Free Shipping on orders over £100

Free keyring with every order

Privacy Policy

Last Updated: 21 Jan 2026

At Bloom n Witches (“we”, “us”, or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website (bloomnwitches.co.uk), purchase our products, or book our workshops.

For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the data controller is Bloom n Witches.

1. Contact Details

If you have any questions about this policy or how we handle your data, please contact us:

  • Business Name: Bloom n Witches
  • Address: 3-5 High Street, Spennymoor, DL16 6AG, United Kingdom
  • Email: Bloomnwitches@outlook.com
  • Phone: 01388 335944

2. What Personal Data We Collect

We collect data to provide you with our products and services. This includes:

  • Identity Data: First name, last name, username (if you create an account).
  • Contact Data: Billing address, delivery address, email address, and telephone number.
  • Financial Data: Payment card details. Note: We do not store your full card details on our servers. Payments are processed securely by our third-party payment processors (e.g., Stripe, PayPal).
  • Transaction Data: Details about payments to and from you and details of products/workshops you have purchased from us.
  • Technical Data: IP address, browser type, time zone setting, and device information used to access our website.
  • Marketing Data: Your preferences in receiving marketing from us (if you have opted in).

3. How We Collect Your Data

We collect data in the following ways:

  • Direct interactions: You provide us with your data when you place an order, create an account, sign up for our newsletter, or contact us via email/social media.
  • Automated technologies: As you browse our site, we may automatically collect Technical Data about your equipment and browsing actions via cookies (see Section 8).
  • Third parties: We may receive data from third parties, such as payment providers (e.g., PayPal/Stripe) and booking platforms (e.g., Bookwhen) if you book an event with us.

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

Purpose/ActivityType of DataLawful Basis for Processing
To process and deliver your order (including managing payments and delivery).Identity, Contact, Financial, TransactionPerformance of a Contract
To manage our relationship with you (notifying you of changes to terms or privacy policy).Identity, Contact, MarketingLegal Obligation
To book you onto a workshop or event.Identity, ContactPerformance of a Contract
To administer and protect our business (troubleshooting, data analysis, testing, system maintenance).Identity, Contact, TechnicalLegitimate Interest (for running our business and network security)
To use data analytics to improve our website, products, and customer experiences.Technical, UsageLegitimate Interest (to define types of customers and keep our website updated)
To send you marketing communications (only if you have opted in).Identity, Contact, MarketingConsent

5. Sharing Your Personal Data

We do not sell your data. However, we may share your data with trusted third parties to help us run our business:

  • Service Providers: Companies that provide IT and system administration services (e.g., our website hosting provider).
  • Payment Processors: Stripe & PayPal to process your payments securely.
  • Delivery Companies: Royal Mail to deliver your orders.
  • Professional Advisers: Accountants, lawyers, bankers, and insurers who provide consultancy, banking, legal, and insurance services.
  • Legal Authorities: HM Revenue & Customs, regulators, and other authorities if required by law.

6. International Transfers

We operate in the UK. However, some of our third-party service providers (like email marketing platforms or payment processors) may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the specific safeguards approved by the UK government is implemented.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Order Information: By law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes (HMRC).

8. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site.

  • WooCommerce Cookies: We use cookies to keep track of cart contents while you browse.
  • Analytics: We use Google Analytics to measure how users interact with website content.

You can set your browser to refuse all or some browser cookies. If you disable or refuse cookies, please note that some parts of this website (such as the shopping cart) may become inaccessible or not function properly.

9. Your Legal Rights

Under the UK GDPR, you have rights regarding your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data (the “right to be forgotten”).
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Withdraw consent at any time where we are relying on consent to process your data (e.g., email newsletters).

To exercise any of these rights, please contact us at Bloomnwitches@outlook.com. We try to respond to all legitimate requests within one month.