Privacy policy
Privacy policy
Last updated: 8 September 2026
Before we start
Loom collects and uses personal data because we need it to process your orders, deliver them, answer you and keep this site running. We try to collect as little as possible, and to tell you plainly what we do with it. This page sets out exactly what, why, for how long and with whom.
1. Data controller
The data controller is Loom SAS (842 991 655 RCS Paris), 4 rue Barbette, 75003 Paris, France.
For any question or request about your data: hello@qurzelvaxor.shop, or by post to the address above.
2. Data collected, purposes and legal bases
| Data | Why | Legal basis |
|---|---|---|
| Identity and contact details (first name, surname, email, postal address, phone) | Processing and delivering your order, keeping you posted on its progress | Performance of the contract |
| Order data (contents, amount, history, payment method used) | Managing the sale, returns, exchanges and refunds | Performance of the contract |
| Invoices and accounting records | Meeting our accounting and tax obligations | Legal obligation |
| Exchanges with customer service | Answering you and following up on your request | Performance of the contract / legitimate interest |
| Email address (newsletter) | Sending you our news | Consent, or legitimate interest if you are already a customer |
| Product reviews | Publishing reviews on product pages | Consent |
| Browsing data and cookies | Running the site, measuring audience, improving our pages | Legitimate interest for strictly necessary cookies, consent for the rest |
| Technical data (IP address, device, country) | Securing the site, preventing fraud, showing the right currency and language | Legitimate interest |
When a form field is marked as required, it's because we need it to provide the service you're asking for. Without it, the order or the sign-up can't go through.
3. Retention periods
- Customer account: for as long as the relationship lasts, then three years from your last contact with us.
- Orders, invoices and accounting records: ten years from the close of the financial year, in accordance with Article L 123-22 of the French Commercial Code.
- Exchanges with customer service: three years from the last exchange.
- Newsletter subscribers who aren't customers: three years from the last contact, or until they unsubscribe.
- Cookies and trackers: thirteen months maximum; your consent choice is kept for six months.
- Payment card data: never kept by Loom. It is handled directly by our payment provider.
4. Recipients and processors
Your data is never sold, rented or passed to third parties for advertising purposes. It is shared only with the providers that allow us to operate, each for their own part:
- Shopify — website hosting, order and payment management.
- Carriers — Colissimo, DPD, bpost, SEUR, BRT, PostNord and FedEx depending on your delivery country, to get your parcel to you.
- Logtex — order picking and dispatch.
- Help Scout — customer service tool, to handle your emails and requests.
- Judge.me — collecting and publishing product reviews.
- Pennylane — accounting and invoicing.
- Make — automating our internal processes.
- Orbe — detecting the country you're connecting from, to offer you the right currency and language.
- Atlas Pickup Points — showing the pickup points available near you.
- éthi'Kdo — processing gift cards.
- Kleep — second-life service for garments.
Your data may also be disclosed to administrative or judicial authorities where the law requires it.
5. Transfers outside the European Union
Some of our providers are established outside the European Union, or may host part of their processing there, notably in the United States. This is the case for Help Scout and Judge.me.
These transfers are covered by the safeguards set out in Chapter V of the GDPR: the European Commission's standard contractual clauses, or certification under the EU–US Data Privacy Framework where the provider is certified. You can obtain a copy of these safeguards by writing to hello@qurzelvaxor.shop.
6. Cookies
On your first visit, a banner lets you accept or refuse cookies that aren't strictly necessary. Cookies essential to running the site (basket, session, security) are set without consent, as the rules allow. All the others — audience measurement, personalisation — are only set if you accept them.
You can change your choice at any time from the cookie settings panel available on the site. Refusing non-essential cookies doesn't stop you browsing or ordering.
7. Your rights
You have the following rights at any time: access, rectification, erasure, restriction of processing, objection, portability, and the right not to be subject to a decision based solely on automated processing.
You can also withdraw your consent at any time where the processing relies on it, without affecting the lawfulness of processing already carried out. Every marketing email contains an unsubscribe link.
To exercise these rights, write to hello@qurzelvaxor.shop setting out your request. We reply within one month. We will only ask for proof of identity if there is reasonable doubt about who you are.
If our answer doesn't satisfy you, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr/fr/plaintes. If you live in another Member State, you can go to the supervisory authority of your country of residence.
8. Security
We put in place appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure and alteration. As no system is infallible, we also encourage you to protect your login details and not to share them.
9. Changes to this policy
We may update this policy. The date it was last updated appears at the top of the page. If anything substantial changes, we'll let you know by a suitable means.