PRIVACY POLICY
ONE UP LOOPS INC.
Last Updated: August 2026
1. INTRODUCTION
www.oneuploops.com, owned and operated by One Up Loops Inc. (“One Up Loops”, “our”, “we”, or “us”, as context may dictate), recognizes the importance of privacy and the sensitivity of personal information. We are committed to only collecting and storing personal information where necessary for legitimate business purposes. We are committed to keeping necessary personal information accurate, secure, and confidential.
As part of our activities in providing a streamlined, safe, and secure environment, we will only collect, use or disclose personal information with clear and appropriate notice and with consent in accordance with this Privacy Policy and any applicable law. This Privacy Policy outlines how we collect, use, disclose, and protect the personal information of our users, and our practices for collecting, using, maintaining, protecting and disclosing that information when you download, access, use, and/or visit the One Up Loops website and services.
At One Up Loops, we believe in the following fundamental privacy principles: (a) we are mindful of the personal information we may ask you to provide and the personal information that we collect about you throughout the operation of our services; (b) we retain personal information for only as long as is necessary; (c) we strive to make it as simple as possible for the individual to control the personal information that is shared publicly, kept private, or destroyed; and (d) we aim to be fully transparent as to how we gather, use, and share the individual’s personal information.
2. PRIVACY OFFICER
If you have questions or concerns regarding our Privacy Policy or our privacy practices, please contact our Privacy Officer by email at privacy@oneuploops.com.
3. DEFINITIONS
collection — the act of gathering, acquiring, recording, or obtaining personal information from any and all sources, including third parties;
consent — informed voluntary agreement, which can be express, deemed or implied, for the collection, use and disclosure of personal information for defined purposes;
disclosure — the act of making personal information available to any individual or third party organization other than One Up Loops;
notice — information brought to the attention of, or within the knowledge of, an individual. Notice can be in writing, whether in hard copy or digital form, or constructive or implied from the circumstances;
personal information — information about an individual that does or could identify the individual, including information relating to personal characteristics, activities or views;
use — the treatment, handling, or management of personal information by and within One Up Loops in accordance with this Privacy Policy.
4. SCOPE
Personal information is any information that allows an individual, entity, or organization to be identified directly or indirectly, including but not limited to: name, date of birth, title, address, telephone number, email address, and banking information. This policy applies to all personal information that is collected, used, or disclosed by One Up Loops in any form, whether oral, electronic or written.
5. ACCOUNTABILITY AND SAFEGUARDS
One Up Loops is accountable for personal information in its possession or control. To ensure accountability, we have informed our users about our policies and practices. One Up Loops has designated a Privacy Officer who ensures day-to-day compliance with the policy, who is responsible for revisions of this Privacy Policy, and who will provide appropriate response to your privacy concerns and questions. The Privacy Officer can be contacted by email at privacy@oneuploops.com.
One Up Loops will implement appropriate procedures to safeguard your personal information, including: (a) safeguarding, on a best effort basis, personal information in its possession or control from loss or theft and from unauthorized access, use, disclosure, copying or modification through appropriate security measures depending on the sensitivity, format and storage of the personal information; (b) using appropriate care and diligence when destroying or disposing of personal information to prevent unauthorized access, use or disclosure; and (c) ensuring, on a best effort basis, the use of proper encryption and business practices when transporting personal information internally and to third parties.
One Up Loops employees or agents with access to personal information are required by agreement to respect the confidentiality of such information. Our third-party partners are likewise required by agreement to respect the confidentiality of personal information.
6. NOTICE AND CONSENT
One Up Loops will provide notice and obtain consent as appropriate regarding the collection, use or disclosure of personal information. One Up Loops will outline to users, clients, visitors, and other individuals the purposes for which personal information will be collected, used or disclosed. The purposes may be provided in writing or electronically. Personal information will not be used or disclosed for any new purpose without first identifying the new purpose, providing notice to the user, and obtaining consent as applicable, unless required by law.
7. INFORMATION WE COLLECT
7.1 Information you provide to us.
We collect information that you provide to us when you create an account, subscribe, or contact us, which may include your name, email address, country, and account credentials.
Payment information: when you purchase a subscription, your payment card details are provided by you directly to our payment processor, Stripe, Inc., and are never stored on One Up Loops systems. We receive limited transaction information from Stripe, such as card brand, last four digits, transaction amount, currency, and payment status, which we use for billing administration, receipts, and record-keeping.
7.2 Information we collect automatically.
Log information: like other online service providers, we collect information that web browsers, mobile devices, and servers typically make available, such as the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services.
Account activity: we record activity associated with your account, such as loops previewed and downloaded, download counts, membership status, and support correspondence. We use this information to operate download limits, provide the Services, and improve the library.
Session replay and heat maps: we record anonymized replays of website sessions and build heat maps of mouse movement, scrolling and clicks, so that we can identify pages that are confusing or broken. Text you type into form fields is masked and is not captured. See Section 11.4.
