Privacy Notice

Last updated: [22.09.25]

1. Who we are

This website is owned and operated by Loom Collective Limited (company number 16245355). References to “we”, “our” or “us” in this privacy notice mean Loom Collective. Loom Collective has a relationship with you, and any reference to “you”, “your” or “yourself” means you as an individual who interacts with us or has a relationship with us.

2. Purpose of this privacy notice and our commitment to transparency

This privacy notice explains how we collect and process your personal data when you:

●      visit our website (www.[loom-website].com);

●      interact with us on social media channels;

●      purchase products from us;

●      or otherwise engage with our brand.

We are committed to protecting your privacy and ensuring compliance with data protection laws. For the purposes of those laws, Loom Collective Limited is the data controller of your personal data.

Data protection law requires that personal data we hold must be:

(a) used lawfully, fairly and transparently;
 (b) collected only for specified, valid purposes;
 (c) relevant and limited to what is necessary;
 (d) accurate and kept up to date;
 (e) kept only for as long as necessary;
 (f) kept securely.

It is important that you read this notice carefully so that you understand how and why we use your personal data.

3. Who this notice applies to

This privacy notice applies to:

●      visitors to our website;

●      individuals who interact with us on social media;

●      customers purchasing our products;

●      subscribers to our newsletters or marketing.

It does not apply to individuals applying for roles at Loom Collective, or current/former employees of Loom Collective.

4. Contact details

If you have any questions about this notice or how we use your personal data, please contact:

Data Protection Officer
 Loom Collective Limited
[48 Broughton Street, Manchester, England, M8 8NN]
Email: [Contact@loomarchieves.coml]

5. Third-party links

Our website may contain links to third-party websites, plug-ins and applications. Clicking on those links may allow third parties to collect or share data about you. We are not responsible for the privacy practices of such third parties, and we encourage you to read their privacy notices when you leave our website.

6. How we use your personal data

The table below sets out how we may use your personal data, what we collect, and the lawful basis for doing so.

Category of Individuals	Purpose/Activity	What information is collected	Lawful basis for processing
Website visitors	To administer, protect and improve our website; monitor usage; deliver relevant content and advertising; analyse effectiveness.	Technical data (IP address, browser type, plug-ins, operating system, time zone, device identifiers). Usage data (how you use our website, surveys, browsing behaviour).	Legitimate interests (website operation, analytics, improving services, marketing strategy).
Account holders	To register and maintain a Loom Collective account; enable login; remember preferences.	Name, email address, password, delivery address, order history, saved products.	Contract performance; legitimate interests (to provide account services). Consent obtained separately for marketing.
Purchasers	To process orders; deliver products; handle payments, returns and refunds; detect fraud.	Name, billing/delivery address, payment details, order details.	Contract performance; legal obligations (e.g. consumer protection); legitimate interests (fraud prevention, customer service).
Marketing subscribers	To send newsletters, offers, promotions and updates.	Name, email address, preferences, purchase history.	Consent (where required); legitimate interests (marketing similar products). Opt-out available at any time.
Loyalty/rewards members (if applicable)	To administer loyalty points, perks and offers (e.g. birthday vouchers).	Name, email, account history, date of birth (if provided).	Legitimate interests (administer scheme); consent for marketing.
Social media users	To respond to messages or repost tagged content.	Username, contact details (if provided), message content, images/videos.	Legitimate interests (responding to engagement, brand promotion).
Customer service enquiries	To handle complaints, enquiries and product issues (via email, chat or website).	Name, email, order ID, tracking number, images (if applicable).	Contract performance; legitimate interests (customer support); legal obligations.

6.1 We will use your personal data only for the purposes we collected it, unless we reasonably consider another purpose is compatible.
 6.2 We may process your personal data without your knowledge or consent where required or permitted by law.

7. Children

Our website, services and promotions are not directed at, and should not be used by, individuals under the age of 18. We do not knowingly collect personal data relating to children.

8. Internal access

Your personal data may be accessed by Loom Collective employees only where necessary for their roles (e.g. customer service, marketing, technical support, legal). Access is restricted and subject to confidentiality obligations.

9. Sharing your personal data externally

We may share your data with trusted third parties, including:

●      payment providers (e.g. Shopify Payments, Klarna, PayPal);

●      e-commerce platforms and plugins (e.g. Shopify, Klaviyo, LoyaltyLion);

●      logistics partners (delivery, returns);

●      IT and analytics service providers (e.g. Google Analytics, Yotpo);

●      professional advisers (lawyers, auditors, insurers);

●      regulators and public authorities;

●      fraud prevention and crime agencies;

●      potential buyers or investors in the event of a business sale or restructuring.

We require all third parties to safeguard your data and use it only for specified purposes.

10. International transfers

Some third parties may be located outside the UK/EEA. Where we transfer your personal data internationally, we ensure safeguards are in place, such as:

●      adequacy decisions (where the country is recognised as having strong protections);

●      standard contractual clauses or international data transfer agreements.

Please contact us if you want details of the safeguards we use.

11. How we keep your data secure

We have implemented appropriate technical and organisational security measures, including:

●      encryption and pseudonymisation;

●      firewalls and antivirus protections;

●      role-based access controls;

●      regular IT testing and penetration checks;

●      breach reporting procedures in line with UK GDPR.

12. Data retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to meet legal, tax and reporting requirements.

Typical retention periods:

●      Customer accounts – retained while active, then deleted or anonymised after inactivity.

●      Orders – retained for up to 6 years (for tax and accounting purposes).

●      Marketing preferences – retained until you opt out.

We may retain data longer where required by law or to resolve disputes.

13. Your rights

You have the following rights under data protection law:

●      Withdraw consent (where relied upon).

●      Access your personal data.

●      Correct or update inaccurate data.

●      Erase your data (in certain cases).

●      Restrict or object to processing.

●      Data portability (to transfer your data elsewhere).

●      Not be subject to automated decisions producing significant effects.

●      Complain to the Information Commissioner’s Office (www.ico.org.uk).

To exercise these rights, contact us using the details above.

14. Marketing – opting out

You can unsubscribe from marketing at any time by clicking the link in our emails or contacting us directly. Please allow up to 5 working days for your request to be processed.

15. Updates to this notice

We may update this Privacy Notice from time to time. Any updates will be published on our website, with the date of the latest update shown at the top of this page.