Privacy Policy

1. Who we are
EverBloom Designs is the data controller for the personal information you provide through our website. If you have any questions about this Privacy Policy or about how we process your personal data, you can contact us at e everbloomdeisigns2025@outlook.com.

2. Scope of this Policy
This Privacy Policy explains how we collect, use, disclose and store personal data about users of the Site (including visitors, customers, prospective customers). It applies when you access or interact with the Site, including through any services offered via the Site.

3. What personal data we collect
We may collect and process the following categories of personal data when you use the Site:

Data you provide directly: e.g., your name, email address, postal address, telephone number, payment information (if applicable) when you place an order or contact us.
Data collected automatically: e.g., IP address, browser type & version, device identifiers, pages visited, time & date of visit, referral URL, and cookies or similar technologies.
Data from third parties: e.g., if you login using a social login, or if you provide referrals, or from analytics/tracking tools.

4. Legal basis for processing your personal data
Under the UK GDPR, we rely on one or more of the following lawful bases to process your personal data:

Performance of a contract: e.g., to provide the goods or services you have requested.
Legal obligation: e.g., to comply with applicable law, tax or regulatory requirements.
Legitimate interests: e.g., for internal business operations such as analytics, fraud-prevention, improving our services — provided your rights and interests are not overridden.
Consent: where you have given your clear consent (e.g., for marketing communications, tracking cookies) and you have the right to withdraw that consent at any time.

5. How we use your personal data
We use your personal data for the following purposes:

To process and fulfil your orders, manage payments, send you order and delivery updates.
To respond to your enquiries and provide customer service.
To send you marketing communications (if you have opted in to receive them).
To improve our Site, detect and prevent fraud, maintain security, and analytics of site usage.
To comply with our legal and regulatory obligations.

6. Cookies & tracking technologies
We use cookies and similar tracking technologies to collect usage information to optimise the Site’s performance, remember your preferences, and provide marketing communications. You will be informed about cookies when you first visit the Site and given the option to accept or reject non-essential cookies.

7. How long we retain your personal data
We will retain your personal data for no longer than is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. Retention periods will vary depending on the type of data and the purpose for which it was collected.

8. Data storage and transfers
Your personal data may be stored and processed in the UK or in other jurisdictions where we (or our service providers) operate. Where such transfers occur, we ensure appropriate safeguards are in place (e.g., standard contractual clauses) to protect your data to the same standard as within the UK/EU. datocms-assets.com+1

9. Disclosure of your personal data
We may share your personal data with:

Our employees, agents, contractors and service-providers who need to access it to perform their functions.
Third-party service providers (e.g., payment processors, delivery/logistics companies, marketing platforms) subject to contractual obligations of confidentiality and data protection.
Law enforcement, regulatory or government authorities if required by law or to protect our legal rights.
We do not sell your personal data to third parties for their marketing purposes.

10. Your rights
Under the UK GDPR you have certain rights in relation to your personal data, including:

The right to access the personal data we hold about you (“right of access”).
The right to request correction of any inaccurate or incomplete data.
The right to request deletion (“right to be forgotten”) under certain circumstances.
The right to restrict or object to our processing of your personal data.
The right to data portability (in certain cases).
The right to withdraw consent at any time where we rely on that consent.
The right to lodge a complaint with a supervisory authority (in the UK: the Information Commissioner’s Office) if you believe your rights have been breached.

11. Withholding information
You are under no legal or contractual obligation to provide personal data to us. However, if you choose to withhold certain information, we may not be able to provide you with certain goods, services or functionalities offered on the Site.

12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time (for example to reflect changes in our practices or legal requirements). We will notify you of any changes by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this Privacy Policy regularly.

13. Contact us
If you have any questions about this Privacy Policy or our data-processing practices, please contact us at:
[EverBloom Designs - everbloomdesigns2025@outlook.com
You may also contact the Information Commissioner’s Office (ICO) at https://ico.org.uk if you wish to raise a concern about our data-handling practices.