Privacy policy

Introduction

This Privacy Policy explains how holidaysinbloom.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, place an order, communicate with us or otherwise interact with our online store.

We are committed to processing personal information responsibly and transparently.

Where applicable, personal information is processed in accordance with relevant UK privacy and data-protection requirements, including the UK General Data Protection Regulation, the Data Protection Act 2018, applicable provisions of the Privacy and Electronic Communications Regulations and subsequent amendments to UK data-protection legislation.

For privacy enquiries, contact:

info@holidaysinbloom.shop

Personal Information We May Collect

Depending on how you interact with holidaysinbloom.shop, we may collect information including:

Identity Information

This may include:

• Name;
• Username or account identifier; and
• Other information used to identify you.

Contact Information

This may include:

• Email address;
• Delivery address;
• Billing address; and
• Telephone number where supplied.

Order Information

This may include:

• Products purchased;
• Order numbers;
• Purchase dates;
• Order values;
• Shipping details;
• Returns;
• Refunds;
• Customer-service communications; and
• Transaction history.

Payment Information

Payment transactions may be processed by Shopify or third-party payment providers.

We may receive limited payment-related information such as:

• Payment status;
• Transaction identifier;
• Payment method type; and
• Fraud or risk indicators.

Complete payment-card information is generally handled by the relevant payment processor rather than directly through customer-service communications.

Device and Technical Information

When you use our website, certain information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Cookie identifiers;
• Website activity;
• Referring URLs; and
• Approximate technical location information.

Communications

If you contact us, we may process information contained in your message, including customer-service enquiries, complaints, return requests and other correspondence.

How We Use Personal Information

We may process personal information for purposes including:

• Processing orders;
• Processing payments;
• Arranging fulfilment;
• Providing delivery information;
• Communicating about orders;
• Handling cancellations;
• Processing returns;
• Processing refunds;
• Responding to customer enquiries;
• Preventing fraud and misuse;
• Maintaining website security;
• Operating our ecommerce store;
• Improving functionality;
• Analysing store performance;
• Complying with legal obligations;
• Maintaining transaction records; and
• Sending marketing communications where legally permitted.

Lawful Bases

Where UK data-protection law requires a lawful basis, we may rely on one or more of the following.

Contract

Processing may be necessary to enter into or perform a contract with you.

For example, we need certain information to process an order, arrange delivery and handle a return.

Legal Obligation

We may process information where necessary to comply with applicable laws, regulatory requirements, accounting obligations or lawful requests.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by your applicable rights and interests.

Examples may include:

• Fraud prevention;
• Website security;
• Customer-service improvement;
• Business administration; and
• Protecting legal rights.

Consent

Where consent is required, we may rely on consent for specific processing activities.

Where processing is based on consent, you may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Shopify

Our ecommerce store is powered by Shopify.

Shopify provides technical ecommerce infrastructure that allows us to operate the online store, process transactions and provide related functionality.

When customers use a Shopify-powered store, Shopify may process information on behalf of the merchant as part of providing its services.

Service Providers

We may share information with service providers where reasonably necessary to operate the store.

These may include providers involved in:

• Ecommerce hosting;
• Payment processing;
• Order fulfilment;
• Shipping and delivery;
• Fraud prevention;
• Website security;
• Analytics;
• Customer support;
• Email communication;
• IT services; and
• Professional services.

Service providers should receive only information reasonably required for the relevant function.

Legal Disclosures

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to a valid legal process;
• Respond to lawful requests from authorities;
• Protect legal rights;
• Investigate fraud;
• Protect customers or other individuals; or
• Establish, exercise or defend legal claims.

Business Transfers

If all or part of the business associated with holidaysinbloom.shop is reorganised, transferred, acquired or sold, personal information may be transferred as part of the relevant transaction where permitted by law and subject to appropriate safeguards.

International Data Transfers

Ecommerce services may involve service providers operating in different countries.

As a result, personal information may in some circumstances be transferred outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, appropriate transfer mechanisms or other lawful safeguards will be used where applicable.

Cookies and Similar Technologies

holidaysinbloom.shop may use cookies and similar storage or access technologies.

These technologies may support functions including:

• Keeping the shopping cart operational;
• Remembering preferences;
• Maintaining website security;
• Authentication;
• Checkout functionality;
• Fraud prevention;
• Analytics;
• Website performance; and
• Advertising or marketing where applicable.

Where consent is legally required before a non-essential cookie or similar technology is used, appropriate consent mechanisms should be provided.

Users may also be able to manage certain cookie preferences through browser settings or available website privacy controls.

Marketing Communications

Where permitted by applicable law, customers may receive marketing communications from us.

Where consent is required, marketing will be sent on the basis of appropriate consent.

Marketing emails should provide an unsubscribe mechanism.

Customers can also contact:

info@holidaysinbloom.shop

to request that relevant direct marketing communications stop.

Opting out of marketing does not prevent us from sending necessary transactional communications relating to an existing order.

Data Retention

We retain personal information for periods reasonably necessary for the purposes for which it was collected, including:

• Completing transactions;
• Handling returns and refunds;
• Maintaining financial records;
• Resolving disputes;
• Preventing fraud;
• Enforcing agreements; and
• Meeting legal obligations.

Retention periods may differ according to the category of information and applicable legal requirements.

Information that is no longer required may be deleted, anonymised or otherwise handled in accordance with applicable requirements.

Security

We use reasonable organisational and technical measures intended to protect personal information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also take reasonable steps to protect their own credentials and devices.

Your Data-Protection Rights

Depending on the circumstances and applicable law, individuals may have rights including:

• The right to be informed;
• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restrict processing;
• The right to data portability;
• The right to object; and
• Rights relating to certain automated decision-making activities.

These rights are subject to conditions and exceptions under applicable law.

To exercise a relevant right, contact:

info@holidaysinbloom.shop

We may request reasonable information to verify identity before responding.

Automated Decision-Making

Certain ecommerce, payment or fraud-prevention systems may use automated processes to assess transactions or security risks.

Where automated decision-making falls within specific legal requirements, applicable safeguards and rights will be respected.

Children

Our store is not intended to knowingly collect personal information from children where doing so would be inconsistent with applicable law.

If a parent or guardian believes that a child has provided personal information improperly, they may contact:

info@holidaysinbloom.shop

Complaints

If you have a concern about how your personal information has been handled, please contact:

info@holidaysinbloom.shop

We will seek to investigate legitimate privacy complaints appropriately.

Where applicable, individuals may also have the right to complain to the UK Information Commissioner's Office.

Changes to This Privacy Policy

We may revise this Privacy Policy where appropriate to reflect changes in:

• Our practices;
• Technology;
• Store functionality;
• Service providers; or
• Applicable legal requirements.

The updated policy will be published on holidaysinbloom.shop with a revised effective or update date.

Contact

For privacy questions or data-protection requests:

Email: info@holidaysinbloom.shop