Privacy Notice

The data controller’s legal identity is not yet confirmed. Loom Ancestry’s company details will appear here before publication.

Registered company name

[To be confirmed]

Company number

[To be confirmed]

Registered office and address for legal notices

[To be confirmed]

For privacy enquiries, contact hello@loomancestry.com.

• Account and membership information, such as your email, profile information, subscription status and paid-through date.
• Family tree files you upload in GEDCOM format, and parsed information such as names, birth and death dates and places, sex, and family relationships. Files may describe living people and people whose living status is unknown.
• Official unclaimed-estate records, potential-match information, relationship evidence and review history used to assess possible connections.
• Payment references, amounts, currencies and billing-country information provided through the payment service; Loom does not need your full payment-card number to monitor your tree.
• Notification attempts and their recorded status, support correspondence, and operational information used to run and protect the service.
• Referral codes and a first-party visitor identifier when a referral link is used.

Some family information comes from a customer rather than from the person it describes. Official records come from the England & Wales Bona Vacantia list at launch.

Loom uses account information to provide and administer membership, family information to display private trees and assess potential connections, payment records to administer billing, and operational information to secure and maintain the service.

For the final notice, processing necessary to supply your membership is proposed to rely on performance of the contract; records required by law would rely on the relevant legal obligation. These bases must be mapped to the actual activities before publication.

Customer trees are not public or searchable across customers. Living people and people whose living status is unknown receive the same privacy protections. Loom does not send customer family tree files or family information to AI tools, public search engines or authorities for matching.

Automated checks help identify possible connections, with appropriate human review before customer notification. A potential match is not a determination of legal entitlement or inheritance.

Loom uses Lovable Cloud for application hosting, authentication, database, private file storage and processing. Payment processing is designed to use Stripe. Email and support providers handle the information needed for their respective services; the final provider list is not yet complete.

Customer family tree files are not sent to the payment service to take membership payments.

Information is retained to provide the service, protect it and meet applicable legal requirements. The final schedule must specify the periods or meaningful criteria for each category.

When a replacement tree is fully checked and becomes active, the superseded tree is scheduled for removal after a seven-day grace period. A lasting match and alert history is retained across replacements, but is included in full family-space deletion.

Requesting account deletion stops monitoring and schedules permanent deletion after a 30-day recovery period. Before permanent deletion begins, you can cancel the request. Permanent deletion removes the login, profile and family data through the deletion process; limited billing and accounting information may be retained separately.

Cancellation of renewal does not itself delete your account or tree. Deletion is not a refund request. See Cancellation & Refunds.

The application uses browser storage for sign-in and preferences such as the selected family tree. Referral links can store a referral code and visitor identifier in your browser and record attribution within Loom.

Depending on the circumstances, you may have rights to access, correct or erase personal information, restrict or object to its use, and receive a portable copy. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.

Email hello@loomancestry.com to make a request, including if your information was uploaded by a relative and you do not have a Loom account. We may need proportionate information to verify identity before releasing personal information.

UK data-rights requests normally require a response within one month, subject to applicable lawful extensions and exceptions. Rights are not absolute; any applicable limitation needs an explanation.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to contact Loom first.

This draft has no effective date. The final notice must be approved before publication and updated when relevant processing changes.