Privacy Policy

1. Introduction

LochTags ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. By using our services, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

• Account information: Your name, email address, and phone number when you register a tag or contact us.
• Tag scan data: When your NFC tag is scanned, we log the time and basic technical metadata (such as approximate location if provided by the browser, and device type) for security and notification purposes.
• Finder-submitted information: When a finder scans your tag and submits the contact form, we collect their name and message. This information is shared with you (the tag owner) and is not stored longer than necessary.
• Contact form submissions: If you contact us via our website, we collect the information you provide in the form.
• Finder location (optional): On a finder page, the person who found your item can tick a box to share their precise GPS location with you. We collect those coordinates only when the box is ticked, pass them to you with the finder's message, and keep them with the scan record. If the box is left unticked, we record only the approximate location that the browser or network provides.
• Payment information: Payments are processed by Stripe. Card numbers are entered on Stripe's secure form and never reach our servers; we receive a payment confirmation and, at most, the last four digits of the card.
• Technical logs: Our web server and security software record IP addresses, browser type, and request details to protect the service from abuse. These logs are kept for a limited time and are not used for advertising.

3. How We Use Your Information

We use the information we collect to:

• Send you notifications when your tag is scanned
• Facilitate the return of your lost belongings by connecting you with the finder
• Respond to your inquiries and provide customer support
• Improve our services and detect fraudulent or abusive use

4. How We Protect Your Information

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. Your contact information is never written to the NFC tag itself — only a unique, anonymous code is stored on the physical chip. Personal details are stored securely on our servers and are not accessible to finders.

5. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

• With your consent
• To comply with applicable laws or a valid legal request
• To protect the rights or safety of LochTags, our users, or the public
• With the service providers named below, who process data on our behalf under their own contractual confidentiality and security obligations

The service providers we currently use are:

• Hostinger International Ltd. hosts our website and database.
• Stripe, Inc. processes payments and, for Pro members, subscription billing.
• Twilio Inc. delivers SMS alerts and operates the private call and text relay, so that neither the owner nor the finder sees the other's phone number.
• Twilio SendGrid delivers our transactional email, including scan alerts and finder messages.
• Google Analytics 4 measures visits to our marketing pages (see section 8). It is not loaded on finder pages.

6. Data Retention

We retain your personal information for as long as your tag is active in our system. Finder contact submissions are retained for up to 90 days after a scan event and then deleted. You may request deletion of your account and associated data at any time by contacting us.

Where your information is stored. Our website and database are hosted on servers operated by Hostinger. Depending on the data centre assigned to our account, your information may be stored and processed outside Canada, including in the United States, where it is subject to the laws of that jurisdiction. Our payment, SMS, and email providers listed in section 5 also operate in the United States. We choose providers with recognised security certifications and limit what we share with each of them to what that service needs.

7. Your Rights

You have the right to access, correct, or request deletion of your personal information. To exercise these rights, please contact us at info@lochtags.com. We will respond within 30 days and in accordance with applicable privacy laws, including Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

8. Cookies and Tracking

Our website uses session cookies that are necessary for the cart, sign-in, and contact form to function. Our marketing pages also load Google Analytics 4, which sets its own cookies to measure visits and page views in aggregate; we do not use it for advertising or cross-site tracking, and it is not loaded on finder pages, so a person who taps or types a tag code is not tracked. We do not use third-party advertising cookies and we do not sell browsing data.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your information, please contact us at:

LochTags Inc.
Privacy Officer: Kevin Girdler, Managing Director
Leduc, Alberta, Canada
Email: info@lochtags.com