PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Tangle & Bloom collects, uses and protects the personal data of users of our website www.tangleandbloom.co.uk (the “Website”). We are committed to protecting your privacy and ensuring your personal data is handled securely and lawfully.

2. Who We Are

Tangle & Bloom

6 Mower Close

Wokingham

Berks

RG40 1RZ

Email: hello@tangleandbloom.co.uk

Website: www.tangleandbloom.co.uk

We are the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR).

3. What Personal Data We Collect

We may collect and process the following data:

Identity & Contact Data: Name, email address, phone number, billing/delivery address and account information, including registration details, login and password.
Payment Data: We do not store payment details, but third-party payment processors (e.g. PayPal) may collect them securely.
Transactional Data: Details of purchases and order history.
Correspondence: Correspondence for dealing with queries, complaints or claims.
Technical Data: IP address, browser type, computer and connection information and usage data via cookies. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information and methods used to browse away from the page.
Marketing Preferences: Your choices regarding email newsletters and promotions.
Email Opens/Clicks: Whether you have opened or clicked a marketing email that we have sent you.
Reviews: Information relating to compliments, complaints, feedback and reviews.
To comply with legal requirements: Name, contact information and financial transaction information.

4. Where We Get Personal Information From

We obtain personal information directly from you (when you conduct a transaction on our website) and collect data automatically when you access our Website using cookies, log files, web beacons, tags or pixels.

5. How We Use Your Data

We use your data for the following purposes:

To process and deliver your orders.
To communicate with you about your purchases.
To deal with queries, complaints or claims.
To operate customer accounts and guarantees.
To improve our website and services.
To send you marketing emails (only if you have opted in).
To send you surveys or feedback requests.
To publish a review and any photographs or video you have chosen to write and share on our Website, any review websites, platforms and/or social media. We are not responsible for the personally identifiable or other information you choose to submit as part of a review and we reserve the right to remove any review content generated by any customer at our sole discretion.
To comply with legal and regulatory requirements.

Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They

store your data on secure servers behind a firewall. All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

6. Legal Basis for Processing

Under UK GDPR, we process personal data based on the following lawful bases

Contract: To fulfil your orders and provide customer support. All of your data protection rights may apply except the right to object.
Legitimate Interests: To improve our services and protect our website.
Consent: We have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you have the right to withdraw your consent at any time.
Legal Obligation: Where processing to necessary to comply with a legal obligation such as tax, accounting, and fraud prevention purposes. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data
portability.
Public Task – We have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

7. How We Share Your Data

We do not sell your data. However, we may share it with the following third parties:

Payment processors (e.g.PayPal), for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
Product Suppliers, to fulfil your order.
Delivery partners, to fulfil your order.
Service providers, for website hosting, email and analytics.
Financial, fraud investigation or other relevant regulatory authorities.
Legal authorities, if required by law or legal process.

8. How Long We Keep Your Data

We retain personal data only as long as necessary:

Order/Account data: We’ll hold on to your information for as long as you have your account, or as long as is needed to be able to provide the services to you. If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also keep hold of some of your information as required, even after you have closed your account or it is no longer needed to provide the services to you.
Marketing data: Until you unsubscribe.
Website analytics: Typically, 12-24 months.

9. Your Rights Under UK GDPR

You have the following rights:

Access: Request a copy of your data and other information such as details about where we get your data from and who we share data with.
Rectification: Request correction or deletion of inaccurate or incomplete data.
Erasure: Request deletion of your data (subject to legal obligations).
Restriction: Request to limit how we process your data.
Objection: Object to the processing of your personal data e.g. opt out of marketing.
Data Portability: Request transfer of your data to another organisation, or to yourself.
Withdrawal of consent: Withdraw your consent at any time (where we use your consent as a legal basis). To make a data protection rights request, contact us at info@tangleandbloom.co.uk. If you make a request, we must respond to you without undue delay and in any event within one month.

10. Cookies & Tracking Technologies

We use cookies to enhance your experience. You can manage your cookie preferences via your browser settings. See our Cookie Policy for more details.

11. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page.

13. How to Complain/Contact

For any questions about this policy, contact us at info@tangleandbloom.co.uk. If you have any concerns about our use of your personal data, you can make a complaint to us info@tangleandbloom.co.uk or using the address at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO).

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint