Privacy Policy

Last Updated: 16/05/2025

At Bloom and Bubbles (a trading name of Pandit Enterprises Limited), we are fully committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy outlines how we collect, use, store, and share your information when you visit our website, place an order, or otherwise interact with our services.

By using our website or services, you agree to the practices described in this policy.

Who We Are

This website is owned and operated by Pandit Enterprises Limited, registered in the United Kingdom, trading as Bloom and Bubbles. We are the “data controller” of the personal information you provide to us and are responsible for complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

Business Name: Pandit Enterprises Limited
Trading As: Bloom and Bubbles
Email: contact@bloomandbubbles.com
Website: www.bloomandbubbles.com

What Data We Collect

We collect personal data that you voluntarily provide, as well as some data collected automatically through your interaction with our website.

Personal Data You Provide:

Full name
Email address
Phone number
Billing and shipping address
Payment information (processed securely via third-party providers)
Order details and communication history

Data Collected Automatically:

IP address
Browser type and version
Device information and operating system
Website usage and interaction data (via cookies and analytics tools)

We do not knowingly collect data from children under the age of 13.

How We Use Your Data

We use your personal data for the following purposes:

Order Fulfilment: To process, confirm, and deliver your purchases
Customer Service: To respond to your queries, requests, or complaints
Marketing: To send promotional emails (only if you opt-in)
Improvement: To analyse website traffic and improve our products and user experience
Legal Compliance: To meet tax, accounting, and regulatory obligations
Fraud Prevention: To detect and protect against unauthorised or illegal activities

We do not use your data for automated decision-making or profiling without your consent.

Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases for processing your personal data:

Contractual necessity: To perform our contract with you when you purchase a product
Consent: For marketing communications or optional cookie tracking (you can withdraw consent at any time)
Legitimate interests: To operate our business effectively and securely
Legal obligation: To comply with tax and financial regulations

How We Share Your Information

We only share your information with third parties when absolutely necessary to fulfil our services:

Payment processors – for secure card payments
Courier partners (e.g. Royal Mail, Evri) – for product delivery
Email service providers (e.g. Wix, Mailchimp) – for transactional and marketing emails
IT and Hosting Providers – for maintaining website infrastructure
Legal and Regulatory Authorities – if required by law

We will never sell, rent, or lease your personal data to third parties.

Data Security

We take your data security seriously. Your personal information is protected using:

SSL (Secure Socket Layer) encryption
Secure payment gateways
Firewalls and password-protected systems
Limited access controls internally

Although we take reasonable precautions, no method of electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials where applicable.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and accounting requirements.

Typical retention periods:

Order records: 6 years (for accounting and audit purposes)
Marketing data: Until you opt-out
Support enquiries: Up to 12 months after resolution

After these periods, your data is securely deleted or anonymised.

Cookies and Tracking Technologies

Our website uses cookies to enhance user experience, analyse traffic, and support functionality.

Types of cookies we use:

Essential cookies – necessary for core site functions
Analytics cookies – help us understand how visitors interact
Marketing cookies – only active if you opt-in

You can manage or disable cookies via your browser settings. For full details, see our [Cookie Policy].

Third-Party Links

Our website may include links to external websites or services. Once you leave our website, we are no longer responsible for how third-party websites collect or use your data. Please refer to their privacy policies individually.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or technology. When we do, we will revise the "Last Updated" date above and post the new version on this page. Continued use of our site constitutes your acceptance of any changes.

Contact Us

If you have any questions, concerns, or wish to make a request regarding your personal data, please contact us:

📧 Email: contact@bloomandbubbles.com