appropriate technical and organizational measures, limiting the information transferred, obtaining and recording consent where required, and using other legally recognized transfer mechanisms.
For users in the Sultanate of Oman, where applicable Omani law requires consent for an international transfer of personal data, Loopxo will obtain and record the required consent before the transfer unless a lawful exception or other permitted transfer mechanism applies.
23. Children and Younger Users
Loopxo is intended to be usable by people of different ages and does not impose a general minimum age solely for using Loopxo.
Mobile-number or email OTP verification confirms control of the contact method used for authentication. It is not treated by Loopxo as proof of a user's age.
Where applicable law requires parental or guardian authorization, age-assurance measures, additional notices, or other protections before certain personal data relating to a child can be processed, Loopxo will apply the protections required for that processing.
If Loopxo becomes aware that personal data relating to a child has been processed in circumstances requiring additional authorization or protection, we may limit the relevant processing, seek the required authorization, or delete or restrict the information as required by applicable law.
A parent or legal guardian may contact support@loopxo.app regarding a child's personal data where applicable law gives the parent or guardian rights to access, correct, restrict, withdraw consent for, or request deletion of that information.
24. Consent Records
Where Loopxo relies on consent, we may retain records demonstrating that consent. This may include records of Privacy Policy acceptance, Privacy Policy version, date and time of acceptance, marketing consent, notification preferences, permissions allowing a store to access optional information such as date of birth, withdrawal of consent, and subsequent changes to privacy choices.
25. Automated Processing
Loopxo may use automated systems to identify potentially suspicious activity, fraud, misuse, unusual reward activity or security risks.
Loopxo will not rely solely on automated processing to make significant enforcement decisions, such as a permanent account ban or comparable serious restriction, without providing the possibility of appropriate human review.
26. How Long We Keep Information
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy and as permitted or required by applicable law.
Customer accounts
Customer account information may be retained while the Loopxo account remains open and while the information remains necessary to provide the service or maintain legitimate customer/store relationships. We do not automatically delete a customer's account solely because the customer has not recently used Loopxo. Customers may request account deletion.
Store closure or cancellation
If a store closes or terminates its Loopxo account, customer data associated specifically with that store and the store's own business data may be retained for up to 6 months for legitimate closure, reconciliation, support and related purposes, unless applicable law requires earlier deletion or allows or mandates longer retention.
The customer's independent Loopxo account is not deleted simply because one participating store closes.
Security and OTP logs
Normally retained for up to 6 months, unless needed longer for an active investigation, dispute or legal requirement.
Waitlist information
Normally retained for up to 12 months if the applicant does not become a Loopxo customer.
Invoices, tax and transaction records
Certain information may need to be retained for longer where required by tax, accounting, consumer-protection or other applicable laws, or where necessary for a dispute, investigation or legal claim. Where possible, information retained after account deletion will be anonymized or pseudonymized if continued identification of the customer is not required.
27. Account Deletion
Customers may request deletion of their Loopxo account by contacting support@loopxo.app.
Loopxo will verify the identity of the requester before processing the deletion request. Verification may use the registered email address, mobile number and/or OTP verification.
Verified deletion requests will normally be processed within 30 days, subject to applicable law and any information that Loopxo is legally required or permitted to retain.
Loopxo provides an accessible path from the Wallet for a customer to initiate an account-deletion request.
Deleting an account may result in the loss of store memberships, available points, rewards, offers, account history, and other customer-account functionality.
28. Backups After Deletion
Information deleted from active Loopxo systems may temporarily remain in secure backups. Deleted information may remain in backup systems for up to 90 days before being overwritten or permanently removed according to Loopxo's backup processes.
Backup information is not intended to be restored into active use except where necessary for disaster recovery, system integrity or a legal requirement. If backup information is restored during disaster recovery, deletion requirements will continue to apply.
29. Your Privacy Rights
Depending on where you live and the law that applies, you may have rights concerning your personal data. These may include the right to:
• know how your data is processed
• request access to personal data
• obtain a copy of personal data
• correct or update inaccurate data
• request deletion
• withdraw consent
• restrict or object to certain processing
• withdraw marketing consent
• change store-specific privacy permissions
• request transfer of data where required by law
• object to certain automated decisions and request human review
• submit a complaint to the appropriate privacy authority
To exercise a privacy right, contact support@loopxo.app. We may verify your identity before completing a request.
We aim to respond to verified access, correction, copy and deletion requests within 30 days, unless applicable law requires a different period or the request is unusually complex.
30. Updating Your Information
Customers may correct or update available personal information through Loopxo or by contacting support. Changes to verified information such as an email address or mobile number may require re-verification before the change becomes effective.
Customers may remove an optional profile photo at any time. Customers may also withdraw permissions previously given to individual stores for optional information such as date of birth.
31. Security
Loopxo uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, disclosure, alteration and destruction.
Measures may include authentication controls, role-based and restricted access, separation of store/customer access, encrypted transmission, database access controls, logging and monitoring, rate limiting, fraud and abuse detection, security reviews, and appropriate operational procedures.
Stores are restricted to information associated with their own customers and store relationship. However, no website, mobile application, communications network, database or electronic storage system can be guaranteed to be completely secure.
Users should protect access to their devices and promptly report suspected unauthorized access.
32. Personal Data Breaches
If Loopxo becomes aware of a personal-data breach, we will investigate it and take reasonable measures to contain and remediate the incident.
Where required by applicable law, Loopxo will notify the competent data-protection authority and/or affected individuals within the period and under the circumstances required by applicable law.
33. Store Data Access and Exports
Participating stores may view customer information relevant to their own customer relationships within Loopxo.
Loopxo does not currently provide stores with a bulk-download or bulk-export function for the customer database. Store owners may download individual invoices or transaction records where that functionality is provided. Customers may download their own invoices.
These limitations are intended, among other purposes, to reduce unnecessary extraction and distribution of customer information.
34. Changes to This Privacy Policy
We may update this Privacy Policy when Loopxo changes, when our processing practices change, or when legal or regulatory requirements change. We will update the date at the top of this Policy when changes are made.
If a change materially affects how personal data is collected, used or disclosed, we will provide appropriate notice. Where appropriate or legally required, we may require users to actively accept the updated Privacy Policy before continuing to use relevant Loopxo services.
Minor administrative or clarification changes may not require re-acceptance.
35. Applicable Privacy Framework
Loopxo is intended to launch commercially in the Sultanate of Oman and the United Arab Emirates, while users from other countries may also be able to create Loopxo accounts.
We process personal data in accordance with privacy and data-protection laws applicable to the relevant processing and individual.
For users in Oman, this includes the Personal Data Protection Law issued by Royal Decree 6/2022, as amended, and its Executive Regulations.
For users in the UAE, this includes Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data and other applicable privacy legislation, including applicable child digital-safety requirements.
Nothing in this Privacy Policy is intended to limit any mandatory privacy rights available to an individual under applicable law.
36. English and Arabic Versions
This Privacy Policy is intended to be made available in English and Arabic. Both versions are intended to communicate the same privacy practices and protections.
If a mandatory legal requirement determines which language or interpretation must prevail in a particular jurisdiction, that mandatory requirement will apply.
37. Contact Us
For privacy questions, data requests, consent withdrawal, account-deletion requests or privacy complaints, contact:
Titan Integrated Technology FZE LLC Office CWS-1V-228292 26th Floor, Amber Gem Tower Sheikh Khalifa Street Ajman, United Arab Emirates Email: support@loopxo.app
