ABLOOM GARDEN

Privacy Policy

Last Updated: November 11, 2026

1. Introduction

ABLOOM LIMITED (“we”, “us”, “our”) is committed to protecting the personal data and privacy of every user who visits our e-commerce website www.abloomgarden.com (the “Site”), uses our services, and makes purchases from our platform. This Privacy Policy is designed to clearly explain how we collect, use, store, disclose, and protect your personal information when you interact with our Site, in full compliance with applicable data protection regulations, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing, browsing, or using our Site, submitting your personal information to us, or completing a purchase transaction on our platform, you acknowledge that you have read, understood, and agreed to all the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our Site and submitting any personal data to us.

Our full contact details are as follows:

  • Company Name: ABLOOM LIMITED
  • Official Website: www.abloomgarden.com
  • Contact Email: mossk@abloomgarden.com
  • Registered Address: 98 Middlecroft Drive, Strensall, York, North Yorkshire, YO32 5YQ, United Kingdom
  • Contact Telephone: +44 7710 669945

If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, you can reach out to us at any time using the contact information provided above, and we will respond to your enquiry within 14 business days.

2. Types of Personal Information We Collect

We only collect personal information that is necessary for the normal operation of our e-commerce services, to provide you with a smooth, secure, and personalized shopping experience. The categories of personal information we may collect include:

  • ‌Account and Registration Information‌: When you create an account on our Site, we collect your full name, email address, contact phone number, and a password of your choosing. This information helps us verify your identity, manage your account, and provide dedicated user support.
  • ‌Transaction and Order Information‌: When you place an order on our Site, we collect your billing address, delivery address, payment details (including payment card number expiration date, billing name, and payment transaction records), order history, purchase preferences, and order related notes. This information is critical for processing your payments, arranging order fulfillment, and delivering your purchased products to the correct location.
  • ‌Technical and Usage Data‌: When you browse our Site, we automatically collect certain technical information through cookies and similar tracking technologies, including your IP address, browser type and version, device type, operating system, time zone setting, language preference, pages you viewed on our Site, time spent on each page, click paths, access dates and times, and other data related to how you interact with our Site. This data helps us optimize our website performance, troubleshoot technical issues, and understand user behavior to improve our service quality.
  • ‌Communication and Support Data‌: When you contact us via email, phone, or our online customer service system to ask product questions, request after-sales support, or submit feedback, we collect the content of your messages, our replies, and your contact information associated with the communication. This allows us to resolve your issues efficiently and maintain records of our service interactions.
  • ‌Marketing Preference Data‌: If you opt in to receive our marketing newsletters, promotional offers, and product updates, we store your email subscription status, your preferences for product categories, and records of whether you open or click the links in our marketing emails, to ensure we only send you content that is relevant and interesting to you.

We will never collect sensitive personal information (such as your racial origin, religious beliefs, health status, biometric data, etc.) unless you voluntarily provide it to us, and we are explicitly permitted or required to do so by applicable laws and regulations.

3. Purposes for Which We Use Your Personal Information

We only use your personal information on the lawful basis of performance of contract, compliance with legal obligations, legitimate interests, or your explicit consent, for the following specified purposes:

  • ‌To Provide and Fulfill Our E-commerce Services‌: We use your order, delivery, and payment information to process your purchase transactions, verify your payment status, arrange product packaging and shipping, track delivery progress, and handle returns, exchanges, or refunds in accordance with our store policies. This is a necessary step to perform the sales contract we enter into with you when you place an order.
  • ‌To Manage Your User Account‌: The account information you provide helps us maintain your personal account on the Site, allow you to view your order history, save your favorite items, store your preferred delivery addresses, and manage your account settings conveniently, without requiring you to re-enter identical information every time you visit our Site.
  • ‌To Improve and Optimize Our Website and Services‌: The technical usage data we collect allows us to analyze how users navigate our Site, identify pages that load slowly or encounter functional errors, optimize the layout of product display, and adjust website functions to make your shopping experience more intuitive, efficient, and user-friendly.
  • ‌To Send Service Related Notifications‌: We will send you essential non-marketing notifications via email or SMS, including order confirmation emails, shipping status updates, delivery delay alerts, payment processing notifications, after-sales service reminders, and important announcements about changes to our Site terms or this Privacy Policy. These notifications are critical for ensuring the smooth execution of your orders, and you cannot opt out of receiving them as long as you maintain an active account or have an ongoing order with us.
  • ‌For Verified Marketing Communications‌: Only if you give us explicit, opt-in consent, we will send you regular marketing newsletters, exclusive discount information, new product launch announcements, and seasonal promotion details related to the garden and home goods sold on our Site. You can withdraw your marketing consent at any time, either by clicking the “unsubscribe” link at the bottom of every marketing email we send, or by sending a request to our contact email mossk@abloomgarden.com. After you opt out, we will immediately stop sending you marketing messages, while we may still retain your contact information to process any unfinished transactions you have with us.
  • ‌To Ensure Security and Prevent Fraud‌: We use your personal information to verify user identity, monitor for unauthorized access to user accounts, detect and prevent fraudulent payment transactions, misuse of our Site services, and other illegal activities that may cause harm to our users, our business, or third parties. This is our legitimate interest to maintain a secure trading environment for all users of the Site.
  • ‌To Comply with Legal Obligations‌: We may process your personal data when we are legally required to do so by a competent court, government authority, or regulatory body, for example, to meet tax declaration requirements, fulfill product safety recall obligations, or respond to a lawful official investigation.

