Privacy Policy
Last updated August 10, 2026
This Privacy Policy explains what personal information My Local Loop collects, how we use and share it, who our service providers are, and the choices you have. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
1.Who we are & scope
My Local Loop Inc. (“MLL”, “we”, “us”, “our”) operates a platform that connects people who shop local (“Locals”) with independent businesses (“partners”) offering exclusive deals. We are based in Kamloops, British Columbia, Canada. This policy applies to personal information we handle when you visit our website, create an account, use the Local or partner portals, apply for access, or otherwise interact with our services.
My Local Loop is currently offered as a closed beta in and around Kamloops. We are the organization responsible (the “controller”) for the personal information described here.
2.Information we collect
Information you give us
- Account details — your name and email address, managed through our authentication provider. Your password and login credentials are handled by that provider; we never see or store your password.
- Local profile — the city you select, your notification preferences, and the deal categories you tell us you're interested in.
- Partner application details — if you apply as a partner, the business name, your name and role, business email and phone number, business address and postal code, business category, the baseline discount and example deals you propose, your website and social handles, and how you heard about us.
- Partner profile — for approved partners, your storefront details including description, address, contact information, social links, an uploaded logo image, and a tax/GST number you may add for invoicing (not shown publicly).
- Support messages — the contents of support requests and replies you send us.
- Payment information — if and when paid Local passes are offered, payments are handled by our third-party payment processor. We do not receive or store your full card number; we may receive limited billing details such as the last four digits, card brand, and payment status.
Information we collect automatically
- Technical and log data — your IP address, browser and device type, and basic request logs. We use your IP address for security and abuse-prevention purposes, including rate limiting.
- Approximate location — we may infer a general location from your IP address, and we use the city you provide. When you use map features, map imagery is loaded from a third-party map-tile provider, which receives your IP address as part of serving the map.
- Essential cookies — we use a small number of strictly necessary cookies to keep you signed in and to keep the service secure. We do not use advertising cookies.
We do not use third-party advertising networks or cross-site tracking, and we do not sell your personal information.
Redemption data
When you redeem an offer in-store, we record the deal, the partner, the date and time, and the amount saved, so we can show you your savings, keep usage limits accurate, and give partners aggregate performance data. A partner may also record the receipt total for a visit; this revenue figure is shown only to that partner and is never shown to other Locals.
3.How we use your information
- To provide, operate, maintain, and improve the service.
- To create and manage your account and Local pass, and to process redemptions.
- To process payments and manage subscriptions, where paid passes apply.
- To send you service and transactional messages — such as account, approval, redemption, and support emails — and, where you have not opted out, occasional product updates.
- To review and respond to beta and partner applications.
- To detect, prevent, and address fraud, abuse, and security issues, including rate limiting and protecting invite keys and member codes.
- To comply with our legal obligations and enforce our Terms.
We rely on your consent, the performance of our agreement with you, and our legitimate business interests (such as security) as the basis for these uses, consistent with applicable Canadian privacy law.
4.Service providers we share with
We share personal information with the service providers below, only as needed for them to provide services to us, under agreements that limit their use of it. Some of these providers process and store data on servers located in the United States (see Section 8).
- Authentication — to create and secure accounts, sessions, and sign-in.
- Payment processing — to handle payments and subscriptions, where paid passes apply.
- Hosting & database — to run the website and store your data.
- Transactional email — to deliver account, approval, redemption, and support emails.
- Security & rate limiting — to protect the service from abuse (this provider receives IP-derived identifiers).
- Maps — to display store locations (this provider receives your IP address when map imagery loads).
A current list of the specific providers we use is available on request from the contact in Section 13.
5.What partners can see
Protecting your identity at the counter is a core part of how MLL works. When you redeem an offer, the partner sees only the limited information needed to confirm a valid redemption — such as the last few characters of your Local code, the deal redeemed, and that your pass is active. We do not share your name, email address, or full Local code with partners.
6.Legal, safety & business transfers
We may disclose personal information if required by law or valid legal process, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or MLL. If MLL is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.
7.Data retention
We keep personal information only as long as needed for the purposes described here — for example, for the life of your account, to provide your savings history, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. When information is no longer needed, we delete or anonymize it. You can ask us to delete your account as described in Section 9.
8.Storage & international transfer
Some of our service providers store and process personal information outside Canada, including in the United States. When information is handled in another country, it is subject to the laws of that country, and may be accessible to courts, law enforcement, and authorities there. We take reasonable steps, through our agreements with these providers, to ensure your information receives a comparable level of protection. By using the service, you consent to this cross-border handling.
9.Your rights & choices
- Access & correction — you may request access to, or correction of, the personal information we hold about you.
- Update — you can edit much of your information directly in your account and profile settings.
- Marketing — you can opt out of non-essential product emails at any time; we will still send essential service messages.
- Withdraw consent — you may withdraw consent to certain uses, subject to legal or contractual limits; this may affect our ability to provide the service.
- Deletion — you may ask us to close your account and delete your personal information, subject to records we must retain by law.
To exercise any of these rights, contact us using the details in Section 13. You also have the right to complain to the Office of the Privacy Commissioner of Canada, or to the Office of the Information and Privacy Commissioner for British Columbia.
10.Security
We use reasonable administrative, technical, and physical safeguards to protect personal information — including encryption in transit, access controls, rate limiting, and data-minimization practices such as only revealing a portion of your Local code at redemption. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.
11.Children's privacy
The service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, please contact us so we can remove it.
12.Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where the changes are material, provide additional notice. Your continued use of the service after an update takes effect means you accept the revised policy.
13.Contact us
For privacy questions or requests, contact our Privacy Officer at privacy@mylocalloop.ca. For general questions you can also reach us at hello@mylocalloop.ca.