Privacy Notice

Last updated: 27 October 2026

Loomé is operated by Line & Loom Sdn. Bhd. (Registration No. 202601036437 (1698532-K)) ("we", "us" or "our").

We respect your privacy and are committed to handling your personal data responsibly.

This Privacy Notice explains what personal data we collect, how and why we use it, who we may share it with, how we protect it and the choices available to you.

This Notice is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), including its applicable amendments, regulations and guidelines.

By providing your personal data, you acknowledge that you have been given this Notice. Where consent is required by law, we will obtain it as appropriate.

Some personal information is necessary to process your orders and provide our services. If you choose not to provide the required information, we may be unable to fulfil your request.

1. Personal Data We Collect

Depending on how you interact with Loomé, we may collect the following information:

Personal and contact details

• Full name.
• Billing and delivery addresses.
• Email address.
• Telephone number.

Order and transaction information

• Products purchased.
• Order history and payment status.
• Shipping and tracking information.
• Returns, refunds and store credit records.

Account information

• Account registration details.
• Login credentials managed through our e-commerce platform.
• Saved preferences and account settings.

Communications

• Emails, messages and customer-service enquiries.
• Reviews, photographs and feedback.
• Survey responses and other information you voluntarily provide.

Website and technical information

• IP address.
• Device and browser information.
• Cookie identifiers.
• Website activity, pages viewed and interactions with our store.

Marketing preferences

• Newsletter subscriptions.
• Communication preferences.
• Consent and unsubscribe records.

Gift and personalisation details

Where applicable, we may collect gift recipients' names, delivery addresses, personalised messages or other information necessary to fulfil your request.

Payment-card and online-banking information is generally processed by our authorised payment service providers. We do not intentionally collect or store complete payment-card numbers or online-banking credentials.

We do not ordinarily request sensitive personal data, such as health information, religious beliefs or biometric information. Please avoid including such information in general communications unless necessary.

If you provide personal information belonging to another individual, you confirm that you have the necessary authority to share it for the intended purpose.

2. How We Collect Personal Data

We may collect personal data through:

• Direct interactions: when you place an order, create an account, subscribe to updates, contact us or submit reviews.
• Automatic collection: through cookies, website analytics and similar technologies when you browse our website.
• Service providers: including Shopify, payment service providers, delivery partners, marketing platforms and customer-support services involved in your interaction with Loomé.

3. How We Use Your Personal Data

We may use your personal data to:

• Create, maintain and manage your customer account.
• Process payments and fulfil purchases.
• Arrange shipping, delivery and order tracking.
• Manage returns, refunds, exchanges and store credit.
• Respond to enquiries and provide customer support.
• Send important order, account and service notifications.
• Detect and prevent fraud, unauthorised transactions and security incidents.
• Maintain, analyse and improve our website, products and customer experience.
• Personalise website content and shopping experiences where appropriate.
• Send marketing communications where you have consented or where otherwise permitted by law.
• Meet applicable legal, tax, accounting and regulatory obligations.
• Establish, exercise or defend legal claims.

For order fulfilment, your name, contact information, delivery address and relevant transaction details are generally required.

Other information is voluntary unless we explain that it is necessary for a particular service.

We will not use your personal data for purposes unrelated to those described in this Notice without an appropriate legal basis or additional consent where required.

4. Marketing Communications

With your consent, or where otherwise permitted by applicable law, we may send you updates about new collections, restocks, promotions, events and special offers.

These communications may be delivered through email, SMS, WhatsApp or other channels you have chosen.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in our marketing emails.
• Following the opt-out instructions provided in a message.
• Contacting us at care@loome.com.my.

Opting out of marketing does not affect essential communications relating to your orders, account, security or customer-service enquiries.

5. Sharing Your Personal Data

We may disclose personal data to trusted third parties where reasonably necessary to operate our business and provide our services.

These may include:

• E-commerce providers: Shopify and related website service providers.
• Payment providers: authorised payment gateways, financial institutions and fraud-prevention services.
• Delivery partners: courier companies, shipping aggregators, warehouses and fulfilment providers.
• Technology providers: website hosting, IT support, email, analytics and customer-service platforms.
• Marketing providers: advertising and social-media platforms, subject to your preferences and applicable law.
• Professional advisers: accountants, auditors, legal advisers and insurers.
• Regulatory authorities: government agencies, courts or law-enforcement bodies where required or permitted by law.
• Business transaction parties: where necessary in connection with a proposed or completed merger, acquisition or restructuring, subject to appropriate safeguards.

We take reasonable steps to ensure that service providers receive only the information necessary for their functions and handle personal data securely.

