Last updated: 07/02/2026
This Privacy Notice explains how Stitch & Loop (“we”, “us”, “our”) handles personal data.
We aim to collect as little as possible: we only ask you for your email address to create and manage your account, plus limited technical data generated by standard hosting/security logging.
1. Who is the data controller?
Data controller: Applied Energistics LTD
Address: 38 Jute Road, York, YO26 5EN, United Kingdom
Email: [email protected]
2. What data we collect
A. Data you provide
- Email address (for account creation, authentication, and account administration)
B. Data collected automatically (technical)
Like most online services, our hosting and security systems may log basic technical data when you use Stitch & Loop, such as:
- IP address,
- timestamps,
- device/browser information,
- request/error logs.
We don’t try to identify you from this data, and we use it mainly for security and reliability.
3. What we use your data for (and our lawful basis)
We use your email address to:
- Provide the Service (account creation, authentication, account management)
Lawful basis: performance of a contract (providing the Service you requested). - Service communications (important operational emails)
Lawful basis: performance of a contract and/or legitimate interests (keeping the Service secure and functional).
We use technical logs to:
- maintain security,
- prevent abuse,
- diagnose bugs and outages.
Lawful basis: legitimate interests.
Marketing: We do not send marketing emails unless you explicitly opt in. If we introduce marketing emails in future, we will only send them on an opt-in basis.
4. How long we keep data
- Email address: kept while your account is active, and for a limited period after deletion to handle legal, security, or dispute requirements (6 months).
- Technical logs: retained for a short period appropriate for security and troubleshooting (90 days), longer only if needed for security incidents.
5. Who we share data with
We don’t sell your data.
We may share limited data with service providers who help us run Stitch & Loop (processors), such as:
- hosting/infrastructure provider,
- database/storage provider,
- email delivery/auth provider.
These providers are only permitted to process data on our instructions and for operating the Service.
Subprocessors: Loveable.dev
6. International transfers
If any of our providers process data outside the UK, we ensure appropriate safeguards are used (for example, UK adequacy regulations or approved contractual clauses).
7. Security
We use reasonable technical and organisational measures to protect your data (access controls, encryption in transit where supported, and least-privilege access). No system is 100% secure, but we work to minimise risk.
8. Your rights
Under UK data protection law, you typically have rights including:
- access to your personal data,
- correction,
- deletion,
- restriction and objection in certain circumstances,
- data portability (where applicable).
To exercise rights, contact us at [email protected].
9. Complaints
If you’re unhappy with how we handle personal data, you can complain to the UK Information Commissioner’s Office (ICO).
10. Children
Stitch & Loop is not intended for children under 13 (or the applicable age of digital consent in your country). We do not knowingly collect personal data from children.
11. Changes to this notice
We may update this Privacy Notice from time to time. If changes are significant, we’ll take reasonable steps to notify you (e.g., in-app notice or email).
12. Contact
Questions or requests: [email protected]