Blossoming Gifts takes online security very seriously and is a certified secure site with PCI-DSS. We are also certified ISO 27001 and with ICO.
How do we protect your information?
We use a server certificate (also known as a digital certificate) to assure you of our identity and secure sockets layer (SSL) to encrypt data transmissions. If you want to check our certificate/security you can do so using one of the following methods, while visiting the Blossoming Gifts website:
1. Microsoft Internet Explorer 4 or later:
Click on the gold padlock at the bottom right of your browser to bring up the details of this site’s Digital ID.
2. Netscape Navigator: Click on the padlock at the bottom left of your browser to bring up the security information.
The security measures described above ensure that all reasonable steps are taken to protect your personal information. However, the nature of the internet means that an absolute guarantee of security cannot be offered, and you should be aware that there may be a small security risk in exceptional circumstances when disclosing information online.
Blossoming Gifts is committed to complying with the General Data Protection Regulation (GDPR) and has published this guide to help you understand how and why Blossoming Gifts collects information from you, where information is shared and what your rights are.
When you order or register with Blossoming Gifts you will be asked to provide certain information about yourself. Blossoming Gifts operates to a high level of commercial standards which are designed to protect your privacy, ensure payments are secure and that the highest standard of customer service is met.
1.0 Who is responsible for processing your personal data?
The Data Protection Officer of Ecomnova Ltd is responsible for how your personal data is collected, stored and processed.
Blossoming Gifts is owned and operated by Ecomnova Ltd with registered company number: 08293632.
2.0 How is your information collected?
We will collect and obtain information from you when you interact with us in the following ways:
- When completing any surveys we send to you for feedback (an optional service)
- When you order from us and purchase our products
- We may collect other types of data from third-party tools e.g. your browsing history on our website. For more information on third-party tools that we use see section 6.0.
3.0 What information do we collect?
We will collect and obtain information from you when you interact with us (as shown in part 2.0). Below are examples of the types of information we collect:
- First name and surname
- Email address
- Contact phone number
- Delivery address
- Purchase information (including gift message left for recipient)
- Conversations with us (including telephone calls, emails or livechat messages)
- Billing address
- Payment details - this information is encrypted and only managed by our payment processors as discussed in section 6.1.1
- Automatically configured IP address*
- Information about your cookies†
*When you visit our website we may collect your IP address which is pre-populated from your internet connection. This is a unique number which allows a number of internet connected devices to browse the internet (e.g. smartphone, computer, tablet). From this we may gather information such as your browser, time and date of visit as well as the pages you requested to view.
†To see how we collect and use your cookies, please read through the Cookies policy.
4.0 Why is it being collected?
We collect your data for a number of reasons, for example, to provide a better service and better customer experience of our websites. We also collect your data if we have a legitimate interest in using it or if we have gained your consent to use it.
4.1 To provide a better service
We may need certain information to process your order with us and provide a better service to each of our customers. We use your data to provide a better service in the following ways:
- By providing your payment details, your order can be placed successfully. We then share this information with our payment providers as discussed in section 6.1.1.
- Our contact with you is also important to us. By providing your email address we are able to contact you with an order confirmation, dispatch notices and delivery updates.
4.2 Legitimate interest
If we have a legitimate interest to use your data or contact you, we may do so to help us understand our customers better. We use your information because of a legitimate interest in the following ways:
- We may profile and monitor customer traffic patterns, for example, if you browse through our products and leave a product in your cart. We may contact you via email address or an outbound call to help you complete the order. This is done by obtaining your email address or telephone number and sending the appropriate marketing information to you.
- We can run a test version of our website to a percentage of customers, from this we can measure its impact and whether we should launch it to all customers. This is the way in which we measure and understand how our customers use our onsite tests.
- To help us detect fraudulent or suspicious activity on our website.
4.3 We have your consent
- To show you advertising on Facebook, Instagram or via other third-party advertising that may appear on other websites you browse. For more information on this please see section 6.1.
- To contact you via telephone if we think a product or service may interest you, based on our profiling with your shopping habits and pages or products you have viewed.
5.0 How do we use your information?
We use the information that we collect about you to process orders and manage your account. We may use your email address or telephone number to notify you about enhancements to our services, including special offers and changes to the website. We also look at the site usage to help develop our customer's web experience. This may be derived from your feedback from a customer survey (this is voluntary) or a third-party tool (discussed in further detail in section 6.1.2).
In order to contact you and by ordering from us, you provide consent for us to send you information about our products and services by telephone or email and you agree that by doing so, Blossoming Gifts is not in breach of the Telecommunications (Data Protection and Privacy) Regulations 1999 or the Direct Marketing Association (DMA) Code of Practice.
For more information on why we use your data, please refer back to section 4.0.
6.0 Who will your information be shared with?
We use information about you for purposes other than the provision of a website shopping facility. As a result we may disclose your information to partner sites that provide services to our customers.
