Privacy Policy

Last updated: October 20, 2026

This Privacy Policy explains how Rawloom Shop, operating as Rawloomapparel, collects, uses and protects your personal information when you visit our website or buy our heavyweight tees, hoodies, long sleeves and sweatpants. It also explains the privacy rights available to you under US state laws and how to use them.

1. Information we collect

Information you provide

• Name and email address
• Phone number, if you choose to provide one at checkout
• Billing and shipping addresses
• Order history and details of your purchases
• Messages you send to our support team

Information collected automatically

• IP address
• Device type, browser and operating system
• Cookies and similar technologies
• How you browse and interact with our site, such as pages viewed and searches made

We do not collect sensitive personal information, so we do not offer a "Limit the Use of My Sensitive Personal Information" link.

2. How we use your information

• To process, ship and track your orders
• To process payments and prevent fraud
• To answer your questions and handle returns and refunds
• To send order confirmations and shipping updates
• To send marketing emails, if you have chosen to receive them
• To understand how our site is used and improve it
• To measure and improve our advertising
• To comply with legal obligations

3. Who we share information with

We share personal information only with the service providers that help us run the store:

• PayPal processes payments.
• DigitalOcean Spaces stores files and images for our site.
• OpenAI powers product search on our site and receives the search queries you type.
• Telegram delivers order notifications to our staff.
• Our email provider (SMTP) sends order and support emails.
• Shipping carriers (USPS, UPS, FedEx, DHL) deliver your orders.
• Google Analytics and Google Ads place analytics and advertising cookies on our site.

4. Categories of personal information and recipients

5. Sale and sharing of personal information

We do not sell your personal information for money. However, the advertising and analytics cookies set by Google Ads and Google Analytics may be considered "sharing" of personal information for cross-context behavioral advertising under the California Privacy Rights Act (CPRA) and similar state laws. You can opt out at any time on our Do Not Sell or Share My Personal Information page.

6. Your privacy rights

We extend the following rights to all customers in the United States:

• Right to know what personal information we collect, use and disclose
• Right to access a copy of your personal information
• Right to delete your personal information, subject to legal exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of your personal information
• Right to non-discrimination for exercising any of these rights

Depending on your state, you may also have the right to data portability and the right to opt out of targeted advertising and profiling.

7. How to submit a request

Email [email protected] or use the form below. Please tell us which right you want to exercise.

• Opt-out requests are handled within 15 business days. They do not require identity verification or a login.
• Other requests (know, access, delete, correct, portability) are answered within 45 days. If we need more time, we may extend this by another 45 days and will tell you.
• For requests other than opt-outs, we may need to verify your identity using information we already hold.
• Authorized agents: you may use an authorized agent to submit a request on your behalf, with signed written permission from you.

Appeals

If we decline your request, you may appeal by emailing [email protected] with the subject line "Privacy Appeal". We will respond within 60 days. If you disagree with our decision, you may contact the Attorney General of your state.

8. Children's privacy

Our site is not directed to children. We do not sell or share the personal information of consumers under 16 without prior consent: consumers aged 13 to 15 must opt in themselves, and children under 13 require consent from a parent or guardian.

9. Marketing emails

Every marketing email we send includes an unsubscribe link. Unsubscribing stops marketing emails only; we will still send transactional emails such as order confirmations and shipping updates.

10. Data retention and security

We keep personal information only as long as needed for the purposes described in this policy, such as completing orders, handling returns and meeting legal obligations. We use reasonable administrative, technical and physical safeguards to protect your information, and our site is served over an encrypted SSL connection. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and the "Last updated" date above will be revised.