4. Sharing and Disclosure of Your Personal Information

We will never sell, rent, or trade your personal information to unrelated third parties for their marketing purposes without your explicit prior consent. We may only share your data with the following categories of third parties when it is necessary to deliver the services you requested, or required by law:

  • ‌Authorized Service Providers‌: We work with carefully selected third party service providers who perform essential functions on our behalf, including payment processing companies, courier and logistics partners, cloud storage service providers, email delivery platforms, website technical maintenance vendors, and fraud detection service agencies. All these third parties are bound by strict data protection agreements with us, which require them to only process your personal information in accordance with our instructions, comply with all applicable data protection laws, and implement sufficient security measures to protect your data. They are not permitted to use your personal information for their own independent commercial purposes.
  • ‌Business Transfer Scenarios‌: In the event that we undergo a merger, acquisition, asset sale, or full or partial transfer of our business assets, your personal information may be transferred to the relevant successor organization. We will notify you via prominent notice on our Site or by email before your personal data is transferred to the new entity and becomes subject to a different privacy policy.
  • ‌Legal and Regulatory Authorities‌: We may disclose your personal information to government authorities, law enforcement agencies, or judicial institutions if we are required to do so by a legally binding court order, subpoena, statutory requirement, or official request. We may also disclose your information to enforce our Site terms of service, protect our legal rights, property, or personal safety, as well as the rights, property, and personal safety of our customers and the public.
  • ‌With Your Explicit Consent‌: In any other circumstances where we need to share your personal information for purposes not outlined in this Privacy Policy, we will first obtain your clear, voluntary, and explicit consent before proceeding with the data sharing.

5. Data Storage and Security Protection

All your personal information we collect is stored on encrypted, password protected secure servers located within the United Kingdom and the European Economic Area (EEA), unless otherwise required for order delivery processing. We have implemented a series of industry standard technical, administrative, and physical security measures to protect your personal data against unauthorized access, accidental loss, alteration, destruction, or unlawful disclosure:

  • All sensitive payment information submitted on our Site is encrypted using Transport Layer Security (TLS) 1.3 technology during data transmission, and we never store full payment card CVV codes on our systems after a transaction is completed.
  • Our internal systems are protected by multi-factor authentication, role based access control, and regular security patch updates. Only a very limited number of authorized employees who need to access your data to perform their job duties (such as order processing staff and customer support teams) are granted access to your personal information, and they are required to strictly comply with our internal data protection confidentiality rules.
  • We conduct regular security audits, vulnerability testing, and employee data protection training to ensure our data processing practices meet the latest compliance requirements and security standards.

However, please note that no data transmission method over the internet or electronic storage method can be guaranteed to be 100% absolutely secure. While we make every possible effort to protect your personal information, we cannot guarantee the absolute security of the data you transmit to our Site, and any data transmission is at your own risk.

6. Your Rights as a Data Subject

Under the UK General Data Protection Regulation and applicable UK data protection laws, you have the following full rights related to your personal information:

  1. ‌Right of Access‌: You have the right to request a copy of all the personal information we hold about you, including details about how we process your data, who we have shared it with, and how long we intend to retain it.
  2. ‌Right to Rectification‌: If you find that any of your personal information stored on our systems is inaccurate, incomplete, or outdated, you have the right to request us to correct, update, or supplement that data free of charge.
  3. ‌Right to Erasure (Right to be Forgotten)‌: You can request us to delete all your personal information we hold, under circumstances where the data is no longer necessary for the original purposes we collected it for, you withdraw your consent for the processing, or our processing of the data violates applicable laws. We will comply with your request unless we are required by law to retain certain data for legal, tax, or audit purposes.
  4. ‌Right to Restriction of Processing‌: You have the right to request us to temporarily suspend the processing of your personal information, for example, when you dispute the accuracy of your data, or when you have objected to our legitimate interest based processing and we are verifying the validity of our legal grounds.
  5. ‌Right to Data Portability‌: You can request us to provide your personal information that you have submitted to us, in a structured, commonly used, machine readable format, or request us to transmit this data directly to another data controller, where technically feasible.
  6. ‌Right to Object‌: You have the right to object to our processing of your personal information that is based on our legitimate interests, at any time. We will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your rights, freedoms, and interests, or the processing is necessary for the establishment, exercise, or defense of legal claims. You also have the absolute right to object to direct marketing activities at any time, free of charge.
  7. ‌Right to Withdraw Consent‌: For any processing activity of your personal information that is based solely on your consent, you can withdraw your consent at any time, without affecting the lawfulness of processing we conducted before your consent was withdrawn.
  8. ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal information has violated applicable data protection regulations, you have the right to submit a complaint to the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection matters in the United Kingdom.