This means that by purchasing from us, you give consent to it being transferred to third-party processors outside of the EEA to enable us to provide you with customer service, improve our services and assist us with our security, credit-risk, or fraud-protection activities.
We may occasionally use third-party tools to profile you and process data. The ways in which we do this and the third-parties we use are listed below. Each third party tool will have their own policy about the personal data shared within their platforms.
6.1.1 Payment Processors
We may use your payment details to carry out fraud and security checks with other organisations. This involves detecting fraudulent activity so we can prevent it from happening. Once an order is placed with Blossoming Gifts, if we or they suspect or identify fraud, we or they may record this and may also pass this information to other organisations to prevent and detect fraud now or in the future.
6.1.2 User Experience Tools
We may use tools to look at selected customer journeys throughout our website. We use this information to make your customer experience better and make improvements accordingly. All payment information is encrypted if a session is being recorded whilst you place an order with us.
Occasionally we use other tools to process selected surveys on our website. This is used to gather feedback on what you really want as a Blossoming Gifts customer. The tool that we use commits to securely storing data on behalf of Ecomnova Ltd. All data exceeding our subscription plan will be routinely and automatically deleted from their systems.
6.1.3 Customer Communication
We use data processors to distribute our marketing material. We send our marketing email communications through these data processors to promote offers, events and new products.
We also use these to distribute your dispatch emails. Your email will be collected once you place your order and will be used to send relevant delivery information to you or the recipient (depending which email address you left).
Review data processors send an email to customers asking them to leave a review on a product they have purchased, or to provide a review for Blossoming Gifts as a company. This is sent with the email address provided when placing an order with us.
Additionally, we use other third party tools when contacting our customers for a customer service query. This may be through livechat, social media, SMS or a phone call. We may ask you for personal data and your order number in order to help us solve queries sooner. This may include: name, email address or postcode.
6.1.4 Advertising & Social Platforms
We may use your cookies when browsing to profile you as a customer and personalise adverts displayed on other selected websites or social media platforms. These cookies may also be used to anonymously measure the effectiveness of our PPC adverts (pay per click) and advertising through affiliates.
Based on your browsing history at blossominggifts.com, we will tailor adverts according to products we think you would like. These adverts will be banners that appear on websites which we are affiliated with.
We use tools such as Google Analytics and Google AdWords to help us profile you depending on your browsing and shopping habits. We share this information by storing cookies when browsing our website. This is used to run adverts and track its success once tailored to you.
7.0 Your rights as a customer
Below is a list of the rights you have in relation to the personal information we hold about you when you purchase from us:
7.1 The right of access
You may send us a Subject Access Request to access the personal data we currently hold about you. Please note, for data security reasons, we will not send any payment/bank details we hold related to your account. We may also require more information from you in order to validate your identity before we send any personal data. To contact us regarding the data we hold about you, please email [email protected]
7.2 The right to rectify information
If you believe that any of the personal data we hold about you is incorrect or needs to be updated, please speak to our Customer Service team who can change this for you. For more information on how to contact us, see section: 8.0.
7.3 The right to be forgotten
You have the right to request your data is erased through the pseudonymisation process. This includes any ways in which we have used information to profile you e.g. through web tracking.
The pseudonymisation process means processing personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information. This is provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
7.4 The right to be informed
7.5 The right to make a complaint
You have the right to lodge a complaint about how you believe your personal data is being collected, stored or processed. For more information on how to contact us, see section: 8.0.
8.0 How to contact us and who to contact
The Data Protection Officer,
112 Chapel Street,
8.1 How to opt out from marketing communications
If you decide you do not want to receive newsletters, offers or product updates, please request that we stop emailing this information to you.
We would be sad to see you go, but note that you can unsubscribe from our marketing communications at any time. To do so, click on the ‘unsubscribe’ link at the bottom of all of our emails. You may need to unsubscribe separately from third party emails such as Reviews as well as our own emails.
Please note: you may continue to receive mailings which are already on their way to you for a short period of time while your request is being dealt with.
Policy last updated: 23/05/2018
Our online ordering system uses a cookie to record a unique reference on your computer so that we can keep track of your order as you use the system. This cookie that is saved to your system, is only valid for a single visit and each new visit will result in a new cookie overwriting any that were generated on previous visits to our site.
In order to monitor and improve our site we may gather certain information about you when you use it, including details of your domain name and IP address, operating system, browser, version and the website that you visited prior to this site. This may involve the use of a cookie that will not expire at the end of your browsing session.
We store various cookies that we do not control in order to target certain advertising for you. This may be used to profile and web track your customer behaviour to present products and services you may like. For more information on how we use these third-party tools, please refer back to section 6.1.
If you do not want to receive this type of advertising, you can opt out at any time. This just means that the advertising you see when browsing other websites will be less relevant to you and more generic. However, this does not mean that you will no longer receive advertising at all when browsing.
If your internet browser is set to reject cookies or if your network firewall will not allow them then unfortunately you will not be able to purchase from us. Please refer to your internet browser help file to see how to enable cookies on your PC.