U.S. State Privacy Notice

U.S. State Privacy Notice

The short version:
If you live in a state with a consumer privacy law, you have specific rights over your data. We respond to requests within 45 days.

Who this notice is for

This notice applies to residents of states with comprehensive consumer privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah and Virginia. It supplements our Privacy Policy and explains the additional rights those laws give you.

What we collect and why

In the language of these laws, we collect the following categories:

• Identifiers — name, postal address, email address, phone number, IP address
• Commercial information — items purchased, order value, return history
• Internet activity — pages viewed, referring site, device and browser type
• Payment confirmation data — processed by our payment provider; we never see or store full card numbers
• Inferences — general preferences derived from what you browse and buy

We use these categories for the business purposes listed in our Privacy Policy: fulfilling orders, providing support, preventing fraud, meeting legal obligations and improving the store.

We do not sell your information

We do not sell personal information for money. We do not share it for cross-context behavioural advertising except where you have consented, and you can withdraw that consent at any time through the choices on our Do Not Sell or Share page.

Sensitive information

We do not collect sensitive personal information such as government identifiers, precise geolocation, health data, or information about race, religion or sexual orientation.

Your rights

• Know what categories of personal information we hold about you, and why
• Access a copy of the specific information we hold
• Correct information that is inaccurate
• Delete information we no longer need for a legal or contractual purpose
• Opt out of sale or sharing for advertising
• Limit the use of sensitive information, which we do not collect in any case
• Non-discrimination — we will not charge you more, give you a worse experience, or refuse service because you exercised a right

How to make a request

Email support@loomandloom.us with the right you want to exercise and the email address or order number we can match you against. We may ask for one or two pieces of information to confirm your identity before acting, so that we do not hand your data to someone else.

We respond within 45 days. If a request is complex we may extend by a further 45 days, and we will tell you before the first period ends.

Authorised agents

You may use an authorised agent to submit a request on your behalf. We will ask the agent for written permission signed by you, and may still contact you directly to confirm the request.

Global Privacy Control

We treat a Global Privacy Control (GPC) browser signal as a valid opt-out request for your browser, without any further action from you.

Appeals

If we decline a request, we will explain why in writing and tell you how to appeal. Appeals are reviewed by a different person from the one who made the original decision.

Last updated: 12 November 2026

Contact us

loomandloom
5337 West Wheeler Road, Fayetteville, AR 72704, United States
Email: support@loomandloom.us · Monday to Friday, 9:00 a.m. to 5:00 p.m. CT