privacy policy
bloobloom Limited (“we” or “us”) are committed to protecting and
respecting your privacy.
This policy (together with our terms of use and any other documents
linked to in our terms) sets out the basis on which any personal data we
collect from you, or that you provide to us, will be processed by us.
Please read the following carefully to understand our views and
practices regarding your personal data and how we will treat it.
This privacy policy (the “Policy”) applies to personal data that we
collect from you. We do not knowingly collect data relating to children.
It is important that you read this Policy so that you are fully aware
of how and why we are using your data.
1. IMPORTANT INFORMATION AND WHO WE ARE
SPECIAL CATEGORY DATA We use health data solely in connection with the processing and
delivery of your order, specifically in connection with the production
of our products. We process this data on the basis that you have given
explicit consent to such processing for this purpose. You have the right
to withdraw your consent to our use of this health data, as explained in
further detail below.
Where we need to collect personal data by law, or under the terms of a
contract we have with you and you fail to provide that data when
requested, we may not be able to perform the contract we have or are
trying to enter into with you (for example, to provide you with goods or
services). In this case, we may have to cancel a product or service you
have with us but we will notify you if this is the case at the time.
MARKETING AND OPTING OUT We may use your Identity, Contact, Technical, Usage and Profile Data to
form a view on what we think you may want or need, or what may be of
interest to you. This is how we decide which products, services and
offers may be relevant for you. For the avoidance of doubt health data
is only used for the purposes of processing product orders.
You will receive marketing communications from us if you have requested
information from us or purchased goods or services from us or if you
provided us with your details when you signed up to our mailing list or
newsletter, entered a competition or registered for a promotion.
We will get your express opt-in consent before we share your personal
data with any company outside bloobloom for marketing purposes. You can
ask us or third parties to stop sending you marketing messages at any
time by following the opt-out links on any marketing message sent to you
or by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not
apply to personal data provided to us as a result of a product/service
purchase, warranty registration or other transactions.
6. DISCLOSURE OF INFORMATION
We may have to share your personal data with third parties such as
those set out below for the purposes set out in the table above.
- The data controller who is responsible for your personal data is bloobloom Limited, 242 Acklam road, London W10 5JJ.
- If you have any questions or concerns relating to your personal data or this Policy, please contact us using the following contact details:
- Email: privacy@bloobloom.com
- Postal address: bloobloom, 242 Acklam road, London W10 5JJ
- Whilst you have the right to make a complaint at any time to the Information Commissioner’s Office (www.ico.org.uk), we would like to have a chance to deal with any concerns before you approach the ICO.
- Personal data means any information about an individual from which that person can be identified. We may collect, use, store and process the following types of personal data about you.
- Identity Data includes your name, username (or similar identifier), title, date of birth, audio visual recording and gender.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
- Special Category Data includes data concerning an individual’s health such as prescription details, lifestyle details, facial measurements and photographs, and any other health information related to your eyes and/or sight, as obtained and recorded by professional Optometrists whether or not employed by us.
- purchase for our products or services;
- create an account on our website;
- subscribe to our service, mailing list and any other publications;
- request marketing to be sent to you;
- enter a competition, promotion or survey; or
- give us some feedback.
- Analytics providers such as Google Analytics, AdRoll and Hotjar
- Advertising networks such as DoubleClick and Rubicon Project
- Chat software providers such as Zendesk
- Newsletter sign-up providers such as Mailchimp
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
PURPOSE/ACTIVITY
TYPE OF DATA
LAWFUL BASIS
To register you as a new customer
- Identity
- Contact
Performance of a contract with you
To process and deliver your order including:
- Manage payments, fees and charges
- Designing and producing our products and delivering them to you
- Refining and developing our internal eyewear product development design process
- Collect and recover money owed to us
- Identity
- Contact
- Financial
- Transaction
- Marketing and Communications
- Special Category Data
- Performance of a contract with you
- Necessary for our legitimate interests (to produce our products in accordance with your requirements and deliver them to you and to recover debts due to us)
- In respect of Special Category Data only, on the basis that you have given your explicit consent to our use of your data for this purpose
To manage our relationship with you which will include:
- Notifying you about changes to our terms or this Policy
- Asking you to leave a review or take a survey
- Identity
- Contact
- Profile
- Marketing and Communications
- Performance of a contract with you
- Necessary to comply with a legal obligation
- Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To enable you to participate in a prize draw, competition or
complete a survey
- Identity
- Contact
- Profile
- Usage
- Marketing and Communications
- Performance of a contract with you
- Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website
(including troubleshooting, data analysis, testing, system
maintenance, support, reporting and hosting of data)
- Identity
- Contact
- Technical
- Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
- Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you
and measure or understand the effectiveness of the advertising
we serve to you
- Identity
- Contact
- Profile
- Usage
- Marketing and Communications
- Technical
Necessary for our legitimate interests (to study how customers
use our products/services, to develop them, to grow our business
and to inform our marketing strategy)
To use data analytics to improve our website,
products/services, marketing, customer relationships and
experiences
- Technical
- Usage
Necessary for our legitimate interests (to define types of
customers for our products and services, to keep our website
updated and relevant, to develop our business and to inform our
marketing strategy)
To make suggestions and recommendations to you about goods or
services that may be of interest to you
- Identity
- Contact
- Technical
- Usage
- Profile
Necessary for our legitimate interests (to develop our
products/services and grow our business)
- Delivery service providers such as UPS
- Glazing companies
- Analytics service providers such as Google Analytics, AdRoll and Hotjar
- Chat software providers such as Zendesk
- Newsletter sign-up providers such as Mailchimp
- Advertising networks such as DoubleClick and Rubicon Project
- Providers of online services such as VWO and Facebook Pixel
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Policy.
- Request access to your personal data – enables you to receive a copy of the personal data we hold about you and check that we are lawfully processing it.
- Request correction of your personal data – you may correct any inaccuracies or incomplete data although we may need to verify the accuracy of the new data you provide
- Request erasure of your personal data - where there’s no good reason for us to continue to process it, where you have successfully exercised your right to object to processing (see below), where we may have processed your data unlawfully or where we are required to erase your personal data to comply with local law.
- Object to processing of your personal data – where we are relying on a legitimate interest and you object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You may also object where we are processing your data for marketing purposes.
- Request restriction of processing your personal data - This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request transfer of your personal data – you may request that we transfer data to you or a third party. This only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw consent to our use of your personal data – where we are relying on consent. This will not affect the lawfulness of processing that we carried out before you withdraw consent. If you withdraw consent, we may not be able to provide products or services to you.
- Google Analytics
- Zendesk
- Hotjar
- VWO
- AdRoll
- Mailchimp
- DoubleClick
- Facebook Pixel
- Session Cookie
- Rubicon Project