To exercise any of the above rights, you can submit your request by sending an email to our contact address mossk@abloomgarden.com, or writing to our registered business address at 98 Middlecroft Drive, Strensall, York, North Yorkshire, YO32 5YQ, United Kingdom. We will respond to your request within one month of receiving your valid identity verification documents. We will not charge you any fee for processing your legitimate data subject request, unless your request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee.

7. Cookies and Similar Tracking Technologies

Our Site uses cookies, small text files that are stored on your device when you visit our website, to improve your browsing experience, analyze website traffic, and personalize content for you. The types of cookies we use include:

  • ‌Strictly Necessary Cookies‌: These cookies are essential for our Site to function properly. They allow you to navigate between pages, use core features of the website, access secure areas, and complete the checkout process. Without these cookies, the basic services of our Site cannot be provided.
  • ‌Performance Cookies‌: These cookies collect anonymous information about how visitors use our Site, for example, which pages are most frequently visited, and if users receive error messages from web pages. The aggregated data collected by these cookies is only used to improve the overall performance and functionality of our website.
  • ‌Functionality Cookies‌: These cookies remember the choices you make on our Site, such as your preferred language, region, and saved login status, so that we can customize your visit experience and provide more suitable personal features.
  • ‌Marketing Cookies‌: These cookies are used to track visitors’ browsing activities across different websites, to display targeted advertisements and product recommendations that are relevant to your interests. We will only place marketing cookies on your device after we obtain your explicit opt-in consent.

You can manage or disable cookies at any time through the settings configuration of your web browser. Please note that if you choose to disable strictly necessary cookies, some functions of our Site may not work correctly, and you may not be able to complete your online shopping process smoothly.

8. Retention Period of Personal Data

We will not retain your personal information for longer than is necessary to fulfill the specific purposes for which we originally collected it. Normally, we will retain your basic account and order information for 7 years after your last active transaction or the termination of your account, to comply with UK tax laws, commercial accounting regulations, and product warranty obligations. After the retention period expires, we will securely delete or anonymize your personal data in accordance with our internal data disposal policies. For marketing related data, we will retain it until you choose to unsubscribe from our marketing communications or withdraw your marketing consent.

9. Protection of Minors

Our e-commerce website and services are intended for use by adults aged 18 years and over. We do not intentionally collect personal information from children under the age of 18. If we become aware that we have collected personal data from a minor without the verified consent of a parent or legal guardian, we will immediately take measures to delete that information completely from our servers. If you believe we may have collected personal information from a child under 18, please contact us immediately via our provided contact details.

10. Third Party Links

Our Site may contain hyperlinks to external third party websites that are not operated or controlled by ABLOOM LIMITED, for example, links to social media platforms, partner brand websites, or product review websites. We do not have any control over the privacy policies, data processing rules, and content of these third party websites. We strongly recommend that you carefully review the privacy policy of every website you visit after leaving our Site, as we are not responsible for the data processing practices of any external websites.

11. Updates to This Privacy Policy

We may occasionally update and modify this Privacy Policy to reflect changes in our business operation practices, new service features, updated legal regulatory requirements, or other internal management needs. When we make material changes to this policy, we will post the updated version on this page of our Site, revise the “Last Updated” date at the top of the document to November 11, 2026 or the new effective date, and send a prominent notification to all registered users via email to inform you of the changes before the new policy takes effect. Your continued use of our Site and services after the effective date of the updated Privacy Policy will be deemed as your acceptance of the revised terms.

12. Contact Information

If you have any questions, comments, or concerns regarding this Privacy Policy, our data processing practices, or wish to exercise your data subject rights, please do not hesitate to contact us using the details below:

  • Company Name: ABLOOM LIMITED
  • Contact Person: Moss K
  • Email Address: mossk@abloomgarden.com
  • Postal Address: 98 Middlecroft Drive, Strensall, York, North Yorkshire, YO32 5YQ, United Kingdom
  • Telephone Number: +44 7710 669945

We are dedicated to ensuring that your privacy rights are fully protected when you shop on our platform, and we will make every effort to resolve any privacy related issues you may encounter in a timely and satisfactory manner.