PRIVACY POLICY
This Privacy Policy aims to explain how we process your personal data and inform you about your rights in accordance with the UK GDPR and the Data Protection Act 2018.

Data Controller
The website www.blissbound.co.uk is operated by Blissbound Ltd, with its registered office at 13 Maidstone Road, London N11 2TR, United Kingdom ("we", "us", "our").
We collect and process personal data in accordance with the applicable UK laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We ensure that your data is kept confidential and protected from unauthorized access by third parties.
Key data protection measures include:

• SSL certificate ensuring encrypted communication,
• Processing only necessary data and for the shortest time required,
• Access to data is limited to trained and authorized personnel,
• Our internal procedures and IT systems comply with data protection standards.

Contact Information
For data protection enquiries, please contact us at: [info@blissbound.co.uk]

Purpose and Legal Basis for Processing
We collect and process your personal data:

• to fulfil sales contracts and deliver goods you purchase (Article 6(1)(b) UK GDPR),
• to comply with legal obligations (Article 6(1)(c) UK GDPR),
• to send marketing communications, including newsletters, only with your explicit consent (Article 6(1)(a) UK GDPR and PECR),
• for analytics and website functionality based on our legitimate interest (Article 6(1)(f) UK GDPR).

Categories of Personal Data Processed
We may collect the following data:

• name and surname
• email address
• delivery address
• phone number
• payment information (via secure payment processor – not stored by us)
• IP address and cookies (see section on cookies)

Data Retention
Your data will be retained:

• for up to 6 years in connection with order and tax obligations,
• for marketing (e.g. newsletter) until you withdraw your consent,
• no longer than 24 months if you only created an account and made no purchase.

Recipients of Data
Your data may be shared with:

• service providers (IT, marketing, logistics, payment processing),
• legal and tax consultants,
• public authorities when required by law.

All parties are contractually obligated to comply with UK GDPR.

Your Rights
You have the right to:

• access your data,
• rectify or erase it,
• restrict or object to its processing,
• data portability,
• withdraw consent,
• file a complaint with the Information Commissioner’s Office (ICO).

International Data Transfers
We do not transfer your data outside the UK or EEA. If such transfer is necessary, appropriate safeguards will be applied.

Cookies
Our website uses cookies for functionality, analytics, and marketing. You can control cookies through your browser settings or by using our cookie consent tool.

Profiling
We do not profile personal data. We use analytics tools like Facebook Pixel and Google Analytics.

Updates to This Policy
We may update this policy. Please check this page regularly to stay informed of any changes.