Privacy Policy for Ember Blossom

Ember Blossom is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose information when you visit our online platform, engage with our bespoke forged metalwork and floral sculpture services, or otherwise interact with us.

Who We Are

Ember Blossom specialises in custom metal gates and railings, decorative ironwork for gardens, sculptural metal flower installations, restoration of historical wrought iron, and bespoke furniture pieces.

• Company Name: Ember Blossom
• Address: 17 Meadowbrook Lane, Unit 3B, Bath, Somerset, BA1 7DY, UK

Information We Collect

We may collect several types of information from and about users of our online platform and those who engage with our services:

• Personal Identification Information: Name, postal address, email address, telephone number, and any other unique identifiers or information you choose to provide when you contact us, request a quote, place an order, or subscribe to our newsletters.
• Project-Specific Information: Details regarding your custom metalwork or sculpture projects, including design preferences, specifications, photographs, site access details, and any other information relevant to fulfilling your order or providing our services.
• Transaction Data: Information related to the products and services you purchase from us, including payment details (though we do not store full payment card details on our servers but use secure third-party payment processors), billing address, and transaction history.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our online platform.
• Usage Data: Information about how you use our online platform, products, and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.

How We Collect Your Information

We use different methods to collect data from and about you, including:

• Direct Interactions: You may give us your identity, contact, and project data by filling in forms on our online platform or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
  • Enquire about our products or services;
  • Request a quote;
  • Place an order;
  • Subscribe to our newsletter;
  • Provide feedback or reviews.
• Automated Technologies or Interactions: As you interact with our online platform, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as analytics providers (e.g., Google Analytics), and contact, financial, and transaction data from providers of technical, payment, and delivery services.

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To fulfil a contract we are about to enter into or have entered into with you, including processing your orders and delivering our bespoke metalwork and sculpture services.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests, such as improving our services, marketing, and preventing fraud.
• Where we need to comply with a legal or regulatory obligation.
• Where you have given us your explicit consent.

Specifically, we use your information to:

• Provide, operate, and maintain our services.
• Process and complete transactions; send related information, including transaction confirmations and invoices.
• Communicate with you about our online platform, products, services, and special offers.
• Respond to your comments, questions, and requests, and provide customer service.
• Monitor and analyse trends, usage, and activities in connection with our services.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities, and protect the rights and property of Ember Blossom.
• Personalise and improve our services, including providing advertisements, content, or features that match user profiles or interests.

Disclosure of Your Information

We may share your personal data with the parties set out below for the purposes outlined above:

• Service Providers: We may share your data with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
• Professional Advisers: We may disclose your personal data to our professional advisers, such as lawyers, bankers, auditors, and insurers, who provide consultancy, banking, legal, insurance, and accounting services.
• Legal and Regulatory Authorities: We may disclose your information to government or law enforcement officials if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations, protect our rights or property, or prevent illegal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

International Transfers

Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
• Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us at our physical address.

Cookies

Our online platform uses cookies to distinguish you from other users of our online platform. This helps us to provide you with a good experience when you browse our online platform and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy (if applicable, otherwise integrate relevant cookie information here).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By post: Ember Blossom, 17 Meadowbrook Lane, Unit 3B, Bath, Somerset, BA1 7DY, UK