Privacy Policy

The controller of your personal data is Sofia Garcia-Moreno, operating the sole proprietorship "Loueta", based at Lindenlaan 4, 1640 Sint-Genesius-Rode, Belgium. For any question about your data, contact us at loueta.founder@gmail.com.

• Account data: name, email address, city, password (stored securely, never in plain text);
• Profile data: profile photo, bio, size preferences;
• Published content: listings, item photos, item requests, reviews and ratings;
• Booking and transaction data: dates, amounts, payment status;
• Messages exchanged with other members in connection with a listing or booking;
• Delivery address, when shipping is used for an item;
• Payment data: Loueta never stores your card details, which are processed directly by Stripe (see Section 4);
• Technical data: IP address, connection logs, for security and fraud-prevention purposes.

• Performance of the contract: creating and managing your account, connecting members, bookings, payments, delivery;
• Legitimate interest: fraud prevention, content moderation, Platform security, service improvement;
• Legal obligation: keeping accounting and tax records required by Belgian law;
• Consent: where applicable, for any communication that isn't strictly necessary to operating your account. Loueta does not currently send marketing newsletters; if that changes, we will ask for your prior consent.

Your data may be shared with the following providers, strictly to the extent necessary for Loueta to function:

• Stripe (payments, payouts to Listers via Stripe Connect) — a US company that also operates in Europe, governed by standard contractual clauses for transfers outside the EU;
• Supabase (database, authentication, photo storage) — data is hosted on servers located in Frankfurt (EU), but Supabase Inc. is a US company; any transfers are governed by standard contractual clauses;
• Resend (sending transactional emails: confirmations, notifications) — a US company, processed in the United States, governed by standard contractual clauses;
• Sendcloud (generating shipping labels and parcel tracking) — a Dutch company, data hosted in the EU;
• Vercel (application hosting) — global technical infrastructure.

We never sell your personal data to third parties.

Some of our providers (Stripe, Supabase, Resend) are US companies and may, as such, be subject to US legislation (including the CLOUD Act), even when data is physically hosted in the EU (as is the case for Supabase, hosted in Frankfurt on Amazon Web Services servers). These transfers are governed by the standard contractual clauses adopted by the European Commission, as published by each of these providers in their own contractual documents ("Data Processing Addendum").

Your account data is kept for as long as your account is active. Data linked to transactions (bookings, payments, invoices) is kept for the period required by Belgian accounting and tax obligations (generally 7 years). If you delete your account, your profile data is erased or anonymised, subject to any data we must retain for legal reasons.

Access to your data is protected by strict database-level access rules (Row Level Security), encrypted communications (HTTPS), and the fact that passwords are never stored in plain text.

Under the GDPR, you have the right to access, rectify, erase, restrict, and object to the processing of your data, and to data portability, as well as the right to withdraw your consent where processing relies on it. To exercise these rights, contact us at loueta.founder@gmail.com.

If you believe the processing of your data does not comply with the regulations, you may lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.

Loueta is reserved for adults (18 and older). We do not knowingly collect data concerning minors.

The use of cookies on Loueta is described separately in our Cookie Policy.

This policy may be updated to reflect changes to the Platform or to applicable regulations. The date of the last update appears at the top of this page.