Privacy Policy

Last updated: 25 October 2026

Who we are

We are an individual trader (sole trader) trading as In Bloom & Co ("we", "us", "our").

We are not a limited company. There is no company number or registered office to display.

If you have questions about this policy or your personal data, email alex@inbloomandco.com.

What this policy covers

This policy explains how we collect and use personal data when you:

  • browse or buy from our Squarespace shop;

  • book a workshop or experience;

  • contact us; or

  • join our email list (Squarespace Email).

Personal data we collect

Depending on how you use the site, we may process:

  • Identity and contact data - name, email address, phone number, delivery and billing address.

  • Order and booking data - products ordered, workshop tickets, payment status (card details are handled by our payment providers; we do not store full card numbers).

  • Marketing preferences - whether you opted in to emails.

  • Technical and cookie data - IP address, device/browser type, pages viewed, and cookie identifiers (see Cookies below).

  • Correspondence - messages you send us.

We do not intentionally collect special category data. Please do not send us health or similar sensitive details unless we ask and explain why.

Why we use your data (purposes and lawful bases)

  • Take and fulfil orders / workshop bookings - Lawful basis (UK GDPR): Contract

  • Customer service and order queries - Contract / legitimate interests

  • Legal and tax record-keeping - Legal obligation

  • Improve the site and understand traffic (analytics cookies, if enabled) - Consent (where required under PECR)

  • Email marketing about similar products or workshops - Consent, or PECR "soft opt-in" where it applies, with an easy opt-out every time

We will not make marketing emails a condition of buying from us. Opt-in boxes stay unticked.

Who we share data with

We use trusted service providers who process data for us (processors), including:

  • Squarespace - website hosting, shop (Squarespace Commerce), and Squarespace Email for newsletters and campaigns;

  • Payment processors enabled on our Squarespace checkout (as shown at payment);

  • Delivery / courier partners - name and address only, to send your order;

  • Professional advisers (accountant, insurer) where needed;

  • Authorities where the law requires it.

We do not sell your personal data.

Some providers are based outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK GDPR (for example, the UK International Data Transfer Agreement or adequacy regulations), as offered by those providers.

How long we keep data

  • Orders and invoices: typically 6 years (tax and accounting).

  • Workshop bookings: for the event plus a reasonable period for queries and insurance (usually up to 6 years if linked to accounts).

  • Marketing list: until you unsubscribe or we close the list.

  • Enquiries with no order: usually up to 12 months, then deleted or anonymised.

Your rights

Under UK GDPR you can ask us to:

  • access your data;

  • correct inaccurate data;

  • erase data (in some cases);

  • restrict or object to certain processing;

  • receive data in a portable format (in some cases);

  • withdraw consent at any time (where we rely on consent), without affecting earlier lawful processing.

Email alex@inbloomandco.com. You can also complain to the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/

Children

Our shop and workshops are aimed at adults. You must be 18 or over to purchase from us or book a ticket. We do not knowingly collect data from children under 18.

Cookies

Our site is built on Squarespace. Squarespace and any tools we enable may set cookies or similar technologies.

Essential cookies are needed for the site and checkout to work (for example, basket and security). These do not require consent.

Non-essential cookies (for example analytics, marketing, or social embeds) are only used if you consent via our cookie banner. You can Accept, Reject, or Manage preferences. You can change your mind later using the cookie settings link in the footer (once enabled).

We do not use Shopify. Any older cookie table that referred to Shopify was incorrect and has been removed.

For more on cookies and PECR, see the ICO:
https://ico.org.uk/for-organisations/advice-for-small-organisations/privacy-notices-and-cookies/cookies-and-privacy-notices-in-detail

Email marketing

If you join our list or tick the marketing box at checkout, we send emails via Squarespace Email. Every email includes an unsubscribe link. You can also email alex@inbloomandco.com to opt out.

Changes

We may update this policy from time to time. The "Last updated" date will change when we do. Important changes will be highlighted on the site where practical.

Contact

In Bloom & Co (sole trader)
Email: alex@inbloomandco.com
Web: https://inbloomandco.com/contactus