Attribution information: when you first arrive at the Site we store a record of how you got here, such as the page you landed on, the website that referred you, and any campaign parameters in the link. See Section 12.
Information from cookies and other technologies: a cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Pixel tags (also called web beacons) are small blocks of code placed on websites and emails. We use cookies and other technologies like pixel tags to help us identify and track visitors, usage, and access preferences for our Services, to measure the performance of our marketing, and to measure engagement with our emails (such as opens and clicks). Your choices about non-essential cookies are described in Section 13.
8. HOW WE USE PERSONAL INFORMATION
One Up Loops collects, uses and discloses personal information for a variety of purposes, including but not limited to the following: (a) to establish and maintain a secure environment; (b) to register an account with us and verify your identity as required by applicable legislation; (c) to provide you with our Services; (d) to develop, enhance, market or provide our products or services; (e) to understand users’ needs and preferences; (f) to develop, enhance, market or provide products and services to meet users’ needs or expectations; and (g) for such additional and necessary business purposes as may reasonably be required by One Up Loops. On request, we will provide appropriate and full reasons for the purpose of such collection or refer the individual to the designated person(s) to provide such reasons.
9. LIMITING COLLECTION, USE, DISCLOSURE AND RETENTION
One Up Loops will take reasonable steps to limit the amount and type of personal information it collects, uses and discloses. Personal information will be collected by lawful means and in a fashion that is not unreasonably intrusive. One Up Loops will retain personal information for only as long as is reasonably necessary for the identified purposes, or as required by applicable Canadian laws.
10. THIRD-PARTY SERVICE PROVIDERS
We share personal information with a small number of service providers that process it on our behalf to operate the Services and to measure our marketing. Each provider is permitted to use personal information only to provide services to us and is required to protect it. Our current providers are:
(a) Stripe, Inc. — payment and subscription processing. Your card details go directly to Stripe; see Section 7.1.
(b) ChartMogul — subscription and revenue analytics. ChartMogul receives customer and subscription records from Stripe on a read-only basis so that we can track business metrics such as recurring revenue and cancellation rates.
(c) Brevo — delivery of marketing and lifecycle email (such as onboarding and win-back sequences), and measurement of email engagement (such as opens and clicks).
(d) Twilio Inc. (SendGrid) — delivery of transactional email, such as account verification, receipts, and billing notices.
(e) Google LLC — website analytics (Google Analytics 4), tag management (Google Tag Manager), and advertising measurement (Google Ads), as described in Section 11.
(f) Meta Platforms, Inc. — advertising measurement via the Meta Pixel and the Meta Conversions API, as described in Section 11.3.
(g) Microsoft Corporation — session replay and heat maps via Microsoft Clarity, as described in Section 11.4.
(h) Amazon Web Services, Inc. — secure storage and delivery of audio files (Amazon S3).
(i) Cloudways, a DigitalOcean company — website hosting infrastructure.
(j) Complianz — cookie scanning, cookie policy generation, and management of your consent choices.
11. ANALYTICS, ADVERTISING AND WEBSITE MEASUREMENT
We use a small number of third-party services to understand how visitors find and use One Up Loops, so that we can improve the Site and measure whether our advertising is working. These services may set cookies or similar identifiers in your browser. Where consent is required, they operate only as described in Section 13.
11.1 Google Analytics 4.
Measures pages viewed, sign-ups, downloads and purchases, and tells us which channel — search, social, advertising or direct — brought you to us. IP addresses are anonymized by Google and are not stored by us in full. We have enabled Google’s data redaction feature so that email addresses and similar details are stripped from recorded URLs. Event-level analytics data is retained for 14 months.
11.2 Google Ads.
When you arrive from a Google advertisement, a click identifier allows us to attribute a resulting free trial or subscription back to that advertisement. We also use Google’s Enhanced Conversions, which sends Google a hashed (SHA-256, one-way and irreversible) version of a purchaser’s email address so that a conversion can be matched to an advertising click. Google does not receive your email address in readable form.
11.3 Meta Pixel and Conversions API.
Measures the results of advertising we run on Facebook and Instagram. Some events are sent from your browser and some are sent from our server. Where events are sent from our server, any email address is hashed (SHA-256) before transmission and is never sent in readable form. Events are deduplicated so that the same action is not counted twice. We do not send Meta your plain-text email address, your password, or your payment details.
11.4 Microsoft Clarity.
Records anonymized session replays and heat maps — mouse movement, scrolling and clicks — so that we can see where the Site is confusing or broken. Text you type into form fields is masked by default and is not captured. We use this only to improve usability.
12. FIRST-TOUCH ATTRIBUTION
When you first arrive at the Site, we store a small record in your browser noting how you got here — for example the page you landed on, the website that referred you, and any campaign parameters in the link. This record is kept for up to 365 days. A second, shorter record covering your most recent visit is kept for 90 days.
If you later subscribe, that information is attached to your customer record in Stripe. Its only purpose is to let us answer a business question: which marketing channels bring us customers who stay. It is not used to build an advertising profile of you, is not sold, and is not shared with anyone beyond the payment and analytics providers named in Section 10.
