Privacy policy
LOAM CO Privacy Policy
Last updated: 30 October 2026
Who we are
LOAM CO operates the online store at loamco.shop. This policy explains how we collect, use, share and protect personal information when you browse our website, buy from us, contact us or subscribe to marketing.
The data controller is LOAMCO LTD, trading as LOAM CO.
- Business correspondence address: 64 Oakdale Terrace, Penmaen, Oakdale, NP12 0DF, United Kingdom
- Email: hello@loamco.co.uk
We handle personal information under applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), as amended. Using our website does not, by itself, give consent to marketing or optional tracking.
Information we collect and where it comes from
Depending on how you interact with us, we collect:
- Contact details: name, email, billing and delivery addresses, and telephone number where provided.
- Orders and payments: items ordered, transaction references, payment status, delivery information, returns and refunds. Payment providers process payment credentials; the information available to us varies by provider and may include limited card details and payment confirmations.
- Account details: information used to manage a customer account, where you choose to use one, and saved preferences.
- Communications: enquiries, correspondence, reviews and information you send us.
- Website and device data: IP address, browser and device details, pages viewed, cart activity, referral information and identifiers collected through cookies or similar technologies, subject to consent where required.
- Privacy and marketing choices: subscriptions, consent records, cookie preferences and unsubscribe requests. Where enabled and permitted by your choices, marketing tools may record email opens and link clicks.
We collect information directly from you, automatically through our website, and from Shopify and providers involved in payments, delivery, fraud prevention and marketing. These providers may supply payment confirmations, tracking updates, fraud indicators and campaign interaction data.
Please avoid sending sensitive personal information unless necessary for your enquiry.
How and why we use information
| Purpose | Lawful basis |
|---|---|
| Process orders and payments, deliver purchases and handle returns | Performance of our contract with you, or steps you request before entering into a contract |
| Provide an account you request | Performance of our contract with you |
| Answer questions about a possible order | Steps you request before entering into a contract |
| Handle general enquiries and customer service records | Our legitimate interests in responding to customers, resolving problems and running our business efficiently |
| Keep accounting records and meet tax, consumer and other legal duties | Compliance with a legal obligation |
| Secure our store, prevent fraud and misuse, and establish, exercise or defend legal claims | Our legitimate interests in protecting customers, payments and our business; legal obligation where a specific legal duty applies |
| Send electronic marketing | Consent; or our legitimate interests in promoting our own similar products where every condition of the products and services soft opt-in is met |
| Use optional analytics, advertising cookies, pixels and related personalisation | Consent |
| Record privacy choices and honour marketing objections | Compliance with our legal obligations |
Where we rely on legitimate interests, we assess necessity, proportionality and the impact on your rights. You can ask us about that assessment.
We need certain contact, delivery and payment information to fulfil orders. Without it, we may be unable to accept payment, deliver your purchase or provide the requested service. You do not have to agree to marketing to buy from us.
Marketing and abandoned checkout reminders
We use Shopify Email and Shopify Flow to manage email campaigns and automated customer communications, such as welcome emails, post-purchase messages and checkout reminders. These tools may use subscription status, order history and relevant shopping activity to decide which messages to send. Marketing messages are sent only with the necessary consent or where the products and services soft opt-in lawfully applies. To use that exception, we must have obtained your details directly during a sale or genuine negotiations for a sale, promote only our own similar products or services, and offer a clear opportunity to opt out both when collecting your details and in every subsequent marketing message.
Promotional abandoned checkout reminders follow these rules too. Browsing our store or entering an email address does not automatically give permission for marketing.
Unsubscribe using the link in our marketing emails or email hello@loamco.co.uk.
You have an absolute right to object to direct marketing, including related profiling. We will stop that use when you object.
We may still send necessary service messages, such as order confirmations, delivery updates and replies to enquiries.
Cookies, analytics and advertising
We use cookies and similar technologies to operate the store, secure checkout and remember choices. With your permission, optional tools may help us analyse website use, measure campaigns and show relevant advertising.
We use strictly necessary technologies without cookie consent where the law allows. We ask for consent before optional analytics or advertising technologies are used. Rejecting optional cookies does not prevent you from shopping.
You can accept or reject optional categories through the Shopify cookie banner shown to UK visitors. To ask us to withdraw consent or for help changing your preferences, email hello@loamco.co.uk. You can withdraw consent at any time; this does not affect processing that was lawful before withdrawal. Browser controls can also block or remove cookies, although blocking essential cookies may affect store features.
We use the following services:
- Google Analytics: to understand website visits and interactions, such as pages viewed and shopping activity, and improve our store. This can involve device information, online identifiers and event data. Read how Google uses information from sites using its services.
- Meta Pixel: to measure advertising performance and, with your permission, support personalised advertising on Meta services such as Facebook and Instagram. This can involve sharing page views, product interactions, cart and purchase events, and browser or device identifiers with Meta. Meta may associate this information with your Meta account. See the Meta Privacy Policy.
