Privacy policy
Last updated: 10 September 2026
Dorothy Bloom is a trading name of [LEGAL COMPANY NAME], registered at [BUSINESS ADDRESS]. Company registration number: [COMPANY NUMBER, IF APPLICABLE]. Customer support: [CUSTOMER SERVICE EMAIL]. Telephone: [CUSTOMER SERVICE PHONE].
Who is responsible for your information?
[LEGAL COMPANY NAME] is the controller for personal information used to run Dorothy Bloom. For privacy enquiries contact [PRIVACY CONTACT EMAIL]. Where legally required, our UK representative is [UK REPRESENTATIVE NAME AND CONTACT DETAILS].
Information we collect
When you browse, buy or contact us, we may collect your name, billing and delivery address, email, phone number, order details, support messages, device and browser information, IP address and information about how you use the website. Payment details are processed by our payment providers; we receive payment status and transaction information needed to manage your order.
Why we use it and our lawful bases
- Contract: to take payment, fulfil orders, arrange delivery, process refunds and answer questions about a purchase.
- Legal obligation: to maintain required accounting records and comply with applicable law.
- Legitimate interests: to secure the website, prevent fraud and handle ordinary customer enquiries, balanced against your rights.
- Consent: for optional marketing and non-essential cookies or similar technologies where consent is required.
Who receives information
We use Shopify to host our store. Information needed to operate the shop may be shared with payment providers, fulfilment and delivery partners, customer-support providers and professional advisers. Where enabled and with the required consent, analytics or advertising partners may receive browsing information. We disclose information to authorities where legally required.
Shopify and international transfers
Shopify and other service providers may process information outside the UK. Where UK data protection law applies, international transfers must use appropriate safeguards, such as an adequacy decision or approved contractual protections. Contact us for information about safeguards relevant to your data. Read Shopify’s consumer privacy policy for information about its processing, including cases where Shopify acts as a controller.
Cookies and marketing
Use the cookie banner to accept, decline or manage non-essential cookies. You may withdraw consent using available privacy controls or by contacting us. Rejecting optional cookies does not prevent essential shopping functions. We will not add you to marketing merely because you submit a support enquiry. Marketing emails include an unsubscribe option. See our cookie policy.
How long we keep information
We keep personal information only as long as necessary for the purpose for which it was collected, including applicable accounting, legal, fraud-prevention and dispute-handling requirements. Retention periods depend on the type of information and our legal obligations. We delete or anonymise information when it is no longer needed.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information, and object to certain processing, including direct marketing. You can withdraw consent without affecting processing that was lawful before withdrawal. We may need to verify your identity before responding. We normally respond within one month, subject to lawful extensions.
Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
Children and sensitive information
Our store and product are intended for adults. Do not send medical records or other sensitive information when asking for a refund; order details are sufficient.
Updates
We may update this notice to reflect changes to the store or the law. The date above identifies the current version.