Privacy notice

Privacy notice

Last reviewed 24 September 2026. Seeded Health Ltd is the data controller for the Levy & Loom platform and this website.

Who we are

Levy & Loom is operated by Seeded Health Ltd, registered in England and Wales, company number 16965347, registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE. Seeded Health Ltd is the controller for merchant and visitor data described here, and a processor on behalf of merchants for their customers' data. You can reach us about anything in this notice at hello@levyandloom.com.

What we collect and why

• Merchants. Business name, contact email, Stripe account identifier, onboarding status and API credentials (your API key is stored only as a one-way hash; the secret that signs our messages to your server is stored in encrypted storage so we can sign with it). Used to run your account. Lawful basis: performance of our contract with you.
• Merchants' customers. When a customer subscribes, we receive from Stripe the subscription and invoice identifiers, the amount and currency, the customer's email address, and a reference the merchant supplied. We use this to tell the merchant what happened and to keep the payment ledger accurate. Lawful basis: our legitimate interest in operating the payment platform, and the merchant's contract with their customer.
• Website visitors. This website sets no cookies and uses no analytics or tracking. Our hosting provider keeps standard server logs (IP address, time, page requested) for security, which are deleted on a rolling basis. Lawful basis: our legitimate interest in keeping the service secure. The fonts on this site are served from our own servers, so no request goes to a third party when you view a page.

Card and identity data

Card numbers, bank details and identity documents are collected by Stripe, never by us. Stripe's handling of that data is described in Stripe's privacy policy.

Who we share it with

Stripe (payments), our hosting provider Render (servers in the European Union), the merchant whose customer you are (we send them the payment messages described above), anyone a merchant chooses to hand a Pour Ledger Proof to (it names the merchant, never customers), and, where the law requires, regulators or authorities. We do not sell personal data and we do not use it for advertising.

International transfers

Stripe processes payment data in the United States and elsewhere under its own safeguards, described in Stripe's privacy policy and the Stripe Connected Account Agreement. Our own servers and ledger are in the European Union (Frankfurt). We make no other transfers outside the UK.

Automated decisions

We make no automated decisions with legal or similarly significant effects about you. Whether a merchant's account is accepted is decided by Stripe under Stripe's terms.

How long we keep it

Payment ledger records are kept for seven years to meet accounting and tax obligations. Merchant account records are kept while the account is open and for seven years after it closes. Server logs are kept for no more than 30 days.

Your rights

You can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict its use, or ask for it in a portable form. Email hello@levyandloom.com. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Public statistics

The Pour statistics we publish are totals only. They never identify a merchant or a customer.

Changes

If we change this notice we will update the date at the top and, for material changes, email merchants directly.