Privacy Policy | Blackheath Blooms

1. Who we are

Blackheath Blooms Limited is the data controller for personal data collected via this website. Company Number: 17119194. Contact: hello@blackheathblooms.com

2. What data we collect

When you place an order, subscribe to our newsletter, or contact us, we may collect the following:

• Name and delivery address
• Email address
• Phone number (if provided)
• Payment information processed securely via our payment provider. We do not store card details
• Order history
• Communications you send us
• Website usage data (via cookies, see below)

3. How we use your data

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations and delivery updates
• Respond to your enquiries
• Send marketing emails, where you have consented to receive them
• Improve our website and customer experience
• Comply with legal obligations

4. Legal basis for processing

We process your data on the following legal bases:

• Contract: to fulfil your order
• Legitimate interests: to improve our products and services
• Consent: for marketing communications (you may withdraw consent at any time)
• Legal obligation: where required by law

5. Marketing communications

If you subscribe to our newsletter or opt in to marketing at checkout, we will send you seasonal updates, styling tips, and product news. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at hello@blackheathblooms.com. We will never sell your data to third parties.

6. Sharing your data

We share your data only where necessary:

• With DPD to deliver your order
• With Shopify Payments to process transactions
• With Klarna, where you choose to pay using their service
• With Shopify email to send marketing emails, where you have consented
• With professional advisers, under confidentiality obligations
• With law enforcement or regulatory bodies, where required by law

Our website, payments and email are all provided through Shopify, which acts as a data processor on our behalf. All third parties are required to handle your data securely and in accordance with applicable data protection law.

7. Cookies

Our website uses cookies to improve your browsing experience, remember your preferences, and analyse site traffic. You can manage your cookie preferences via the cookie banner when you first visit the site. Strictly necessary cookies cannot be disabled as they are required for the website to function.

8. How long we keep your data

We retain your order data for seven years in accordance with HMRC requirements. Marketing preferences are retained until you unsubscribe. We will delete or anonymise your data when it is no longer needed for the purpose for which it was collected.

9. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at hello@blackheathblooms.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on Shopify, which maintains industry-standard security protocols.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page. We recommend checking it periodically.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@blackheathblooms.com.