LAST UPDATED: 21 May 2025
This Privacy Policy describes how Isla & Loom (the "Site", "we", "us" or "our") collects, uses and discloses your personal data when you visit isla-loom.com (the "Site"), use our services, make a purchase or otherwise interact with us in relation to the Site (together, the "Services"). "You" and "your" refer to you as a user of the Services, whether as a customer, website visitor or another person whose personal data we have collected in accordance with this Privacy Policy.
Please read this Privacy Policy carefully.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, for example to reflect changes in our practices or for other operational, legal or regulatory reasons. We will publish the updated policy on the Site, update the "Last updated" date and take any other steps required by law.
HOW WE COLLECT AND USE YOUR PERSONAL DATA
To provide the Services, we collect personal data as described below. The data we collect and use depends on how you interact with us.
In addition to the specific purposes set out below, we may use the data collected to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms of service and protect or defend the Services, our rights and the rights of our users or third parties.
WHAT PERSONAL DATA DO WE COLLECT?
The type of personal data we collect depends on how you interact with our Site and use our Services. "Personal data" means information that identifies you, relates to you, describes you or can be associated with you.
Information you provide to us directly
The personal data you provide to us directly through the Services may include:
Contact data, such as name, address, phone number and email address.
Order data, such as billing and shipping addresses, payment confirmation, email address and phone number.
Account data, such as your username, password, security questions and other information related to security.
Customer service data, including the information you provide to us in your communications with us.
Some features of the Services may require you to provide us with certain personal data. If you decide not to provide it, some features may not be available.
Information we collect automatically
We may automatically collect information about your interaction with the Services ("Usage Data"). This includes information about how you use the Site and your account, device data, browser data, network data, the IP address and other technical information. We may use cookies, pixels and similar technologies to collect usage data.
Information we obtain from third parties
We may obtain information from third parties, such as:
Service providers that support our Site and Services, including Shopify.
Payment processors that handle your payment data.
Marketing partners or platforms that use cookies or pixels.
HOW WE USE YOUR PERSONAL DATA
Provision of products and services: to process orders, process payments, manage accounts and facilitate shipping, returns or exchanges.
Marketing and advertising: to send you marketing communications by email, SMS or post and show you personalised ads. If you are in the European Economic Area (EEA), we rely on legitimate interest under Article 6(1)(f) of the GDPR.
Security and fraud prevention: to detect, investigate or take action against fraud or harmful behaviour. For EEA users, this is based on our legitimate interest.
Communication and improvement: to provide customer service and improve our services.
COOKIES
We use cookies for the operation and improvement of our Site and Services. You can find detailed information about Shopify cookies at: https://www.shopify.com/legal/cookies
Cookies help us remember user preferences and analyse your activity. You can set your browser to reject cookies, but this may affect how the Services work.
HOW WE SHARE PERSONAL DATA
We may share your personal data in the following situations:
With service providers that perform functions such as payment processing, data analysis, customer service and web hosting.
With business and marketing partners.
With affiliated companies or within our business group.
With third parties, with your consent (for example, social media).
In legal situations, such as business transactions, court orders or regulatory compliance.
CATEGORIES OF RECIPIENTS
Identifying data: service providers, business partners, affiliated companies.
Commercial data: service providers, business partners.
Internet/network activity: analytics service providers, IT service providers.
Location data: technical service providers.
We do not sell or share your data without your consent.
THIRD-PARTY LINKS
Our Site may contain links to third-party websites. We do not control these sites, which are governed by their own privacy policies. We are not responsible for the content or practices of those sites.
CHILDREN'S DATA
Our Services are not directed at children and we do not knowingly collect data from people under 16. Parents or guardians can contact us to request the deletion of data submitted by children.
DATA SECURITY AND RETENTION
We apply commercially reasonable security measures, but we cannot guarantee absolute security. The data retention period depends on our legal obligations and the need to manage accounts and services.
YOUR RIGHTS
Depending on your location, you may have the following rights:
Right to access your personal data
Right to request the deletion of your data
Right to rectification of inaccurate data
Right to data portability
Right to object to the sale or sharing of data or to personalised advertising
Right to restriction of processing
Right to withdraw consent
Right to appeal the denial of a request
Right to manage your marketing preferences
COMPLAINTS
If you have questions about how we handle your personal data, contact us. You can also lodge a complaint with your local data protection authority.
INTERNATIONAL USERS
We may transfer, store and process your personal data outside your country. When we transfer data from Europe, we use recognised mechanisms, such as the EU standard contractual clauses.
CONTACT
If you have questions or wish to exercise your rights, contact us at support@isla-loom.com.
Unless otherwise stated, Isla & Loom is the controller of your personal data in accordance with applicable law.