Privacy Policy

Who runs this site

Lo Meets Loom (https://lomeetsloom.com) is operated by Felicia Lo, based in British Columbia, Canada. For this site, I am the person responsible for your personal information.
You can reach me about anything in this policy at felicia at lomeetsloom dot com.

What this policy covers

This policy covers lomeetsloom.com and the newsletter connected to it. It does not cover other websites I link to. That includes the School of SweetGeorgia and my social media profiles, each of which has its own privacy policy.

Information you choose to give me

Contact form. When you send me a message through the contact page, I receive your name, email address, and whatever you write. These messages arrive in my email inbox and are also stored in the website’s database. I use them only to read and reply to you.

Comments. When you leave a comment, WordPress stores your name, email address, and website (if you enter one), along with your comment, your IP address, and your browser’s user agent. The IP address and user agent help catch spam. Your name, website, and comment are shown publicly. Your email address is never shown.

WordPress may also create a scrambled code (a “hash”) from your email address and send it to Gravatar, a service run by Automattic. Gravatar uses it to check whether you have a profile picture. If you do, that picture appears next to your comment. You can read Gravatar’s privacy policy at https://automattic.com/privacy/.

Newsletter. When you subscribe, I collect your email address [and first name]. I use it to send you my newsletter and occasional updates about new posts, projects, and courses. The list is managed by [NEWSLETTER PROVIDER]. My emails may record whether they were opened and which links were clicked, so I can learn what readers find useful. Every email has an unsubscribe link, and you can leave the list at any time.

Information collected automatically

Analytics. I use Google Analytics 4, connected through Google’s Site Kit plugin, to understand how people find and use the site. It tells me things like which pages are read, how long visits last, which country visitors come from, and what kind of device they use.
Google Analytics uses cookies and similar technologies to do this. Google has said that Google Analytics 4 does not log or store IP addresses. I use this information in aggregate, and I don’t use it to identify you personally. My analytics data is kept for 14 months.

Server logs. My web host, Cloudways, automatically records basic technical information whenever a page loads. This includes your IP address, browser type, the page you requested, and the time of the request. These logs are used to keep the site secure and running properly.

Cookies. Cookies are small files stored in your browser. This site uses them in a few ways:
WordPress sets cookies if you choose to have your comment details remembered. These last one year.
Google Analytics sets cookies to tell visits apart.
Embedded content, such as YouTube videos, may set its own cookies.
You can block or delete cookies in your browser settings. The site will still work, although some features may not. [If you use a cookie consent banner, add a sentence here about how visitors can change their choices.]

Services that help me run the site
Service
What it does
What it may receive
Cloudways
Website hosting
Server logs, including IP addresses
Google Analytics 4 (via Site Kit)
Site statistics
Usage and device data, cookie identifiers
Adobe Fonts and Google Fonts
Display the site’s typefaces
IP address and browser details when fonts load
Gravatar (Automattic)
Commenter profile pictures
Hashed email address
YouTube (Google)
Embedded videos
Viewing and device data, cookies
[NEWSLETTER PROVIDER]
Newsletter delivery
Email address, [name], email engagement
Some of these providers store or process data outside Canada, including in the United States. When that happens, your information is subject to the laws of those countries, and authorities there may be able to access it.
Embedded content from other sites
Some posts include videos, images, or posts embedded from YouTube, Instagram, and similar platforms. Embedded content behaves exactly as if you had visited the original site. That platform may collect data about you, set cookies, and track your interaction with the embed. It can do this especially if you have an account there and are logged in.
Links, referral codes, and affiliate links
I sometimes link to tools, materials, books, and courses I use and love. Some of these links may be affiliate or referral links. If you make a purchase through one, I may earn a small commission at no extra cost to you. The retailer may use cookies to record that you arrived from my site.
I also share a discount code for the School of SweetGeorgia, a company I founded. I’ll always tell you when a link has a relationship like this behind it. My [Disclaimer page] has more detail.
How I use your information
I use the information described above to:
reply to your messages and publish and moderate comments;
send the newsletter you signed up for;
understand which posts are helpful so I can write better ones;
keep the site secure, prevent spam, and fix technical problems; and
meet my legal obligations.
I do not sell your personal information. I don’t rent or trade it, and I don’t use it for targeted advertising.
When I share information
I share information only:
with the service providers listed above, and only so they can do their job for this site;
when the law requires it, or to protect the rights, safety, or security of the site, its readers, or me; or
as part of a transfer if the site ever changes ownership. In that case, this policy would continue to apply to information collected under it.
How long I keep information
Contact messages: for as long as needed to respond, and then for up to [24] months.
Comments: for as long as the comment remains on the site. You can ask me to remove your comment at any time.
Newsletter data: until you unsubscribe. After that, I may keep your address on a suppression list so you aren’t accidentally added again.
Analytics data: for [2 / 14] months, as described above.
Server logs: according to Cloudways’ standard retention schedule.
How I protect information
The site is served over HTTPS. It is kept up to date, and access to its administration area is limited and protected with strong authentication. No website or online service can be completely secure, but I take reasonable steps to protect what you share with me.
Your rights and choices
Wherever you live, you can contact me to:
ask what personal information I hold about you;
correct information that is inaccurate;
ask me to delete your information, such as a comment or contact message;
withdraw your consent, for example by unsubscribing from the newsletter; and
ask questions or raise a concern about how your information is handled.
If you’re in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). Depending on the circumstances, British Columbia’s Personal Information Protection Act may also apply.
If you’re in the European Economic Area or the United Kingdom, you also have rights under the GDPR and UK GDPR. These include the right to data portability and the right to object to or restrict certain processing. Here are the legal bases I rely on:
Consent for the newsletter and for non-essential cookies.
Legitimate interests for replying to messages, moderating comments, security, and basic site statistics.
Legal obligation where the law requires me to keep or disclose information.
If you’re in the United States or elsewhere, your local laws may give you similar rights. I’ll honour reasonable requests wherever you are.
To make a request, email [PRIVACY EMAIL]. I may need to confirm your identity before acting on it, and I’ll respond within 30 days.
You can also opt out of Google Analytics across all websites by installing Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.
If you aren’t satisfied with my response, you can complain to a privacy regulator:
in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca);
in the EEA, your local data protection authority; or
in the UK, the Information Commissioner’s Office (ico.org.uk).
Children
This site is written for adults. It is not directed at children, and I don’t knowingly collect personal information from anyone under 13, or under 16 in the EEA and UK. If you believe a child has shared personal information here, please contact me and I’ll delete it.
Changes to this policy
I’ll update this policy when the site or the tools I use change. I’ll also update the “Last updated” date at the top. If a change significantly affects how your information is used, I’ll say so on the site or in the newsletter.
Contact
Questions, requests, or a kind note about textiles are all welcome at [PRIVACY EMAIL].
Felicia Lo Lo Meets Loom [MAILING ADDRESS — optional]