Privacy policy

Last updated: 6 February 2026

Blooms Creations (“we”, “us”, “our”) operates this website and online store (the “Services”). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, make a purchase, contact us, or otherwise interact with our Services.

Our store is hosted on Shopify Inc. (“Shopify”), which provides the ecommerce platform that allows us to sell our products and services to you. Where there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will apply in relation to personal data.

By using our Services, you confirm that you have read and understood this Privacy Policy.

Personal Information We Collect

“Personal information” means any information that identifies you or can reasonably be linked to you.

Depending on how you interact with us, we may collect the following categories of personal information:

Information you provide to us

  • Contact details: name, billing address, delivery address, email address and phone number
  • Account information: username, password, preferences and settings
  • Payment information: payment method details, transaction references and payment confirmations (card details are processed securely by our payment providers and are not stored by us)
  • Order information: products viewed, added to cart, purchased, returned or exchanged
  • Communications: information you provide when contacting us by email or other means

Information collected automatically

  • Device and technical data: IP address, browser type, device type, operating system
  • Usage data: how you browse and interact with our website
  • Cookies and similar technologies: used to operate the site, remember preferences and analyse usage

Information from third parties

  • Shopify and service providers who help us operate our business
  • Payment providers, delivery partners and analytics providers
  • Marketing and advertising partners, where permitted by law and subject to your preferences

How We Use Your Personal Information

We process personal data only where we have a lawful basis under UK GDPR, including performance of a contract, compliance with legal obligations, legitimate interests, and consent where required.

We use your personal information to:

Provide and operate our Services

  • Process orders, payments, deliveries, returns and refunds

  • Create and manage customer accounts

  • Communicate with you about your orders or account

  • Provide customer support

Improve and personalise your experience

  • Remember preferences and shopping activity

  • Analyse how customers use our website

  • Improve our products, services and website functionality

Marketing and communications

  • Send marketing emails or promotional messages where you have opted in

  • Display relevant advertising on our website or third-party platforms

    You can opt out of marketing communications at any time.

Security and fraud prevention

  • Detect and prevent fraud, misuse or unauthorised access
  • Protect our website, customers and business

Legal and regulatory obligations

  • Comply with legal requirements
  • Respond to lawful requests from authorities
  • Enforce our terms and protect our legal rights

How We Share Your Personal Information

We may share your personal information only where necessary and appropriate, including with:

  • Shopify, as our ecommerce platform provider
  • Service providers such as payment processors, delivery companies, IT providers, analytics and marketing services
  • Professional advisers (for example, accountants or legal advisers)
  • Authorities or regulators, where required by law
  • Business transfers, such as a sale, merger or restructuring

All third parties are required to handle your personal data securely and in accordance with applicable data protection laws.

Shopify and Third-Party Processing

Our store is hosted by Shopify Inc. Shopify processes personal information to provide and improve its services, including hosting, payments, fraud prevention and analytics.

Your information may be processed by Shopify and its partners in countries outside the UK or EEA. Where this occurs, appropriate safeguards are in place.

You can learn more about how Shopify uses personal data at:

https://privacy.shopify.com

Cookies

We use cookies and similar technologies to operate our website, analyse traffic and personalise content. You can manage or disable cookies through your browser settings or any cookie consent tools provided on our website.

Third-Party Links

Our website may include links to third-party websites or platforms. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal information.

Children’s Data

Our Services are not intended for children under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Data Security and Retention

We take reasonable technical and organisational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfil the purposes set out in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

Your Rights (UK & EEA)

If you are located in the United Kingdom or European Economic Area, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is based on consent

You can exercise these rights by contacting us using the details below. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://ico.org.uk

International Transfers

Your personal data may be transferred outside the UK or EEA. Where this occurs, we rely on appropriate safeguards such as UK International Data Transfer Agreements or Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the “Last updated” date will be revised.

Contact Us

If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise your data protection rights, please contact us:

Email: bloomscreations01@gmail.com

For the purposes of UK data protection law, Blooms Creations is the data controller of your personal information.