Privacy Policy

---

 updated: February 2026

1. INTRODUCTION

The Reblooms (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to all personal data collected through www.thereblooms.com, including when you browse our website, place an order, or contact us directly.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data described in this policy.

For questions about this policy or how we handle your data, please contact us using the details in Section 10.

1. WHAT PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data:

2.1 Identity and Contact Data

- Full name

- Email address

- Phone number

2.2 Delivery Data

- Delivery address (including postcode)

- Delivery instructions or notes you provide at checkout or during direct communication

2.3 Payment Data

- Billing address

- Payment card details (processed securely by our third-party payment processor — we do not store full card details on our systems)

- Transaction records

2.4 Browsing and Technical Data

- IP address (anonymised where possible)

- Browser type and version

- Device type and operating system

- Pages visited, time spent on site, and referral source

- Cookie identifiers (see our Cookies Policy at thereblooms.com/cookies)

2.5 Communications Data

- Messages or enquiries you send us via email, contact forms, or direct communication (e.g. WhatsApp or phone)

- Delivery confirmation communications

1. HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data in the following ways:

- Directly from you, when you place an order, contact us, or sign up for communications

- Automatically, through cookies and analytics tools when you browse our website (see our Cookies Policy)

- From third parties, such as payment processors who pass back transaction confirmation data

1. WHY WE USE YOUR PERSONAL DATA (LEGAL BASIS)

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out how and why we use your data:

|PURPOSE                                    |DATA USED                        |LEGAL BASIS                                |

|-------------------------------------------|---------------------------------|-------------------------------------------|

|Process and fulfil your order              |Identity, delivery, payment data |Contract performance                       |

|Confirm and coordinate your delivery       |Identity, contact, delivery data |Contract performance                       |

|Process payments securely                  |Payment, identity data           |Contract performance                       |

|Respond to your enquiries                  |Identity, communications data    |Contract performance / Legitimate interests|

|Improve our website and user experience    |Browsing and technical data      |Legitimate interests                       |

|Send marketing communications (if opted in)|Identity, contact data           |Consent                                    |

|Show targeted ads on Meta / Google         |Browsing, technical data         |Consent                                    |

|Comply with legal obligations              |Identity, payment data           |Legal obligation                           |

|Prevent fraud and ensure security          |Identity, payment, technical data|Legitimate interests                       |

1. WHO WE SHARE YOUR DATA WITH

We only share your personal data with trusted third parties where necessary to operate our business and fulfil your orders. We do not sell your personal data.

5.1 Payment Processors

We use third-party payment providers (such as Stripe or PayPal) to process your payments securely. These providers act as data processors on our behalf and are bound by their own privacy policies and data protection obligations.

- Stripe Privacy Policy: https://stripe.com/gb/privacy

- PayPal Privacy Policy: https://www.paypal.com/uk/legalhub/privacy-full

5.2 Delivery and Courier Partners

Where we use courier or third-party delivery services to fulfil your order, we will share your name, delivery address, and contact number with them solely for the purpose of completing your delivery.

5.3 Social Media and Advertising Platforms

Where you have consented to marketing cookies, we may share limited browsing and interaction data with Meta (Facebook/Instagram) and Google for the purpose of delivering targeted advertising and measuring campaign performance. This is governed by your cookie preferences — you can withdraw consent at any time via our Cookie Settings.

- Meta Privacy Policy: https://www.facebook.com/privacy/policy

- Google Privacy Policy: https://policies.google.com/privacy

5.4 Legal Requirements

We may disclose your personal data to law enforcement or regulatory authorities if required to do so by law or in response to a valid legal request.

1. INTERNATIONAL DATA TRANSFERS

Some of our third-party providers (including Google and Meta) may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions, in accordance with UK GDPR requirements.

1. HOW LONG WE KEEP YOUR DATA

We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law.

- Order and transaction records: 6 years (for tax and accounting purposes, in line with HMRC requirements)

- Delivery communications: 12 months after delivery

- Marketing preferences and consent records: Until you withdraw consent, plus 1 year

- Browsing and analytics data: As set by cookie duration (see our Cookies Policy)

- General enquiry correspondence: 2 years

After these periods, your data will be securely deleted or anonymised.

1. YOUR RIGHTS UNDER UK GDPR

You have the following rights in relation to your personal data:

Right of Access — You can request a copy of the personal data we hold about you (known as a Subject Access Request).

Right to Rectification — You can ask us to correct any inaccurate or incomplete data we hold.

Right to Erasure — You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.

Right to Restrict Processing — You can ask us to pause processing your data in certain circumstances.

Right to Data Portability — You can request that we transfer your data to you or a third party in a structured, commonly used format.

Right to Object — You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making — You have the right not to be subject to decisions made solely by automated processing that significantly affect you.

Right to Withdraw Consent — Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@thereblooms.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk

Phone: 0303 123 1113

1. DATA SECURITY

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

- Secure HTTPS encryption on our website

- Use of PCI-DSS compliant payment processors

- Restricted access to personal data within our business

- Regular review of our data handling practices

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you have concerns about data security, please contact us.

1. CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

The Reblooms

Email: thereblooms.miami@gmail.com 

Website: www.thereblooms.com

We aim to respond to all enquiries within 5 working days.

1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date. We recommend checking this page periodically.