Privacy policy
Privacy Policy
Last updated: 3 November 2026
1. About This Privacy Policy
Board & Bloom respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you:
-
Visit our website at boardandbloom.co.uk.
-
Browse or purchase furniture through our online store.
-
Contact us by email, telephone or contact form.
-
Visit or make a purchase at our Bristol showroom.
-
Communicate with us about an order, delivery, return or product enquiry.
We handle personal information in accordance with applicable UK data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your information?
The data controller is [INSERT FULL LEGAL NAME OF THE BUSINESS OR INDIVIDUAL OPERATING BOARD & BLOOM], trading as Board & Bloom.
Contact email: info@boardandbloom.co.uk
Business address: [INSERT VERIFIED BUSINESS OR DATA CONTROLLER POSTAL ADDRESS]
In this policy, “we”, “us” and “our” refer to the data controller identified above.
2. Personal Information We Collect
The information we collect depends on how you interact with Board & Bloom.
Contact and customer information
-
Name and contact details, such as email address and telephone number.
-
Billing and delivery addresses.
-
Information you provide when contacting us or visiting our showroom.
Order and transaction information
-
Products purchased, order numbers and order values.
-
Delivery details and order history.
-
Information relating to returns, refunds, exchanges and customer support.
-
Relevant communications about your purchases.
Payment information
Payments made through our online store are processed by Shopify and the relevant payment providers. We do not intend to collect or store your full payment card details. Payment providers may process payment information in accordance with their own privacy policies.
Website and device information
When you browse our website, certain information may be collected automatically, including:
-
IP address and device information.
-
Browser type and operating system.
-
Pages visited and interactions with our website.
-
Cookie identifiers and similar online technologies, subject to your cookie preferences.
Information you provide to us
We collect information contained in messages, enquiries, feedback, telephone conversations and other communications you choose to send us.
3. How We Use Your Personal Information
We use personal information only where we have a lawful reason to do so.
This may include:
Processing and managing orders
To accept and process purchases, arrange payment, organise delivery, manage returns and refunds, and provide order updates.
Responding to enquiries
To answer questions about our rustic wood furniture, product details, showroom, online orders and customer support.
Providing customer service
To deal with complaints, resolve delivery issues, respond to product concerns and maintain relevant customer service records.
Marketing communications
To send promotional emails about Board & Bloom where you have given the required consent or where another lawful basis is available under applicable marketing rules. You can unsubscribe at any time using the link in our emails or by contacting us.
Website operation and improvement
To maintain our online store, understand how visitors use the website and improve its functionality, where the relevant cookies or technologies have been permitted.
Security and fraud prevention
To protect our website, customers and business, and to identify or investigate suspicious transactions or activity.
Legal and accounting requirements
To maintain appropriate business, tax and accounting records and meet our legal obligations.
4. Our Lawful Bases for Using Your Information
Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we rely on the following:
Contract
We use information where it is necessary to take steps at your request before a purchase or to fulfil our agreement with you. This includes processing orders, arranging delivery and managing returns.
Legal obligation
We process certain information to meet legal requirements, including applicable tax, accounting and record-keeping obligations.
Legitimate interests
We may use information where it is necessary for our legitimate business interests and those interests do not override your rights. This may include responding to general enquiries, maintaining website security, preventing fraud and improving our services.
Consent
We rely on your consent where required, including for non-essential cookies and relevant electronic marketing. You can withdraw consent at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
5. How We Share Your Information
We do not sell your personal information.
We may share relevant information with trusted service providers where this is necessary to operate our business and provide our services. These may include:
-
Shopify: our online store platform and related e-commerce services.
-
Payment providers: to process and manage payments.
-
Delivery and courier companies: to arrange and complete deliveries. Depending on the order, these may include Royal Mail, DPD or FedEx.
-
Website, email and technical service providers: to support website operation, customer communications and business administration.
-
Professional advisers and authorities: where necessary for legal, regulatory, accounting or other legitimate purposes.
Service providers should only process personal information in accordance with their responsibilities and applicable data protection requirements.
