Privacy Policy

Privacy Policy

Effective Date: September 2025

At Thula & Bloom, your privacy matters. This policy explains how we collect, use, and protect your personal data in line with UK GDPR and the Data Protection Act 2018.

Who We Are

Thula & Bloom is a UK-based small business offering handmade, plant-based skincare and self-care products. Our website is hosted by Squarespace and we process your data securely and lawfully.

What Personal Data We Collect

We collect personal information you provide directly, including when you:

  • Place an order

  • Sign up to our mailing list

  • Create an account

  • Contact us via email or our contact form

This may include:

  • Full name

  • Email address

  • Postal address

  • Phone number

  • Payment information (processed securely via third parties)

  • Order history

We also collect limited data via cookies, such as IP address and browser type, for analytics and site functionality.

How We Use Your Data

We use your information to:

  • Fulfil and deliver your orders

  • Communicate with you about your order or enquiry

  • Send marketing emails (only if you opt in)

  • Improve our website and services

  • Comply with tax and legal obligations

Legal Basis for Processing

We process your data on the basis of:

  • Consent (e.g. marketing emails)

  • Contract (e.g. fulfilling your order)

  • Legitimate interest (e.g. improving our services)

  • Legal obligation (e.g. HMRC compliance)

Third-Party Services

We use trusted partners to help run our store:

  • Squarespace (website hosting & analytics)

  • Stripe / PayPal (secure payment processing)

  • Google Workspace (email communication)

  • Meta (Instagram/Facebook) (social media tools)

Each provider has its own privacy policy and complies with UK/EU data laws.

Marketing Communications

We’ll only send you marketing emails if you’ve opted in. You can unsubscribe at any time by clicking the link in the email or contacting us at hello@thulaandbloom.co.uk.

Cookies

We use cookies to:

  • Enable site features

  • Monitor performance

  • Improve your experience

You can manage your cookie settings through your browser.

How Long We Keep Your Data

We keep your data only as long as needed — for example:

  • Order records: 6 years (for tax/legal reasons)

  • Email marketing: until you unsubscribe

Your Rights

Under UK GDPR, you have the right to:

  • Access your data

  • Request corrections

  • Ask for deletion (in some cases)

  • Object to or restrict processing

  • Request data portability

To make a request, email us at: hello@thulaandbloom.co.uk

We Keep Your Data Safe

We use secure systems and trusted providers. Payment data is encrypted and we do not store your card details.olicy Updates

We may update this policy from time to time. The latest version will always appear on this page.