Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

This policy explains what personal data we collect, why we collect it, and what rights you have regarding your data. It applies to all visitors and customers of beesblooms.eu.

2. Data We Collect

We collect personal data in the following situations:

• When you place an order: name, email address, delivery address, phone number, and payment reference
• When you contact us: your name, email, and the contents of your message
• When you browse our website: IP address, browser type, pages visited, and time spent — collected via analytics tools
• When you consent to marketing: email address for newsletters and promotional communications

We do not collect payment card details directly — payments are processed by Stripe, which has its own privacy policy.

3. Why We Use Your Data

• To process and fulfil your order, and communicate about its status
• To respond to enquiries and customer service requests
• To send marketing emails (only with your consent)
• To comply with legal obligations (e.g. invoicing, tax records)
• To improve our website and product offering through aggregated analytics

4. Legal Bases (GDPR)

We process your data under the following legal bases:

• Contract (Art. 6(1)(b)): processing your order and delivering your goods
• Legal obligation (Art. 6(1)(c)): tax records, consumer law compliance
• Legitimate interest (Art. 6(1)(f)): fraud prevention, website security, basic analytics
• Consent (Art. 6(1)(a)): marketing emails — you may withdraw consent at any time

5. Data Retention

• Order data: retained for 7 years to comply with accounting and tax law
• Customer service correspondence: deleted after 2 years
• Marketing consent: retained until you unsubscribe
• Analytics data: aggregated and anonymised, retained for up to 26 months

6. Data Sharing

We do not sell your personal data. We share it only with trusted service providers necessary for running our business:

• Shipping carriers (UPS, DHL, GLS) — delivery address and contact details to fulfil your order
• Stripe — secure payment processing
• Email service provider — transactional and marketing emails
• Analytics tools — aggregated, anonymised website traffic data

All processors are contractually bound to handle data in accordance with GDPR. Data may be transferred within the EU/EEA only; where any provider is outside the EU, standard contractual clauses (SCCs) apply.

7. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”), subject to legal retention requirements
• Restriction — ask us to restrict processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest or for direct marketing
• Withdraw consent — for any processing based on consent, at any time

To exercise any of these rights, contact us at hello@beesblooms.eu. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

8. Cookies

We use a minimal number of cookies:

• Strictly necessary: session and cart state — required for the shop to function. No consent required.
• Analytics: anonymised page-view tracking to understand site usage. We use privacy-respecting analytics with no cross-site tracking.

We do not use advertising cookies or third-party trackers for remarketing purposes.

9. Contact & Complaints

For any questions about this policy or your personal data, contact us at hello@beesblooms.eu.

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the Polish data protection authority (UODO) or any EU supervisory authority in your country of residence.