6. International Data Transfers
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure that the transfer is permitted under applicable data protection law. Depending on the destination and circumstances, this may include relying on UK adequacy regulations or appropriate safeguards, such as approved contractual protections.
For further information about the safeguards relevant to a particular transfer, please contact us using the details in this policy.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support its operation and, where permitted, understand how visitors use the site.
Cookies may be used for the following purposes:
Essential cookies
These are needed for core website functions, such as keeping items in your basket, supporting checkout and maintaining website security.
Analytics cookies
Where enabled and where you have given consent, these help us understand how visitors use the website so that we can assess and improve its performance.
Marketing cookies
Where enabled and where you have given consent, these may be used to support advertising and measure the effectiveness of marketing activity.
You can manage your non-essential cookie preferences through our cookie consent banner or preference settings. You can also manage cookies through your browser, although blocking essential cookies may affect some website functions.
Non-essential cookies should only be used in accordance with the consent requirements that apply to them.
For more information, please see our Cookie Policy or use the cookie settings link on our website, if available.
8. How Long We Keep Your Information
We keep personal information only for as long as it is reasonably necessary for the purposes described in this policy, including to meet legal, accounting and reporting requirements.
Different types of information may be kept for different periods.
-
Order and transaction records: generally retained for the period required to meet applicable tax and accounting obligations. Certain records may need to be kept for six years.
-
Customer service and enquiry records: kept for as long as necessary to respond to the enquiry, manage any related issue and maintain appropriate business records.
-
Marketing information: retained until you unsubscribe or withdraw your consent, or until the information is no longer needed.
-
Website and cookie information: retained according to the relevant cookie or service-provider settings and the purposes for which it is collected.
When information is no longer required, we will take appropriate steps to delete it or securely dispose of it, unless we are legally required or otherwise permitted to retain it.
9. Your Data Protection Rights
Under UK data protection law, you may have the right to:
-
Access the personal information we hold about you.
-
Rectify information that is inaccurate or incomplete.
-
Request erasure of your personal information in certain circumstances.
-
Restrict processing of your information in certain circumstances.
-
Object to certain types of processing, including processing based on legitimate interests or direct marketing.
-
Request data portability where the right applies.
-
Withdraw consent where we rely on consent to process your information.
These rights are subject to certain conditions and exceptions under data protection law.
To exercise a right, contact us at info@boardandbloom.co.uk. We may need to verify your identity before responding.
We will respond within the time period required by applicable data protection law, which is generally one month.
10. Marketing Communications
If you have agreed to receive marketing emails from Board & Bloom, we may send you updates about our furniture collections, products, offers and news.
You can unsubscribe at any time by selecting the unsubscribe link in a marketing email or contacting us directly.
Unsubscribing from marketing communications will not stop essential messages relating to an order, payment, delivery, return or customer service enquiry.
11. Keeping Your Information Secure
We take appropriate technical and organisational steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Our online store uses Shopify and relevant payment providers to support website and payment processing. However, no method of transmitting or storing information online can be guaranteed to be completely secure.
12. Automated Decision-Making
[CONFIRM BEFORE PUBLISHING.]
If we do not make decisions about customers solely through automated processing that have legal or similarly significant effects, you can state:
“We do not currently make decisions about customers based solely on automated processing, including profiling, that produce legal or similarly significant effects.”
If this is not accurate, explain the relevant automated decision-making and how it may affect customers.
13. Children's Privacy
Our website and furniture products are intended for a general audience and are not specifically directed at children. We do not knowingly seek to collect personal information directly from children.
If you believe a child has provided us with personal information, please contact us so that we can consider the appropriate steps.
14. Complaints and the Information Commissioner's Office
If you have a question or concern about how we use your personal information, please contact us first at:
Email: info@boardandbloom.co.uk
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
You can find information about making a complaint at: https://ico.org.uk/make-a-complaint/
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers or legal obligations.
The latest version will be published on this page, together with the date it was last updated.
16. Contact Us
If you have any questions about this Privacy Policy or how Board & Bloom handles your personal information, please contact us:
Board & Bloom
Email: info@boardandbloom.co.uk
Phone: +44 7903 446293