Privacy policy

Last updated: December 17, 2025

This Privacy Policy describes how Loom & Latch (“Loom & Latch,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from [loomandlatch.com] (the “Site”) or otherwise communicate with us (collectively, the “Services”).

We operate in Canada and may ship internationally. If you do not agree with this Privacy Policy, please do not use the Services.

1) Who we are and how to contact us

Legal business name: Nikhil Bector (sole proprietor)

Operating name: Loom & Latch

Business address: 7 Princeton Avenue, Halifax, Nova Scotia, B3R 2A1, Canada

Email: [support@loomandlatch.com]

2) Personal information we collect

The types of personal information we collect depend on how you interact with the Services.

A) Information you provide to us

 We may collect information you provide directly, including:

  • Contact details (name, email, phone number)
  • Order details (billing/shipping address, items purchased, order notes)
  • Account details (if you create an account: name, email, password)
  • Customer support messages (when you contact us)
  • Marketing preferences (newsletter opt-in/opt-out)

B) Information we collect automatically

When you use the Site, we may automatically collect:

  • Device information (IP address, browser type, time zone)
  • Usage data (pages viewed, clicks, time spent, referring/exit pages)
  • Cookies and similar technologies (see “Cookies” below)

C) Information we receive from third parties

We may receive personal information from service providers that help us operate our business, such as:

  • E-commerce platform providers (e.g., Shopify)
  • Payment processors (to process payments)
  • Shipping and logistics providers (to deliver your order)
  • Analytics and advertising partners (to understand performance and show relevant ads)

3) How we use your personal information

We use personal information to:

  • Provide and fulfill orders (process payments, ship products, send order updates)
  • Communicate with you (customer support, updates about your order, important service notices)
  • Operate and improve the Site (analytics, troubleshooting, testing, and performance)
  • Marketing and advertising (send newsletters if you opted in; measure campaigns; show ads you may find relevant)
  • Security and fraud prevention (detect and prevent misuse and unauthorized activity)
  • Legal and compliance (tax, accounting, and regulatory obligations)

Canada’s private-sector privacy law (PIPEDA) generally requires businesses to identify purposes and obtain meaningful consent when collecting, using, or disclosing personal information in commercial activity.   

4) Legal bases for processing (UK customers)

If you are located in the UK, we process personal data under one or more of these legal bases (as applicable):

  • To perform a contract (e.g., to process and deliver your order)
  • Legitimate interests (e.g., improving our services, preventing fraud, understanding site performance)
  • Consent (e.g., marketing emails where required—your consent can be withdrawn at any time)
  • Legal obligation (e.g., record-keeping and tax compliance)

UK guidance on privacy notices emphasizes telling individuals the purposes and lawful basis for processing. 

5) How we share your personal information 

We may share personal information with trusted service providers only as needed to run our business, including:

  • Platform providers (hosting the store and enabling checkout)
  • Payment processors (processing transactions and preventing fraud)
  • Shipping carriers and logistics partners (delivering orders and providing tracking)
  • Analytics and advertising providers (site analytics, ad measurement, and marketing)
  • Professional advisors (accounting, legal) as necessary
  • Authorities where required to comply with law, enforce our terms, or protect rights and safety

We do not sell your personal information in the traditional sense. However, some advertising/analytics activities may involve sharing identifiers (like cookies) with partners to measure or improve ads.

6) International transfers

Because we are based in Canada and ship internationally, your personal information may be processed in Canada, the United States, or other countries where our service providers operate. When information is processed outside your country, it may be subject to the laws of that jurisdiction. 

7) Cookies and similar technologies 

We use cookies and similar technologies to:

  • Keep the Site working (e.g., cart and checkout functionality)
  • Remember preferences
  • Understand how people use the Site
  • Measure and improve marketing

You can control cookies through your browser settings. Blocking cookies may affect Site functionality.

8) Marketing communications

If you opt in, we may send marketing emails. You can unsubscribe at any time by using the unsubscribe link in our emails or contacting us at the email listed above.

9) Data retention

We keep personal information only as long as necessary for the purposes described above, including to:

  • Complete and administer orders
  • Provide customer support
  • Maintain required business records (e.g., tax/accounting)
  • Resolve disputes and enforce agreements

10) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

11) Your privacy rights

Canada (PIPEDA)

You can request access to the personal information we hold about you and request corrections if it’s inaccurate, subject to limited exceptions. PIPEDA principles include openness, access, and the ability to challenge compliance.   

UK (and similar rights where applicable)

Depending on your location, you may have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (in certain circumstances)
  • Object to certain processing (including some marketing)
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a supervisory authority (in the UK, the ICO)

UK guidance recommends clearly informing people what information is provided and that they can complain to the ICO where relevant. 

To exercise any rights, contact us using the details above.

12) Children’s privacy

The Services are not intended for children, and we do not knowingly collect personal information from children. 

13) Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in practices or for legal/operational reasons. We will update the “Last updated” date when changes are made.