- Shopify: to operate the store, manage privacy choices, provide analytics and deliver the enhanced services described below.
Cookies may last only for your browsing session or remain until their expiry or deletion. Their duration depends on their purpose, provider and our configuration. You can contact us for details of the cookies used on our store. Consent-based tracking is subject to your choices; browser settings alone may not stop all other forms of tracking.
Where you agree to personalised advertising, browsing and shopping activity may be used to infer product interests and measure advertising results. You can withdraw permission through the controls above.
Sharing information
We share information where necessary for the purposes above and where there is a lawful basis. Recipients may include:
- Shopify, which hosts our store and provides ecommerce services.
- Payment providers handling payments, refunds and payment disputes.
- Delivery and fulfilment providers handling orders, tracking and returns.
- Technology and customer support providers operating and protecting our services.
- Shopify Email and Shopify Flow for email and automation, Google for Google Analytics, and Meta for Meta Pixel and advertising, subject to the permissions described above.
- Review and affiliate providers, where those features are used, subject to applicable tracking choices.
- Professional advisers and public authorities where necessary for advice, legal compliance or claims.
- A prospective buyer or successor where necessary for a business transfer, with appropriate confidentiality and data protection safeguards.
Providers acting on our behalf must process information under appropriate contractual arrangements. Some recipients, including payment providers, may also be independent controllers for their own legal and operational purposes.
Shopify
Shopify processes personal information to host our store, support transactions, provide security and deliver ecommerce services. Information may be shared with Shopify and relevant third parties outside the UK.
We use Shopify Network Intelligence for enhanced services that help protect, grow and improve our business. These services may use information about your interactions with our store together with interactions with other merchants and Shopify. Shopify acts as a controller for its processing to provide these enhanced services. Advertising based on this combined activity is subject to your consent, which you can withdraw through our cookie preferences.
Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to learn about Shopify's processing and exercise relevant rights, including withdrawing consent or objecting to its enhanced-services processing. Contact LOAM CO for requests about information we control.
International transfers
Shopify and other providers may store or process information outside the UK. Where we transfer information to a country without UK adequacy regulations covering the transfer, we use an appropriate safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses, together with additional measures where required.
Contact us for information about the safeguards relevant to your information and how to obtain a copy, subject to appropriate redactions to protect confidential information.
Retention
We keep personal information only as long as necessary. We use these criteria:
- Order and accounting records: the periods required by applicable tax and accounting law, and any further period necessary for returns, disputes or legal claims.
- Accounts: while needed to provide the requested service. After closure, we delete or anonymise information no longer needed, retaining records required for legal or other justified purposes.
- Enquiries and complaints: until resolved and for the additional period reasonably needed for related follow-up, disputes or claims, considering the nature of the issue.
- Marketing records: while we have a valid basis to contact you. We retain limited suppression information as necessary to honour objections and unsubscribe requests, and consent records where needed to demonstrate compliance.
- Website and tracking data: according to the relevant service settings, the measurement purpose, the need to investigate technical issues and your consent choices. Cookies expire or are deleted according to their configured lifespan; removing a cookie does not automatically delete information already collected by the service.
We review records and delete or anonymise information no longer needed. Information remaining in backups is subject to restricted access and the backup replacement cycle. A legal obligation or unresolved claim may require longer retention.
Security
We use appropriate technical and organisational measures to protect information and restrict access to people and providers who need it. No website or transmission method guarantees complete security. Please do not email payment card details or other sensitive information.
Your rights
Subject to applicable conditions and exceptions, you may have the right to:
- Access your information and receive a copy.
- Correct inaccurate or incomplete information.
- Have information erased.
- Restrict processing.
- Object to processing based on legitimate interests, including related profiling.
- Receive certain information in a structured, commonly used, machine-readable format and have it transferred to another organisation where applicable.
- Withdraw consent at any time where we rely on it.
- Exercise applicable safeguards concerning solely automated decisions with legal or similarly significant effects, including requesting human intervention and challenging a decision where the law provides these protections.
Some rights have limits: for example, we may need to retain transaction records despite a deletion request. Your right to object to direct marketing is absolute.
Email hello@loamco.co.uk to exercise your rights. We may request proportionate information to verify your identity. We respond without undue delay, normally within one calendar month, subject to any lawful extension or adjustment. We will explain any extension. Requests are normally free; we will explain any fee or refusal permitted by law.
Children
Our store is intended for a general audience and is not specifically directed at children. If you believe a child has provided information we should not hold, contact us so we can investigate and take appropriate action.
Complaints
Contact hello@loamco.co.uk if you have concerns about how we handle information.
You also have the right to complain to the UK's Information Commissioner's Office (ICO), without needing our permission: ico.org.uk/make-a-complaint.
Changes
We may update this policy when our practices or legal requirements change. We will publish the updated version, change the date above and provide further notice where required.
