Privacy policy
Last updated: 20 September 2026
This policy explains what personal data we collect when you use this website or buy from us, why we collect it, what we do with it and what rights you have.
1. Who is responsible for your data
The data controller is IG Company Store Digital LLC, a limited liability company registered in the State of Florida, United States, registered address 1160 Heron Sound Dr, Apopka, FL 32703, United States. BLOOMLY is a trading name of IG Company Store Digital LLC.
For any question about this policy or about your data, contact us at support@bloomlygeeks.com. That address is the one referred to as "email us" throughout this policy.
2. What we collect
When you buy something. Your name, delivery address, billing address, email address, telephone number where you give one, what you ordered and when, and the record of the payment. We do not receive or store your full card number — payment details go directly to our payment provider.
When you create an account. Your email address, your password in encrypted form, your saved addresses and your order history.
When you sign up to our emails. Your email address, and the date and record of your consent.
When you contact us. Your name, your email address and whatever you tell us in your message, so we can answer it and keep a record of what was agreed.
When you use the website. Your IP address, browser and device type, the pages you visit and how you reached us. Some of this is necessary for the site to work; the rest depends on the cookie choices you make. See section 7.
What we do not collect. We do not ask for, and do not want, information about your health. Please do not send us medical information. If you have a question about whether a product suits you, the honest answer is that we cannot advise you — speak to your doctor or pharmacist.
3. Why we use it, and our legal basis
| What we do | Why | Legal basis under the UK GDPR |
| Take and fulfil your order | To deliver what you bought | Performance of a contract |
| Take payment and prevent fraud | To get paid and to protect against fraudulent transactions | Contract; legitimate interests |
| Send order and dispatch confirmations | So you know what is happening | Contract |
| Answer your enquiries | To provide customer support | Contract; legitimate interests |
| Handle returns, refunds and complaints | To meet our obligations to you | Contract; legal obligation |
| Keep accounting and tax records | Because the law requires it | Legal obligation |
| Send marketing emails | To tell you about products and offers | Consent, or the soft opt-in under PECR |
| Measure how the website is used | To understand and improve it | Consent, through the cookie banner |
| Keep the site secure | To protect the site and its users | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we have concluded it is not. You can ask us about that assessment by email.
4. Marketing emails
We send marketing emails only where you have consented, or where you have bought from us and we are contacting you about similar products — the "soft opt-in" permitted by PECR. In either case you were, and are, able to refuse.
Every marketing email contains an unsubscribe link. You can also email us at any time and we will remove you.
Unsubscribing from marketing does not stop order confirmations, dispatch notices or replies to your enquiries. Those are part of the service you bought and are not marketing.
We do not sell your personal data. We do not share it with third parties for their own marketing.
5. Who we share it with
We share personal data only with organisations that need it to provide a service to us, and only for that purpose. This list describes what we use today, and we update it when that changes.
| Who | What for |
| Shopify, the e-commerce platform this website runs on | Running this website, processing orders, sending order and dispatch emails, and giving us aggregate statistics about how the store is used |
| Our payment provider | Taking payment and preventing fraud |
| The carriers that deliver your order | Delivering your order |
| Professional advisers, and public authorities where the law requires | Legal, accounting and regulatory obligations |
Each of these acts under a contract that requires them to keep your data secure and to use it only on our instructions, except where they are a controller in their own right — in which case their own privacy policy also applies.
We do not use a separate analytics platform, a separate email marketing platform, a reviews platform or any advertising platform. If we add one, we will update this section before it starts processing your data.
6. Where your data is held
Our suppliers may process personal data outside the United Kingdom. Where that happens, we rely on one of the transfer mechanisms permitted by UK data protection law — adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses — so that your data keeps an equivalent level of protection.
We are ourselves established in the United States. That means your personal data is accessed and held outside the United Kingdom by us, as well as by some of our suppliers. We apply this policy to it wherever it is held, and you keep every right set out in section 9.
7. Cookies
Cookies are small files placed on your device. Some are necessary for the site to function; others are not.
| Type | What it does | Do we need your consent? |
| Strictly necessary | Keeps your basket, keeps you logged in, keeps the site secure, remembers your cookie choice | No — exempt under PECR |
| Analytics | Tells us which pages are used and where people leave | Yes |
| Preferences | Remembers choices such as your market or currency | Yes, unless strictly necessary |
Non-essential cookies are not set until you accept them. The banner appears on your first visit. You can change your choice at any time using the cookie settings on this website, and you can delete cookies in your browser settings.
We do not use advertising cookies. If that changes, we will update this policy and ask for your consent before any such cookie is set.
Refusing non-essential cookies does not stop you buying from us. The site works either way.
8. How long we keep it
We keep personal data only for as long as we need it for the purpose we collected it for, and for as long as the law requires us to keep it. In practice that means:
- Order and transaction records — for as long as tax and accounting law requires us to keep them.
- Account details — while your account is open, and then until any outstanding order, return, refund or complaint has been settled.
- Customer service correspondence — while it may still be needed to deal with the enquiry, a return, a refund or a complaint, and to show how it was resolved.
- Marketing consent records — while you are subscribed, and after you unsubscribe for as long as we need to show that we acted on your choice.
When we no longer need personal data, we delete it or anonymise it so it can no longer identify you.
9. Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data — which is what this policy is for;
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use it in certain circumstances;
- receive your data in a portable format, or have it sent to another controller;
- object to processing based on legitimate interests;
- object to direct marketing at any time — this one is absolute, and we will always act on it;
- withdraw consent at any time, where we rely on consent. Withdrawing it does not affect what we did lawfully beforehand.
To exercise any of these, email us. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
There is no charge for making a request.
10. Complaints
If you are unhappy with how we have handled your personal data, tell us first and we will try to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk. Complaining to us first does not remove that right.
11. Children
This website is not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email us and we will delete it.
12. Automated decision-making
We do not make decisions about you by purely automated means that produce legal effects or similarly significantly affect you.
13. Changes to this policy
We may update this policy. The date at the top shows when it was last changed. Where a change is significant, we will tell you.
14. Contact
- IG Company Store Digital LLC
- 1160 Heron Sound Dr, Apopka, FL 32703, United States
- Registered in the State of Florida, United States, in the register maintained by the Florida Division of Corporations, registration number L25000085772
- Email: the address given in section 1