Privacy Policy for Vole Bloom
At Vole Bloom, we are committed to protecting the privacy and personal data of our clients and website visitors. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our online platform and engage with our floral design and event decor services. We adhere to the General Data Protection Regulation (GDPR) and other applicable data protection laws in the UK.
1. Information We Collect
We collect various types of information to provide and improve our bespoke floral arrangements, event styling, and other related services.
1.1 Personal Data You Provide Directly to Us:
- Contact Information: Such as your name, email address, phone number, and postal address (for delivery or billing), when you inquire about our services, place an order, or subscribe to our newsletter.
- Event Details: Information related to your event, including dates, venues, specific floral preferences, themes, guest numbers, and any other details necessary for bespoke event styling and decor.
- Payment Information: When you make a purchase, we collect payment details such as credit/debit card numbers. Please note that we do not store full payment card details; these are processed securely by third-party payment processors.
- Communications: Records of your correspondence with us, including emails, phone calls, and messages on social media.
- Workshop Registrations: Information provided when signing up for our terrarium workshops or other events.
1.2 Information Collected Automatically:
When you visit our online platform, we may automatically collect certain information about your device and browsing activity.
- Usage Data: Includes your IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and dates/times of access.
- Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your browsing experience, analyze site usage, and personalize content.
2. How We Use Your Information
We use the collected information for various purposes, primarily to deliver our services, manage our business, and communicate with you effectively.
- To Provide and Manage Services: To process your orders for floral arrangements, event decor, subscriptions, and plant rentals; to deliver products and services; to manage your bookings for workshops.
- Customer Support: To respond to your inquiries, provide support, and address any issues related to our services.
- Communication: To send you order confirmations, service updates, invoices, and relevant information about your event or subscription.
- Marketing: With your consent, to send you newsletters, promotional offers, and information about new products or services that may be of interest to you. You can opt-out at any time.
- Improve Our Services: To understand how our online platform is used, analyze trends, and troubleshoot technical issues, helping us improve our website, services, and workshop content.
- Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.
3. Legal Basis for Processing Personal Data (GDPR)
We process your personal data based on the following legal grounds:
- Contractual Necessity: To fulfill our contractual obligations with you, such as processing orders and delivering services.
- Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications. You have the right to withdraw your consent at any time.
- Legitimate Interests: For our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our online platform, provided these interests do not override your fundamental rights and freedoms.
- Legal Obligation: To comply with applicable laws and regulations.
4. Sharing Your Information
We do not sell your personal data to third parties. We may share your information with trusted third parties in the following circumstances:
- Service Providers: We may share data with third-party service providers who assist us in operating our business (e.g., payment processors, delivery services, website hosting, analytics providers). These providers are bound by confidentiality agreements and are permitted to use your data only for providing their services to us.
- Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction.
- With Consent: We may share your information with other parties if we have your explicit consent to do so.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise retention period will vary depending on the type of data and the purpose of processing.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. This includes using secure servers, encryption, firewalls, and regular security audits. While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is entirely secure.
7. Your Data Protection Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure ('Right to be Forgotten'): You have the right to request the deletion of your personal data under certain circumstances.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to our processing of your personal data, particularly in cases of direct marketing or processing based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request in accordance with applicable data protection laws.
8. Third-Party Links
Our online platform may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party websites you visit.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page and update the "Effective Date" at the top of the policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Vole Bloom
7 The Serpentine, Regent's Park Estate, Floor 1, London, Greater London, NW1 4SD, UK