GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
LooCafe, operated by Ixora Corporate Services Private Limited, is committed to protecting the privacy and security of personal data. Although we are primarily based in India, we respect the rights of all individuals, including those in the European Economic Area (EEA), and comply with the principles of the General Data Protection Regulation (GDPR) for any personal data we process.
Data Controller
For the purposes of GDPR, the data controller is:
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: Where you have given explicit consent for processing (e.g., marketing communications, newsletter subscriptions)
- Contract: Where processing is necessary for the performance of a contract (e.g., service delivery, facility management contracts)
- Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., improving services, fraud prevention, security)
- Legal Obligation: Where we are required to process data by law
Your Rights Under GDPR
If you are in the EEA, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Request limitation of how we use your data.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
Right to Lodge a Complaint
File a complaint with a supervisory authority in the EEA.
Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Name, username, title
- Contact Data: Email address, phone number, postal address
- Technical Data: IP address, browser type, device information, cookies
- Usage Data: Information about how you use our website and services
- Marketing Data: Preferences for receiving marketing communications
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary based on the type of data:
- Contact form inquiries: 3 years from last interaction
- Contract-related data: Duration of contract plus 7 years
- Marketing preferences: Until consent is withdrawn
- Website analytics: 26 months (Google Analytics default)
International Transfers
As we are based in India, your data may be transferred to and processed in India. We ensure that appropriate safeguards are in place to protect your data, including:
- Standard contractual clauses approved by relevant authorities
- Data processing agreements with third-party providers
- Technical security measures (encryption, access controls)
Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- HTTPS encryption for all data transmission
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Incident response procedures
Exercising Your Rights
To exercise any of your GDPR rights, please contact us:
Email: contact@loocafe.com
Subject Line: GDPR Request - [Your Request Type]
Response Time: We will respond within 30 days of receiving your request.
We may need to verify your identity before processing your request. If your request is complex or we receive numerous requests, we may extend the response period by an additional 60 days, in which case we will inform you.
Updates to This Statement
We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this statement periodically.
Last Updated: November 2025