This Privacy Policy explains how Loom Supplements Ltd (trading as LOOM, "we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website, place an order, or otherwise interact with us. We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Loom Supplements Ltd is the data controller responsible for your personal data. We are a company registered in England and Wales under company number [Company Registration Number], with our registered office at [Registered Office Address], United Kingdom.
If you have any questions about this policy or how we handle your data, contact us at privacy@loomsupplements.com.
2. The personal data we collect
We may collect and process the following categories of personal data:
- Identity and contact data: name, billing and delivery address, email address, and telephone number.
- Order and transaction data: details of the products you purchase, order history, and payment confirmation (we do not store full card details - see below).
- Account data: login credentials and preferences if you create an account.
- Communications data: the content of messages you send us and your marketing preferences.
- Technical and usage data: IP address, browser type, device information, and how you use our website, collected via cookies and similar technologies.
We do not require you to provide special category data (such as health data). Please do not send us sensitive personal data unless we specifically request it.
3. How we use your data and our lawful basis
Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following bases:
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your orders | Performance of a contract |
| Taking payment and preventing fraud | Performance of a contract; legitimate interests |
| Customer service and responding to enquiries | Performance of a contract; legitimate interests |
| Sending marketing emails (where you have opted in) | Consent |
| Improving our website and products | Legitimate interests |
| Meeting legal and accounting obligations | Legal obligation |
4. Marketing communications
We will only send you marketing emails where you have consented to receive them. You can withdraw your consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at privacy@loomsupplements.com. Withdrawing consent does not affect order-related communications, which we send as part of fulfilling your contract.
5. Cookies
Our website uses cookies and similar technologies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.
6. Who we share your data with
We share your personal data only where necessary, with:
- Payment providers who process your payment securely. We do not store your full card details; these are handled by our PCI-DSS compliant payment processors.
- Couriers and fulfilment partners who deliver your order.
- Technology providers who host our website and provide analytics and email services on our behalf.
- Professional advisers and authorities where required by law, regulation, or to protect our legal rights.
We require all third parties to respect the security of your data and to process it only in accordance with our instructions and applicable law.
7. International transfers
Where any of our service providers are located outside the UK, we ensure an appropriate level of protection is in place, such as the use of UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries deemed adequate by the UK Government.
8. How long we keep your data
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Order and transaction records are generally retained for a minimum of six years to comply with HMRC requirements. Marketing data is kept until you withdraw consent.
9. Your rights
Under UK data protection law you have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request erasure of your data in certain circumstances;
- object to or restrict our processing of your data;
- request the transfer of your data (data portability);
- withdraw consent at any time where we rely on consent.
To exercise any of these rights, contact us at privacy@loomsupplements.com. We will respond within one month. There is normally no charge.
10. How to complain
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.
11. Security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payment transactions are encrypted using secure technology.
12. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review it periodically.
13. Contact us
If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@loomsupplements.com or write to us at [Registered Office Address], United Kingdom.