Privacy policy

Last updated: 3 April 2026


Bloom & Wren operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Bloom & Wren is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Who We Are

Bloom & Wren is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018. Our contact details are set out at the end of this policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another individual. We may collect or process the following categories of personal information:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.

  • Financial information including payment card information, transaction details, form of payment, and other payment details. Please note we do not store full card details — these are handled securely by our payment processor.

  • Account information including your username, password, security questions, preferences and settings.

  • Transaction information including the items you view, add to your cart, purchase, return, exchange or cancel, and your past transactions.

  • Communications with us including the information you include in communications with us, for example, when sending a customer support enquiry.

  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.

  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal information. We rely on the following lawful bases:

  • Contract: processing is necessary to perform our contract with you (e.g. to process and fulfil your orders).

  • Legitimate Interests: processing is necessary for our legitimate business interests (e.g. fraud prevention, improving our Services), provided these are not overridden by your rights and interests.

  • Legal Obligation: processing is necessary to comply with a legal obligation (e.g. tax and accounting requirements).

  • Consent: where we rely on your consent (e.g. for marketing emails), you may withdraw your consent at any time.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.

  • Automatically through the Services including from your device when you use our products or services or visit our website, and through the use of cookies and similar technologies.

  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.

  • From our partners or other third parties.

How We Use Your Personal Information

We may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to process your payments, fulfil your orders, send account-related notifications, manage returns and exchanges, and improve your shopping experience.

  • Marketing and Advertising. We will only send you marketing communications where you have given us consent to do so, or where we have a legitimate interest. You may opt out of marketing at any time using the unsubscribe link in our emails, or by contacting us directly.

  • Security and Fraud Prevention. We use your personal information to authenticate your account, provide secure payment processing, and detect or take action regarding possible fraudulent or illegal activity.

  • Communicating with You. We use your personal information to provide customer support and maintain our business relationship with you.

  • Legal Compliance. We use your personal information to comply with applicable UK law or respond to valid legal process, including requests from law enforcement or government agencies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify and other vendors who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).

  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products.

  • With our affiliates or otherwise within our corporate group.

  • In connection with a business transaction such as a merger or acquisition, to comply with applicable legal obligations, to enforce applicable terms, or to protect or defend the Services and our rights.

Transfers Outside the UK

Where we transfer your personal information outside the UK, we ensure that appropriate safeguards are in place, such as the use of the UK's International Data Transfer Agreement (IDTA) or transfers to countries with UK adequacy regulations in place. Please contact us if you would like more information about these safeguards.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. To learn more about how Shopify uses your personal information, please visit the Shopify Consumer Privacy Policy. You may also visit the Shopify Privacy Portal to exercise rights related to data processed by Shopify.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect usage information and improve your experience on our website. In accordance with the UK Privacy and Electronic Communications Regulations (PECR), we will request your consent before placing non-essential cookies on your device. You may manage or withdraw your consent at any time through your browser settings or our cookie consent tool.

Third-Party Websites and Links

The Services may provide links to websites operated by third parties. We are not responsible for the privacy or security of such sites, and you should review their own privacy policies before providing any personal information.

Children's Data

The Services are not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are the parent or guardian of a child who has provided us with their personal information, please contact us and we will delete it promptly.

Security and Retention of Your Information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised or unlawful processing, accidental loss, destruction, or damage.

How long we retain your personal information depends on the purpose for which it was collected and our legal obligations. We will not retain your data for longer than is necessary.

Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of Access. You may request a copy of the personal information we hold about you (a Subject Access Request).

  • Right to Rectification. You may request that we correct inaccurate or incomplete personal information we hold about you.

  • Right to Erasure. You may request that we delete your personal information where there is no compelling reason for us to continue processing it ("the right to be forgotten").

  • Right to Restrict Processing. You may request that we restrict the processing of your personal information in certain circumstances.

  • Right to Data Portability. You may request a copy of your personal information in a structured, commonly used, machine-readable format.

  • Right to Object. You may object to our processing of your personal information where we rely on legitimate interests as our lawful basis. You have an absolute right to object to processing for direct marketing purposes.

  • Rights in Relation to Automated Decision Making. You have the right not to be subject to decisions based solely on automated processing, including profiling, where those decisions have a significant effect on you.


To exercise any of these rights, please contact us using the details at the end of this policy. We will respond to your request within one calendar month, as required by the UK GDPR.

You will not be charged a fee for exercising your rights. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

Complaints

If you have concerns about how we process your personal information that we are unable to resolve, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date. We will notify you of any material changes in accordance with applicable law.


Contact Information

Brand Name: Bloom & Wren

Address: Suite #1-219, 39 Ludgate Hill, London, EC4M 7JN, United Kingdom

Email: support@bloomwren.com

Phone: +44 20 3996 2123

Contact Form: Click here

Customer Service Hours: Monday to Friday: 9:00 AM – 5:00 PM

Response Time: Our customer service team will respond within 24 hours on business days.