We do not sell your personal data for monetary payment.

6. International Data Transfers

Some of our technology and service providers may process, access or store personal data outside Malaysia.

These may include e-commerce, payment, analytics, marketing and customer-support providers.

Where personal data is transferred internationally, we will take reasonable steps to comply with applicable requirements under the PDPA, including requirements concerning cross-border transfers.

Where required, we will assess the protection available in the receiving jurisdiction and implement appropriate contractual, technical or organisational safeguards.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support its operation and improve your shopping experience.

These may include:

Essential cookies

Necessary for core website functions, including shopping carts, checkout, security and account access.

Analytics cookies

Help us understand website traffic, visitor interactions and how our store performs.

Preference cookies

Remember certain settings and preferences to make browsing more convenient.

Marketing cookies

Where enabled, these may help us measure advertising effectiveness and show relevant content or advertisements.

Where required by applicable law, non-essential cookies will be used in accordance with your choices.

You may manage your preferences through available website privacy settings and your browser.

Please note that disabling certain cookies may affect website functionality, including shopping carts and checkout features.

8. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Notice or to meet applicable legal obligations.

Our retention practices generally include:

• Order and transaction records: retained for the applicable legal, tax and accounting retention periods, generally at least seven years where required.
• Customer account information: retained while an account remains active and for a reasonable period afterwards where necessary.
• Marketing information: retained until you unsubscribe, withdraw consent or the information is no longer reasonably required.
• Customer-service communications: retained as necessary to resolve enquiries, manage disputes, prevent fraud or comply with legal requirements.

Retention periods may vary depending on the nature of the information and applicable obligations.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to legal and technical requirements.

9. Protecting Your Personal Data

We take reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction.

We also expect relevant service providers to maintain appropriate data protection and security measures.

However, no method of electronic transmission or storage is completely secure.

We encourage you to use strong, unique passwords and to notify us promptly if you suspect unauthorised access to your account.

In the event of a personal data breach, we will assess the incident and notify the Personal Data Protection Commissioner and affected individuals where required by applicable law.

10. Your Personal Data Rights

Subject to the PDPA and applicable legal exceptions, you may have the right to:

• Access: request access to personal data we hold about you.
• Correction: request correction of information that is inaccurate, incomplete, misleading or outdated.
• Direct marketing: request that we stop processing your personal data for direct marketing purposes.
• Withdrawal of consent: withdraw consent where the processing relies on your consent, subject to applicable legal requirements.
• Data portability: request the transfer of eligible personal data to another data controller, subject to technical feasibility, compatibility and applicable legal requirements.
• Limit processing: exercise applicable choices to limit certain uses or disclosures of your personal data.

To submit a request, please email care@loome.com.my with your name, the email address or telephone number associated with your account and a description of your request.

We may request additional information to verify your identity before processing your request.

Where permitted by law, a prescribed fee may apply to certain requests. We will respond within the applicable legal timeframe.

Please note that withdrawing consent or limiting certain processing activities may affect our ability to provide some services.

If you are dissatisfied with our response, you may contact Malaysia's Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi).

11. Children's Privacy

Our website and services are primarily intended for adults.

If you are under 18, please involve a parent or legal guardian when using our website or placing an order.

We do not knowingly collect children's personal data without appropriate authorisation.

If we become aware that personal data has been collected from a child without the required authorisation, we will take appropriate steps in accordance with applicable law.

12. Reviews and Third-Party Websites

If you voluntarily submit reviews, photographs, comments or other content, some of this information may be displayed publicly on our website or associated platforms.

Please avoid sharing personal information that you do not wish to make public.

Our website may also contain links to third-party websites or services.

These third parties may have their own privacy notices and data-handling practices. We encourage you to review their policies before providing personal information.

We are not responsible for independent third-party activities outside our control, except where applicable law provides otherwise.

13. Changes to This Privacy Notice

We may update this Privacy Notice periodically to reflect changes in our business practices, technology, services or applicable laws.

The latest version will be published on this page with an updated revision date.

Where appropriate or required by law, we will provide additional notice of material changes.

14. Governing Law

This Privacy Notice is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 and its applicable amendments, regulations and guidelines.

15. Contact Us

For questions, concerns or requests relating to your personal data or this Privacy Notice, please contact:

Privacy Contact
Line & Loom Sdn. Bhd.
Trading as Loomé

Registration No.: 202601036437 (1698532-K)

Website: www.loome.com.my
Email: care@loome.com.my

Customer Service Hours:
Monday to Friday, 10:00 AM – 5:00 PM (Malaysia Time), excluding public holidays.

We will review privacy-related enquiries and respond in accordance with applicable legal requirements.