Effective Date: 24th July 2025
Last Updated: 24th July 2025
1. Who We Are
This website is operated by Roya Bloom Ltd, based in London, United Kingdom. Our website address is: https://royabloom.blog.
We take your privacy seriously and are committed to protecting your personal data in accordance with the UK GDPR, EU GDPR, and where applicable, the California Consumer Privacy Act (CCPA).
2. What Data We Collect and Why
We collect and process the following types of personal data:
a) Data You Provide Voluntarily
- Contact forms: Name, email address, and message content.
- Newsletter sign-ups: Email address.
- Comments (if enabled): Name, email address, and comment text.
Purpose: To respond to inquiries, deliver newsletters, and enable communication.
b) Automatically Collected Data
- Cookies (see Section 5)
- IP address, browser type, device information
- Pages visited and time spent on site
Purpose: For analytics, site security, and improving user experience.
c) Third-Party Services
We may use the following third-party services that collect and process data:
- Google Analytics (for traffic analysis)
- WordPress or similar (for newsletters)
Each provider has their own privacy policy and may process data outside the UK/EU.
3. Legal Basis for Processing
We process your data under the following legal bases:
- Consent (e.g. for newsletter sign-up, cookies)
- Contractual necessity (e.g. to respond to contact form inquiries)
- Legitimate interest (e.g. for site analytics, spam prevention)
- Legal obligations (if required by law)
4. Data Retention
We only retain your personal data for as long as necessary for the purposes set out in this policy or as required by law. For example:
- Contact form entries: up to 6 months
- Newsletter data: until you unsubscribe
5. Cookies
We use cookies and similar technologies to enhance the user experience. You can manage cookie preferences in your browser settings.
Types of cookies:
- Essential: Necessary for website functionality
- Analytics: Used to track usage
- Marketing: Used to deliver relevant content or ads
We use a cookie consent banner to collect your permission before setting non-essential cookies (as required by GDPR and UK law).
6. Your Rights (UK / EU)
Under UK and EU data protection laws, you have the right to:
- Access the personal data we hold about you
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent at any time
- File a complaint with a data protection authority (e.g. ICO in the UK or your local EU regulator)
To exercise your rights, contact us at:
Roya Bloom Ltd.
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
7. CCPA Notice (California Residents)
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect
- The right to request deletion
- The right to opt out of the sale of personal information (we do not sell your data)
You can submit a request by mailing us at:
Roya Bloom Ltd.
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
8. Data Transfers
Some of your data may be processed outside the UK or EU (e.g. by Google or WordPress). In such cases, we ensure appropriate safeguards are in place, such as:
- Data Processing Agreements (DPAs)
- Standard Contractual Clauses (SCCs)
- Adequacy decisions (where applicable)
9. How We Protect Your Data
We implement technical and organizational measures to protect your data, including:
- SSL encryption (HTTPS)
- Secure backups
- Limiting access to authorized personnel
10. Changes to This Privacy Policy
We may update this policy occasionally. The updated version will be published on this page with a revised “Last Updated” date.
11. Contact
If you have questions or concerns about this Privacy Policy, please contact us at:
Roya Bloom Ltd.
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
Email: contact@royabloom.co.uk
