Privacy policy
PRIVACY POLICY
Loomz Ltd
Last updated: 14th February 2026
1. Who We Are
This website is operated by:
Loomz Ltd
Company No: 11884054
Registered in England and Wales
Registered Office:
5 Ladbroke Road
Epsom
England
KT18 5BG
Email: info@loomz.co.uk
For the purposes of UK data protection law, Loomz Ltd is the data controller of your personal information.
2. What This Policy Covers
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you:
Visit our website
Place an order
Create an account
Contact us
Interact with our marketing
This policy complies with:
UK GDPR
Data Protection Act 2018
3. Personal Information We Collect
We may collect the following categories of personal information:
Contact Information
Name, billing address, shipping address, email address, telephone number.
Order & Transaction Data
Products purchased, order history, payment confirmations, returns and refunds.
Payment Information
Payment details are processed securely by Shopify Payments or other authorised processors. We do not store full card details.
Account Information
Login credentials, saved preferences, wishlist items.
Communications
Emails, support requests, customer service messages.
Technical & Usage Data
IP address, device type, browser type, operating system, browsing behaviour, pages viewed, referring websites.
4. How We Collect Information
We collect personal data:
Directly from you when you place an order or contact us
Automatically via cookies and similar technologies
From Shopify and payment processors
From fulfilment and logistics partners
From advertising and analytics platforms
5. How We Use Your Information (Legal Basis)
Under UK GDPR, we rely on the following lawful bases:
Contract Performance
To:
Process and fulfil your orders
Deliver goods
Manage returns and refunds
Provide customer support
Legal Obligation
To:
Maintain accounting records (6 years minimum)
Comply with tax and regulatory requirements
Legitimate Interests
To:
Prevent fraud
Improve website performance
Analyse customer behaviour
Protect our business
Consent
To:
Send marketing emails (where required)
Use non-essential cookies
You may withdraw consent at any time.
6. Fulfilment Partners and International Transfers
To fulfil orders, we share necessary information (such as name and delivery address) with fulfilment partners, including suppliers located outside the United Kingdom and European Economic Area, including China.
These transfers may involve countries that do not provide the same level of data protection as the UK.
Where personal data is transferred internationally, we rely on:
Standard Contractual Clauses (SCCs), or
Other legally recognised safeguards
We share only the information necessary to process and deliver your order.
7. Returns and Logistics Providers
When you initiate a return, we may share necessary information with return logistics providers (such as InPost UK) to generate return labels and process returns.
They process your data only to provide return services.
8. How We Share Personal Information
We may share your data with:
Shopify (our ecommerce platform provider)
Payment processors
Shipping and fulfilment partners
IT service providers
Marketing and analytics providers
Professional advisers (accountants, insurers, legal advisers)
Regulatory authorities where legally required
We do not sell your personal information.
9. Cookies and Tracking
We use cookies to:
Operate and secure the website
Remember preferences
Analyse performance
Deliver relevant advertising
You may control cookies via your browser settings and our cookie banner.
Non-essential cookies are used only where permitted by law.
Strictly necessary cookies required for the operation of the website are always active and do not require consent.
10. Data Retention
We retain personal information only as long as necessary:
Order and accounting records: 6 years
Customer support communications: up to 3 years
Marketing data: until you unsubscribe
Analytics data: according to cookie settings
We may retain information longer where required by law or to resolve disputes.
11. Your Rights Under UK GDPR
You have the right to:
Access your personal data
Request correction
Request erasure
Restrict processing
Object to processing
Request data portability
Withdraw consent (where applicable)
To exercise your rights, contact: info@loomz.co.uk
We may request proof of identity before responding.
We will respond within one month unless the request is complex.
12. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):
We would appreciate the opportunity to resolve concerns before you contact the ICO.
13. Security
We use appropriate technical and organisational measures to protect personal data.
However, no online transmission is completely secure.
14. Automated Decision-Making
We do not use automated decision-making that produces legal or similarly significant effects on individuals.
15. Children’s Data
Our website is not intended for individuals under 18 years of age.
We do not knowingly collect data from children.
16. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on this website.