Privacy notice: early-access list
Last updated: 9 October 2026
1. Who we are
loylo, LLC (“Loylo”, “we”, “us”, “our”) is a Delaware limited liability company. We decide how and why the personal data described in this notice is used, which makes us the controller of that data.
- Registered office: loylo, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA
- Email: contact@getloylo.com
2. What this notice covers
This notice explains how we use personal data when you visit getloylo.com and when you join its early-access list. It does not cover the Loylo app or the private demo. They will have their own privacy notice, which we will show you before you use them.
3. What we collect
When you join the list, we store:
- your name;
- your email address;
- your agency name, or the name you plan to use;
- your agency type: “I run an agency” or “I’m starting an agency”;
- your consent to receive early-access emails (the form only accepts a sign-up with that box ticked), and the version of the consent wording you agreed to;
- campaign details from the link you followed to our site (the UTM source, medium and campaign), if the link had them;
- the website that sent you to us, if there was one (its main address only, such as https://www.google.com, never the full page address);
- a one-way, salted hash of your IP address (for an IPv6 address, of the network part only). We never store the IP address itself;
- the date and time you signed up.
Each time anyone submits the form, we also store a separate attempt record: the same salted hash of the IP address and the time of the attempt. We use these records only to limit repeated or automated sign-ups.
When you visit the site, our hosting provider also processes technical data, such as your IP address, browser type and the pages requested. It does this to deliver the site and protect it from abuse. The form uses a hidden anti-spam field and a limit on attempts, not a third-party bot check.
We do not ask for sensitive personal data. Please do not include any in the form.
4. How we use your data
We use your data to:
- send you emails about Loylo early access, including updates before launch and your sign-in link and invitation to a private demo when the app launches;
- understand, in aggregate, which campaigns and types of agency are signing up, so we can plan the launch;
- keep a record of your consent and of any request to unsubscribe;
- keep the site and the form secure.
We do not sell your personal data. We do not use it for automated decisions that have legal or similarly significant effects on you.
5. Our lawful basis (UK GDPR and EU GDPR)
| Purpose | Lawful basis |
|---|---|
| Early-access emails, including the demo invitation | Your consent (Article 6(1)(a)) |
| Analysing, in aggregate, which campaigns and agency types sign up | Our legitimate interests (Article 6(1)(f)) in planning our launch and marketing |
| Keeping records of consent and unsubscribe requests | Legal obligation (Article 6(1)(c)), to be able to show we have your consent, and our legitimate interests (Article 6(1)(f)) in not emailing people who have opted out |
| Security and abuse prevention | Our legitimate interests (Article 6(1)(f)) in keeping the site and form secure |
You can withdraw your consent at any time. Use the unsubscribe link in any of our emails, or email contact@getloylo.com. Withdrawing consent does not affect anything we did before you withdrew it.
6. Who we share it with
We use service providers (“processors”) that handle data only on our instructions, under written contracts.
| Provider | What it does for us | Where data may be processed |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, stores the early-access list in its database, and protects the site from attacks and abuse | The USA and other countries where Cloudflare runs its network |
| Mailtrap | Delivers our emails | The USA and other countries where Mailtrap or its providers operate |
| Google LLC (Google Workspace) | Hosts our email, including messages you send to contact@getloylo.com | The USA and other countries where Google operates |
We may also disclose data where the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or reorganised. If that happens, the new owner will be bound by this notice, and we will tell you.
7. International transfers
We are based in the USA, and our providers may process data in the USA and other countries. Where we transfer personal data from the UK or the European Economic Area to a country without an adequacy decision, we rely on the EU-US Data Privacy Framework and its UK Extension where the recipient is certified under it. Otherwise we rely on the European Commission’s Standard Contractual Clauses together with the UK Addendum, or the UK International Data Transfer Agreement, with any extra measures needed. You can ask us for a copy of the relevant safeguards.
8. How long we keep it
- Early-access list: until 24 months after the Loylo app launches, or until you unsubscribe or ask us to delete your data, whichever comes first. If you become a customer, the app’s privacy notice applies from then on.
- The IP hash saved with your sign-up: kept and deleted with the sign-up.
- Consent records: kept and deleted with the sign-up, except as described in the next point.
- Unsubscribe and deletion records: when you unsubscribe or ask us to delete your data, we delete your sign-up and keep only your email address, the date you signed up, the version of the consent wording you agreed to and the date you left. We use this only to make sure we never email you again and to show what you agreed to if there is a complaint. We keep it for as long as we send marketing emails.
- Sign-up attempt records (an IP hash and a time): deleted after 2 days.
- Technical and security logs: kept for no more than 30 days.
9. Your rights in the UK and the EU
You have the right to:
- ask for a copy of your personal data;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests;
- receive the data you gave us in a portable format, where we rely on consent;
- withdraw your consent at any time.
To use any of these rights, email contact@getloylo.com. We will reply within one month. For complex requests we may need up to two more months, and we will tell you if so. We may ask you to confirm your identity, usually by replying from the email address on the list.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live or work in the EEA. We would appreciate the chance to put things right first.
10. Your rights in California and other US states
The California Consumer Privacy Act (CCPA), as amended, applies only to businesses that meet set thresholds, and Loylo may not meet them yet. We will honour the rights in this section either way.
What we collect. In the past 12 months we have collected these categories of personal information:
- identifiers: name, email address and a hashed IP address;
- professional information: agency name and agency type;
- internet or other electronic network activity: campaign parameters, the referring website and the technical data described in section 3.
We collect this information from you and from your device. We use it for the purposes in section 4, and we keep it for the periods in section 8. We disclose it for business purposes only to the service providers in section 6.
What we don’t do. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the past 12 months. We do not collect sensitive personal information. We do not knowingly collect personal information from anyone under 16.
Your rights. If you live in California, you have the right to:
- know what personal information we have collected about you and how we use and disclose it;
- ask us to delete it;
- ask us to correct it;
- opt out of the sale or sharing of your personal information (we do neither);
- limit our use of sensitive personal information (we do not collect any);
- not be treated differently for using any of these rights.
To make a request, email contact@getloylo.com. We will verify your request, usually by matching the email address on the list. You can use an authorised agent, who must show us your signed permission.
If you live in another US state with a consumer privacy law, you may have similar rights. Email us and we will help.
11. Cookies
This site does not use advertising or analytics cookies, and it does not load analytics tools or advertising pixels. We read campaign details from the link you followed, not from a cookie. Cloudflare may set strictly necessary cookies to protect the site from bots and abuse. If we ever add analytics or advertising tools, we will update this notice first and ask for your consent before they load.
12. Security
The site uses encryption in transit (HTTPS). Only the people who need the list to do their job can see it, and our providers keep their own security measures. No method of sending or storing data is completely secure, but we work to protect your data.
13. Children
The early-access list is for people running or setting up a business. It is not intended for anyone under 18.
14. UK and EU representatives
We are appointing a UK and EU representative under Article 27 of the UK GDPR and the EU GDPR, and will list them here. Until then, contact us at contact@getloylo.com.
15. Changes to this notice
If we change how we use your data, we will update this notice and the date at the top. If a change is significant, we will email you before it takes effect.
16. Contact us
- loylo, LLC
- Email: contact@getloylo.com
- Registered office: 131 Continental Dr, Suite 305, Newark, DE 19713, USA