Privacy notice

Who we are

We are the data controller for personal data we hold about customers, enquirers and Bloom Partners. Questions: contact us.

What we collect

• Account and order details (name, email, phone, address, event date, payment records).
• Bloom Partner account details, including bank details for paying referral rewards.
• Referral data: a partner's code or name, and a prospective customer's name and email when they leave it after a QR/link, at checkout, or when a partner introduces them in their dashboard.
• Cookie and analytics data, as described in our cookie notice, if you accept optional cookies.

Why we use it

• Orders and accounts: to fulfil your order, take payment, and run your account (contract / legitimate interests).
• Marketing: only if you opt in (consent). You can opt out at any time.
• Bloom Partners: to run the referral programme, attribute orders, and pay partners (legitimate interests). Partner bank details are used only to pay rewards.
• Partner-introduced customers: a Bloom Partner may share your name and email after warranting they have permission. We email you to explain this. We do not add you to marketing unless you opt in yourself. You can object using the link in that email.

How long we keep it

Referral links (email to a partner) last six months unless you object sooner or place an order. Order and payout records are kept for as long as we need them for fulfilment, accounting and tax. Account data is kept while the account is open and for a reasonable period afterwards.

Cookies

See our cookie notice. Referral cookies are optional; if you choose essential-only we can still attribute a referral via your email, account or checkout field.

Your rights

Under UK GDPR you can ask for access, correction, erasure, restriction or to object to processing based on legitimate interests. You can also complain to the ICO (ico.org.uk). Objecting to a referral will not cancel an order you have already placed.