Privacy Policy for Northern Bloom

Northern Bloom is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our site or use our bespoke travel itinerary planning, luxury floral arrangements, destination wedding planning, corporate event floral decor, guided botanical tours, immersive cultural experiences, and floral workshops. We operate in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Information We Collect

We collect various types of information to provide and improve our services to you.

• Personal Data: This includes information such as your name, email address, phone number, physical address, payment details (e.g., credit card information), dietary restrictions (for travel or events), travel preferences, and specific details necessary for event planning or floral design. We collect this directly from you when you enquire about our services, book an experience, or subscribe to our communications.
• Usage Data: We automatically collect information on how our site is accessed and used. This may include your computer's Internet Protocol (IP) address, browser type, browser version, the pages of our site that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our site and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

How We Use Your Information

Northern Bloom uses the collected data for various purposes:

• To provide and maintain our services, including bespoke travel itinerary planning, event management, and floral design.
• To process your transactions and manage your accounts.
• To notify you about changes to our services.
• To allow you to participate in interactive features of our service when you choose to do so.
• To provide customer support and respond to your inquiries.
• To perform data analysis, identify usage trends, determine the effectiveness of our promotional campaigns, and evaluate and improve our services.
• To send you marketing and promotional communications about our services, offers, and events that may be of interest to you, based on your preferences.

Legal Basis for Processing Personal Data Under GDPR

We process Personal Data on the following legal bases:

• Consent: Where you have given explicit consent for us to process your Personal Data for one or more specific purposes.
• Performance of a Contract: Where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which Northern Bloom is subject.
• Legitimate Interests: Where processing is necessary for the purposes of the legitimate interests pursued by Northern Bloom or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

Disclosure of Your Information

We may disclose your Personal Data in the following situations:

• Service Providers: We may share your Personal Data with third-party service providers to perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.
• Business Partners: For travel and event planning, we may share information with trusted partners (e.g., hotels, transportation companies, florists, activity providers) strictly necessary to fulfill the services you have requested.
• Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: If Northern Bloom is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.

Security of Your Information

The security of your Personal Data is paramount to us. We implement appropriate technical and organizational measures to protect your Personal Data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Data Protection Rights Under GDPR

As a data subject under GDPR, you have certain rights concerning your Personal Data:

• The Right to Access: You have the right to request copies of your Personal Data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure (Right to be Forgotten): You have the right to request that we erase your Personal Data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your Personal Data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: You also have the right to withdraw your consent at any time where Northern Bloom relied on your consent to process your Personal Data.

To exercise any of these rights, please contact us using the details provided below.

Retention of Data

Northern Bloom will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Links to Other Sites

Our site may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third-party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our service is not intended for anyone under the age of 18 (referred to as "Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, your Personal Data, or your rights, please contact us at: