Loo.koo.mas values the privacy of everyone who visits our website and gets in touch with our shop. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit lookoomas.com, contact us, interact with our online features, or communicate with our team. It also describes your rights under the General Data Protection Regulation (GDPR) and Icelandic data protection law, and how you can exercise them.
By using lookoomas.com or contacting us through the channels listed on the website, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
Loo.koo.mas is a dessert shop based in Reykjavík, Iceland, serving handmade Greek loukoumades, ice cream, espresso-based coffee, and thick hot chocolate.
For the purposes of this Privacy Policy, Loo.koo.mas is the data controller for personal data collected through lookoomas.com and through direct website-related communication.
Controller details:
- Legal business name: Sweet Art ehf
- Registered address: Laugavegur 30a, 101 Reykjavík
- Email: loo.koo.mas2020@gmail.com
- Phone: +354 551 3003
- Website: https://lookoomas.com
If you have any questions about this Privacy Policy or how we handle your personal data, you can reach us using the contact details above.
2. What Personal Data We Collect
We only collect personal data that is relevant to running our website and communicating with our customers. Depending on how you interact with us, this may include:
Contact details
Your name, email address, phone number, and the content of any message you send us when you contact the business through a form, email, or phone call.
Technical data
IP address, browser type, device type, operating system, referral source, the pages you visit on our website, and approximate location based on your IP address.
Website usage data
Information about how you interact with our pages, buttons, menu pages, contact pages, and other website features.
Cookie and tracking data
Preferences, analytics identifiers, and marketing identifiers, where consent is given as required by law.
Social media interaction data
Information generated if you interact with Loo.koo.mas through Instagram, TikTok, Facebook, or other platforms linked from our website.
Order, booking, or inquiry data
Only collected if such features are added to the website in the future. If we introduce ordering, reservations, or similar tools, we will update this Privacy Policy accordingly.
We do not intentionally collect sensitive personal data (such as data about health, religion, ethnic origin, or political opinions) through our website.
3. How We Collect Personal Data
We may collect personal data in the following ways:
- When you submit a contact form on our website.
- When you email or call the business using the details listed on the website.
- When you browse and use our website.
- Through cookies and similar technologies, as described below.
- Through third-party services embedded or connected to our website, such as maps, analytics tools, advertising tools, social media links, review widgets, or WordPress plugins.
4. Why We Use Personal Data
We use personal data for clear, specific purposes, including:
- Responding to your messages and customer inquiries.
- Providing information about our products, menu items, opening hours, location, and services.
- Improving our website and your overall user experience.
- Understanding how our website performs and how visitors use it.
- Protecting the website from spam, fraud, or misuse.
- Running and measuring digital advertising, only where permitted and where consent is given when required.
- Complying with our legal obligations.
- Managing day-to-day business communications.
5. Legal Basis for Processing
Under GDPR, we must have a valid legal basis for processing your personal data. The basis depends on the specific situation.
| Purpose | Legal basis |
|---|---|
| Optional cookies, analytics, marketing pixels, future newsletter subscriptions, and similar tracking | Consent |
| Handling messages about an order, request, collaboration, or service | Contract or pre-contractual steps |
| Responding to general inquiries, maintaining website security, improving our services, and basic business communication | Legitimate interests |
| Keeping records for accounting, tax, or other legal requirements | Legal obligation |
Where we rely on your consent (for example, for non-essential cookies or marketing tools), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to help it function properly, understand how it is used, and (where permitted) support marketing activities.
Categories of cookies we may use
- Essential cookies: needed for the website to function correctly.
- Analytics cookies: help us understand how visitors use the website.
- Marketing cookies: help us measure or personalize advertising.
- Functional cookies: remember your preferences or support embedded features such as maps and videos.
Tools we may use
Depending on the website setup, we may use services such as:
- Google Analytics 4
- Google Tag Manager
- Google Ads
- Meta Pixel and Facebook or Instagram advertising tools
- TikTok Pixel
- Google Maps
- Social media embeds or links (Instagram, TikTok, Facebook)
- Review widgets
- WordPress plugins that support website functionality
Non-essential cookies are only used with your consent where required by law. You can manage your preferences through the cookie banner on our website (where available) or through your browser settings.
7. Third-Party Services
To run and improve our website, we may rely on trusted third-party providers. These may include:
- Our website hosting provider.
- WordPress and various website plugins.
- Google services, such as Analytics, Tag Manager, Ads, Maps, and Search Console.
- Meta platforms, such as Facebook and Instagram.
- TikTok, if connected to our website or marketing activities.
- Email or contact form services.
- Spam protection tools.
- Review platforms.
- Payment, ordering, or booking providers, if added in the future.
These providers may process personal data on our behalf or as independent controllers, in line with their own privacy policies and data processing terms. We choose providers that offer reasonable privacy and security standards.
8. International Data Transfers
Some of the third-party providers we work with may process personal data outside Iceland or the European Economic Area (EEA), for example in the United States or other countries.
When personal data is transferred internationally, we aim to rely on appropriate safeguards required by GDPR, such as European Commission adequacy decisions, standard contractual clauses, or equivalent legal safeguards where applicable. The aim is to make sure your data continues to receive a comparable level of protection.
9. How Long We Keep Personal Data
We keep personal data only for as long as needed for the purposes described in this Privacy Policy, or as required by law.
- Contact form and email inquiries: kept only as long as needed to respond to your message and manage our relationship with you.
- Business records: kept as long as required by accounting, tax, or other legal obligations under Icelandic law.
- Analytics data: kept according to the retention settings of the analytics tools we use.
- Cookie consent preferences: kept according to the settings of our consent management tool, so we can remember your choices.
- Marketing consent: if newsletter or marketing emails are added in the future, your consent will be kept until you unsubscribe or withdraw consent.
When personal data is no longer needed, we delete it or anonymize it in a secure manner.
10. Your Privacy Rights
Under GDPR and Icelandic data protection law, you have the following rights regarding your personal data:
- Right of access: to ask whether we hold personal data about you and to receive a copy of it.
- Right to rectification: to ask us to correct inaccurate or incomplete data.
- Right to erasure: to ask us to delete your personal data in certain circumstances.
- Right to restriction of processing: to ask us to limit how we use your data in certain situations.
- Right to object: to object to processing based on our legitimate interests, including direct marketing.
- Right to data portability: to receive certain data in a structured, commonly used, and machine-readable format.
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.
- Right to lodge a complaint: you can file a complaint with the Icelandic Data Protection Authority, Persónuvernd, if you believe your data has been handled unlawfully.
You can find more information about Persónuvernd on their official website.
11. How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at loo.koo.mas2020@gmail.com.
Before responding to a request, we may need to verify your identity to make sure we are sharing personal data with the right person. We will handle all requests in accordance with applicable data protection law and respond within the timeframes required by GDPR.
12. Data Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These may include:
- HTTPS and SSL encryption for the website.
- Secure hosting with reputable providers.
- Limited access to website admin areas and communications.
- Regular updates of the website, themes, and plugins.
- Spam protection tools.
- Backups, where appropriate.
While we take security seriously, no method of transmitting or storing data over the internet can be guaranteed to be completely secure. We encourage you to be careful about the information you share online.
13. Children’s Privacy
Our website is not directed at children. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided personal data through our website, please contact us at [Insert contact email] so we can take appropriate action.
14. Links to Other Websites and Social Media
Our website may include links to third-party platforms such as Instagram, TikTok, Facebook, Google Maps, review platforms, or other external websites.
Loo.koo.mas is not responsible for the content or privacy practices of these third-party websites or services. We encourage you to read their privacy policies before sharing personal information with them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, our services, or applicable law. When we make significant changes, we will update the “Last updated” date below and, where appropriate, provide additional notice on our website.
Last updated: 10/05/2026
16. Contact Us
If you have any questions about this Privacy Policy or about how we handle your personal data, please get in touch:
Loo.koo.mas
Registered address: Laugavegur 30a, 101 Reykjavík
Website: https://lookoomas.com
Location: Reykjavík, Iceland
Email: Laugavegur 30a, 101 Reykjavík
Phone: +354 551 3003
Legal business name: Sweet Art ehf