1. Important Information and Who We Are
ViraBloom is the controller and responsible for your personal data (referred to as “we”, “us” or “our” in this privacy policy).
If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details below:
- Email address: contact@virabloom.com
- Country: United Kingdom
2. The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data: includes first name, last name, username or similar identifier.
- Contact Data: includes billing address, delivery address, email address and telephone numbers.
- Financial Data: We use third-party secure payment processors. We do not store your full credit/debit card details on our servers. Financial transactions are handled by, Stripe/Shopify Payments] who are PCI-DSS compliant.
- Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, and operating system and platform.
- Usage Data: includes information about how you use our website, products, and services.
- Marketing and Communications Data: includes your preferences in receiving marketing from us.
3. How is Your Personal Data Collected?
We use different methods to collect data from and about you including through:
- Direct interactions: You may give us your Identity and Contact Data by filling in forms or by corresponding with us by post, phone, email or otherwise.
- Automated technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns via cookies.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., delivering your Ashwagandha).
- Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Comply with Law: Where we need to comply with a legal or regulatory obligation.
5. Disclosures of Your Personal Data
We may share your personal data with the parties set out below for the purposes set out in section 4 above:
- Service Providers: IT and system administration services, and professional advisers (lawyers, bankers, auditors).
- Delivery Partners: Royal Mail, DPD, or other couriers to fulfill your order.
- Payment Gateways: To process your secure payment.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (usually 6 years for UK tax purposes).
8. Your Legal Rights
Under UK data protection laws, you have rights in relation to your personal data including the right to:
- Request access to your personal data.
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data (“the right to be forgotten”).
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request the transfer of your personal data to you or to a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data.
If you wish to exercise any of these rights, please contact@virabloom.com.
9. Third-Party Links
This website may include links to third-party websites (e.g., Instagram/Facebook). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.