Privacy Policy

This Privacy Policy explains how Loomist collects, uses and protects personal data on loomist.art and in the emails we send before the Loomist app launches. The app will have its own privacy policy, published before launch.

• Key points: we collect your email and a few details about how you joined, to run the waitlist and the “Draw together” program and to send you Loomist news and offers.
• We do not sell your data. We do not use advertising cookies.
• You can unsubscribe from any email in one click, and ask us to see or delete your data at any time.

1. Who we are

Loomist is operated by Adritica BCN SL (NIF B26972802), Barcelona, Spain, which is the data controller for the personal data described here. Contact: [email protected].

2. What we collect

When you join the waitlist we collect:

• Your email address.
• The language of the page you signed up on.
• Your country, as reported by our hosting provider from your connection when you sign up. We do not store your IP address.
• The campaign that brought you to us, if the link you followed was tagged (for example, a link in an Instagram post).
• The invite code you joined with, if you came through a friend’s link and that friend is a confirmed member, and the personal invite code we create for you.

While you are on the waitlist we also keep:

• When you signed up, confirmed your email and, if you did, unsubscribed.
• Which of our emails we have sent you, so you never get the same one twice.
• How many confirmed friends joined with your invite code, and the rewards this earns you.
• Internal labels we may add to group members, for example to mark press contacts.

When you submit the sign-up form, Cloudflare Turnstile checks that you are a person and not a bot. To do this, Cloudflare processes technical data such as your IP address and browser characteristics. We do not store this data.

If an email we send you cannot be delivered permanently, or you mark it as spam, our email provider tells us. We record this so that we never email that address again.

We measure how the website is used with Cloudflare Web Analytics, which does not use cookies: counts of page views, the pages visited, where visitors came from and the type of device. These statistics do not identify you.

3. How we use your data and why

• To confirm your email and keep you on the waitlist, based on your consent when you sign up and confirm.
• To run the “Draw together” program: counting confirmed friends and recording your rewards, based on the program terms you accept by taking part.
• To send you Loomist news and offers, based on your consent. We may choose which emails to send you based on your language, device, country, the campaign you joined from, your rewards and the emails you have already received. You can withdraw your consent at any time with the unsubscribe link in every email.
• To match your waitlist rewards to your app account when the Loomist app launches, using the same email address.
• To protect the waitlist from bots, fraud and abuse, based on our legitimate interest in a fair program.
• To understand how the website is used, in aggregate, based on our legitimate interest in improving it.
• To comply with legal obligations, where the law requires it.

We do not make automated decisions about you that have legal or similarly significant effects.

4. Who processes your data for us

We use these service providers to run the waitlist:

• Cloudflare, Inc.: website hosting, the waitlist database (stored in the European Union), bot protection (Turnstile), forwarding of emails sent to our @loomist.art addresses, cookieless website statistics (Web Analytics), and the country information described above.
• Amazon Web Services EMEA SARL (Amazon Simple Email Service, from its Ireland region): sending confirmation, welcome and campaign emails, and telling us when an email bounces or is marked as spam.

These providers may process personal data only to provide their services to us, under appropriate contractual and security obligations.

We do not sell your personal data. We may share it where the law requires it, to protect the rights and safety of our users or of Adritica BCN SL, or as part of a merger, acquisition or sale of assets, where the law allows.

5. International data transfers

Adritica BCN SL is based in Spain. Our waitlist database is stored in the European Union, and our emails are sent from Amazon’s Ireland region. Cloudflare and Amazon are part of groups based in the United States, so some data may be processed outside the European Economic Area. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. You can ask us for a copy of these safeguards or for the current list of providers.

6. How long we keep your data

We keep your waitlist data until you ask us to delete it, so that your rewards can be credited when the app launches.

If you unsubscribe, we keep your record marked as unsubscribed so that we do not email you again. You can also ask us to delete it completely.

If an email to you bounces permanently or you mark it as spam, we keep a note of this for the same reason: so that we never email that address again.

We will review the waitlist after launch and delete data that is no longer needed. Analytics statistics are kept in aggregate and do not identify you.

7. Your photos and the Loomist app

This website does not collect photos. When the Loomist app launches, the photos you choose to turn into lessons will be processed to create your lessons, as explained in the app’s privacy policy. We will not use your photos to train AI models.

8. Your rights

You have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• ask us to delete your data;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing that took place before.

To exercise these rights, email [email protected] from the address you signed up with. We may need to verify your identity before acting on a request. Every marketing email includes an unsubscribe link.

You also have the right to lodge a complaint with a data protection authority. In Spain, this is the Agencia Española de Protección de Datos (www.aepd.es).

9. Children

Loomist is not intended for children under 14. We do not knowingly collect personal data from children under 14. If you believe a child has joined the waitlist, contact us at [email protected] and we will delete their data.

10. Cookies

This website does not use advertising or tracking cookies. Our analytics are cookieless. Cloudflare may use strictly necessary technical data to deliver the site securely and to run the bot check.

11. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. No system is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy, for example when the Loomist app launches. If a change is material, we will tell you by email or on this page. The date at the top shows when it last changed.