13. COOKIES AND YOUR CHOICES
A full, automatically maintained list of the cookies used on this Site — including their names, durations and purposes — is available in our Cookie Policy, which is linked in the footer of every page.
If you are in the European Economic Area or the United Kingdom, non-essential cookies — analytics, advertising and session replay — are switched off until you consent. You will see a consent banner on your first visit, and you can change or withdraw your choice at any time using the “Manage consent” option on any page. We use Google Consent Mode v2, which means the services described in Section 11 adjust their behaviour automatically according to your choice.
If you are elsewhere, including Canada and the United States, these services operate by default, in line with local law. You can still opt out: use your browser’s cookie controls, or contact us at privacy@oneuploops.com and we will exclude you from analytics and advertising measurement.
Essential cookies — those needed to log you in, keep your session active, and remember your consent choice — are always active, as the Site cannot function without them.
14. LEGAL BASES FOR PROCESSING (EEA AND UK)
For those in the European Union and the United Kingdom, our legal grounds for processing information about you under applicable data protection laws are that our use of your information is based on the grounds that: (a) the use and collection of such information is necessary in order to fulfill our commitments to you under our Terms of Service or other agreements with you, or is necessary to administer your account — for example, in order to enable access to our website on your device or charge you for services and/or transactions; or (b) the use is necessary for compliance with legal obligations; or (c) the use is necessary in order to protect your vital interests or those of another person; or (d) we have a legitimate interest in using your information — for example, to provide and update our Services, to improve our Services so that we can offer you an even better user experience, to safeguard our Services, to communicate with you, to measure, gauge, and improve the effectiveness of our advertising, to better understand user retention and attrition, to monitor and prevent any problems with our Services, and to personalize your experience; or (e) you have given us your consent — for example, before we place certain cookies on your device and access and analyze them later on.
15. YOUR RIGHTS
Canada. Subject to applicable law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act, you have the right to request access to the personal information we hold about you, to request correction of inaccurate information, and to withdraw consent to our collection, use, or disclosure of your personal information (subject to legal or contractual restrictions and reasonable notice; withdrawing consent may affect our ability to provide the Services). You may also make a complaint to our Privacy Officer, and you have the right to complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
EEA and UK. If you are located in the European Economic Area or the United Kingdom, you additionally have the rights, subject to conditions and exemptions under applicable law, to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; receive your data in a portable format; withdraw consent at any time where processing is based on consent; and lodge a complaint with your local supervisory authority.
To exercise any of these rights, email privacy@oneuploops.com. We may need to verify your identity before acting on a request. We will respond within the period required by applicable law — 30 days under PIPEDA, and one month under the UK and EU GDPR.
16. SHARING AND DISCLOSURE
We do not sell our users’ personal information to third parties.
Legal requests: we may disclose personal information in response to a subpoena, court order, or other governmental demand, without notice to you where required or permitted by law.
Information shared publicly: information that you expressly consent to be made public may be disclosed publicly.
Business transfers: if One Up Loops is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets, personal information may be transferred as part of that transaction, subject to the commitments in this Privacy Policy.
17. INTERNATIONAL TRANSFERS
One Up Loops is located in Alberta, Canada. The service providers named in Section 10 may store and process personal information in Canada, the United States, and elsewhere, and personal information may be subject to access by courts, law enforcement, and national security authorities in those jurisdictions in accordance with their laws. Where required, transfers of personal data from the EEA and the United Kingdom rely on applicable adequacy decisions, the standard contractual clauses, or equivalent safeguards published by each provider.
18. HOW LONG WE KEEP INFORMATION
We generally discard information about you when we no longer need the information for the purposes for which we collect and use it and we are not legally required to continue to keep it. Records of transactions and billing are retained for the periods required by Canadian tax and corporate law. Event-level analytics data is retained for 14 months. First-touch attribution records are stored in your browser for up to 365 days, and the record of your most recent visit for up to 90 days.
19. SECURITY
We cannot guarantee 100% security; however, we work hard to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so, such as monitoring our Services for potential vulnerabilities and attacks.
In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm to you, we will notify you and report the breach to the Office of the Privacy Commissioner of Canada (and other regulators where applicable) as required by law.
20. CHILDREN
The Services are not directed to, and may not be used by, individuals under the age of 18, and we do not knowingly collect personal information from them. If you believe a person under 18 has provided us with personal information, contact privacy@oneuploops.com and we will delete it.
21. CHANGES TO THIS POLICY AND CONTACT
We may change this Privacy Policy as we may deem necessary from time to time, or as may be required by law. The “Last Updated” date at the top of this policy reflects the most recent revision. If we make material changes, we will notify you by email or by prominent notice on the Site before the changes take effect.
Any questions, comments or concerns relating to this Privacy Policy, and any requests to correct or access personal information collected during your use of the Services, should be directed by email to privacy@oneuploops.com, with attention to the Privacy Officer.
