Privacy Policy

Who we are

Bloom Studio Ibiza S.L., trading as Bloom Studio, is responsible for the personal data described in this policy.

You can contact us at hello@designbloom.co.uk or by post at our studio: 13 Salvador Camacho St, Ground Floor, Left Unit, 07840 Santa Eulalia del Río, Ibiza, Spain.

Information we collect

When you email or call us, we receive the contact details and information you choose to share, such as your name, email address, telephone number and project requirements, together with any related correspondence.

When you browse the website, our hosting and content delivery providers receive technical information needed to deliver and secure it. This can include your IP address, browser and device information, requested pages, referring page and the date and time of your visit.

The website currently provides direct email and telephone links. It does not offer an online shop, account registration or a newsletter sign-up form. Please only share information relevant to your enquiry.

How and why we use it

We use project enquiry information to understand your needs, reply to you and take steps towards a possible contract at your request. The legal basis is Article 6(1)(b) of the GDPR.

For general correspondence and the reliable, secure operation of our website, we rely on our legitimate interests in running our studio, answering enquiries and protecting our services, under Article 6(1)(f). Where we need to keep records to meet legal obligations, Article 6(1)(c) applies.

Providing enquiry information is voluntary. If you do not provide a way to contact you or enough information about your request, we may be unable to respond or prepare a proposal. We do not use this website for automated decisions with legal or similarly significant effects.

Hosting, media and service providers

The website is hosted on Webflow. Images, fonts and website files are delivered through Webflow and its infrastructure providers. Some video files are delivered through bunny.net. Website animation libraries are served through jsDelivr. These services receive connection information, including your IP address, when your browser requests their files.

Our authorised team and providers supporting our email, IT and website services may process relevant data as needed to perform their work. Professional advisers or public authorities may receive information where necessary to comply with the law or establish, exercise or defend legal claims.

Further information is available in the Webflow privacy policy, bunny.net privacy policy and jsDelivr privacy policy.

International processing

Some of our providers, including Webflow, operate internationally and may process data outside the European Economic Area. Transfers must have a valid basis under the GDPR, such as an applicable adequacy decision or the European Commission’s Standard Contractual Clauses, with additional safeguards where required.

Webflow describes its transfer safeguards in its Data Processing Addendum. You can contact us for information about the safeguards applicable to your data.

Cookies and external links

The current website does not use advertising pixels or optional audience analytics tools. Technical information may still be processed by the services that deliver the site. Any non-essential cookies or similar tracking added in the future will require the appropriate information and consent controls before being activated.

Links to Instagram, Pinterest, LinkedIn and other external websites take you to services operated by other organisations. Their own privacy and cookie policies apply when you visit them.

How long we keep information

We keep enquiry correspondence for as long as needed to answer your request and manage any related follow-up. If an enquiry becomes a project, relevant records are kept for the duration of the relationship and for any further period required by accounting, legal or claims obligations.

Technical logs are retained according to the relevant provider’s retention settings and the operational or security purpose involved. When information is no longer needed and no legal reason requires us to retain it, it should be deleted or anonymised. You can contact us about retention of your specific information.

Your rights

Depending on the circumstances, you can ask to access, correct or erase your personal data, restrict its processing, object to processing based on legitimate interests, or receive data in a portable format. Where processing is based on consent, you can withdraw that consent at any time without affecting earlier lawful processing.

To make a request, email hello@designbloom.co.uk. We may ask for information needed to confirm your identity. We normally respond within one month; if the GDPR permits an extension, we will explain why.

You also have the right to complain to a supervisory authority, including the Spanish Data Protection Agency (AEPD), or the authority where you live or work.

Changes to this policy

We will update this page when our website or data handling practices change. The date above shows when it was last revised.