1. Who we are

We are Immortal Bloom CIC registered in England and Wales number 13608982. You can contact us at info@immortalbloomart.com if you have any questions about this policy.

2. The Data We Collect

We may collect and process:

• Identity Data – name, title, date of birth.

• Contact Data – email address, phone number, billing/delivery address.

• Account Data – username, preferences, communication history.

• Transaction Data – order details, payment references (we do not store full card details).

• Technical Data – IP address, device identifiers, browser type, time zone, cookie IDs.

• Usage Data – pages viewed, links clicked, session duration.

• Marketing & Communications Data – your preferences in receiving marketing from us.

3. How We Collect Data

We collect data when you:

• Fill in forms, create an account, place an order, contact support or interact with us.

• Use our website, which collects data automatically using cookies and similar technologies.

• Receive a referral or we receive data from service providers that help us operate our business.

4. Why We Use Data (Purposes) And Lawful Bases

We use personal data to:

• Provide our products/services, process orders and payments, deliver and manage your account (Lawful basis: Contract).

• Respond to enquiries and provide support (Contract/Legitimate Interests).

• Send you marketing communications where permitted, with opt-out at any time (Consent/Legitimate Interests and PECR rules).

• Improve our website, products and services, and perform analytics (Legitimate Interests/Consent for non-essential cookies).

• Detect and prevent fraud and comply with legal obligations (Legal Obligation/Legitimate Interests).

Where we rely on legitimate interests, they include running and improving our business, delivering quality customer service, and promoting our products/services in a proportionate way. You can object to processing based on legitimate interests at any time.

5. Sharing Your Data

We may share personal data with:

• Service providers acting on our behalf (e.g. hosting, payment processing, delivery, IT support, CRM, email).

• Professional advisers (lawyers, accountants), regulators, or law enforcement where legally required.

We require all service providers to safeguard personal data and only process it according to our instructions.

6. International Transfers

Some providers are located outside the UK. Where we transfer data internationally, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or rely on an adequacy decision.

7. Data Security

We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, regular monitoring, staff training and vendor due diligence.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described above, including to satisfy legal, accounting or reporting requirements. We then securely delete or anonymise it.

9. Your Rights

You have rights to access, rectify, erase, restrict, object to processing, and data portability, and the right to withdraw consent where processing is based on consent. To exercise these rights, contact us at .co.uk]. You also have the right to complain to the Information Commissioner’s Office (ICO).

10 Direct Marketing

We may send you marketing messages if you have opted in, or where permitted by law (e.g. soft opt-in). You can opt out at any time using the unsubscribe link in our emails or by contacting us.

11. Third-Party Links

Our website may include links to third-party sites or services. We are not responsible for their privacy practices.

12. Changes To This Policy

We may update this policy from time to time. The latest version will always be available on our website with the date of the most recent update.

Contact

Questions? Contact us at info@immortalbloomart.com