Privacy policy

This Privacy Policy explains how Style Loom collects, uses, shares and protects personal data when you visit styleloom.com.au or place an order with us.

Last updated: September 2026

1. Who we are

Data controller	Style Loom
Address	128 City Road, London, EC1V 2NX, United Kingdom
Contact for data matters	support@styleloom.com.au

We are the controller of personal data collected through this website.

2. What we collect and why

Category	Examples	Purpose	Lawful basis
Order data	Name, email, delivery address, phone, order contents	Fulfilling your order	Performance of a contract
Payment data	Card type, last four digits, billing address, transaction result	Taking payment and preventing fraud	Contract and legitimate interests
Account data	Login details, saved addresses, order history	Operating your account	Performance of a contract
Support data	Emails, photos you send, order references	Answering enquiries and handling returns	Contract and legitimate interests
Marketing data	Email address, subscription status	Sending marketing emails	Consent
Technical data	IP address, browser, device, pages viewed, referring site	Site security, analytics, improving the store	Legitimate interests and consent for non-essential cookies

We do not knowingly collect data from anyone under 16, and we do not collect special category data such as health, religion or biometric information.

3. Payment data

3.1 Payments are processed by third-party payment providers. Style Loom does not receive or store your full card number, expiry date or security code.

3.2 Our payment providers are PCI-DSS compliant and process your data as independent controllers under their own privacy policies.

4. Who we share data with

Recipient	Why	Location
Shopify Inc.	Hosting and operating this store	Canada, with global infrastructure
Payment providers	Processing payments and preventing fraud	Varies by method
Fulfilment partners	Picking, packing and despatching your order	Outside the UK and EEA
Carriers and postal operators	Delivering your parcel and providing tracking	Varies by destination
Email and analytics providers	Order notifications, marketing, site analytics	Varies by provider
Professional advisers and authorities	Where required by law	United Kingdom

We do not sell your personal data. We do not share it with third parties for their own independent marketing.

5. International transfers

5.1 Because our fulfilment partners are located outside the United Kingdom and the European Economic Area, your delivery details are transferred internationally in order to despatch your order.

5.2 Where we transfer personal data outside the UK or EEA, we rely on adequacy decisions where available, or on Standard Contractual Clauses or the UK International Data Transfer Addendum.

6. How long we keep data

Data	Retention period
Order and transaction records	6 years, to meet tax and accounting obligations
Account data	Until you ask us to delete your account
Support correspondence	2 years from the last contact
Marketing subscription data	Until you unsubscribe, then a suppression record is kept
Analytics and cookie data	As set out in your cookie preferences, typically up to 24 months

7. Cookies

7.1 We use strictly necessary cookies to operate the cart, checkout and login. These cannot be switched off.

7.2 We use analytics and marketing cookies only with your consent, which you can give, refuse or withdraw at any time using the cookie banner or the Your Privacy Choices page.

8. Marketing

8.1 We send marketing emails only where you have opted in.

8.2 Every marketing email contains an unsubscribe link. You can also email us to opt out. Unsubscribing does not affect transactional emails about orders you have placed.

9. Your rights

Right	What it means
Access	Request a copy of the personal data we hold about you
Rectification	Have inaccurate data corrected
Erasure	Have your data deleted, subject to our legal retention obligations
Restriction	Limit how we use your data while a query is resolved
Portability	Receive your data in a portable, machine-readable format
Objection	Object to processing based on legitimate interests, and to direct marketing at any time
Withdraw consent	Withdraw consent at any time, without affecting prior processing
Complain	Lodge a complaint with your data protection authority

To exercise any right, email support@styleloom.com.au. We respond within one month. We may ask you to verify your identity first.

UK residents may complain to the Information Commissioner's Office at ico.org.uk. EU residents may complain to their national supervisory authority. Australian residents may contact the Office of the Australian Information Commissioner. New Zealand residents may contact the Office of the Privacy Commissioner.

10. Security

10.1 This site is served over encrypted HTTPS connections and hosted on Shopify's PCI-DSS compliant infrastructure.

10.2 Access to personal data is limited to those who need it to operate the business.

10.3 No system is completely secure. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authority as required by law.

11. Changes

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be notified on this site.

12. Contact

Style Loom
128 City Road, London, EC1V 2NX, United Kingdom
Email: support@styleloom.com.au
Phone: +44 7440 614904
Support hours: Monday to Friday, 09:00–17:00 (GMT, London)