Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how Barrel & Bloom Ltd collects, uses and shares personal information when you visit or use barrelandbloom.uk, place an order, contact us, subscribe to marketing or otherwise interact with Barrel & Bloom.

Who we are

Barrel & Bloom Ltd is the controller of personal information that we process for our own business purposes.

Barrel & Bloom Ltd
Company number: 17334989
Registered in England and Wales
Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE
Email: hello@barrelandbloom.uk

Personal information we collect

Depending on how you interact with us, we may collect your name, billing and delivery addresses, email address, telephone number, order and transaction information, account information, communications with us, marketing preferences, device and browser information, IP address, website usage information and information collected through cookies or similar technologies.

Payment information is processed through Shopify and/or the payment providers made available at checkout. We do not need to receive your complete payment-card details in order to fulfil your order.

How we obtain information

We may obtain personal information directly from you; automatically when you use our website; from Shopify and other service providers that support the store; and, where appropriate, from business, marketing or fraud-prevention partners.

How we use personal information and our lawful bases

We use personal information only where we have a lawful basis. Depending on the circumstances, these bases may include:

Contract: to process payment, accept and fulfil orders, arrange delivery, administer returns and refunds, and provide customer service.
Legal obligation: to comply with tax, accounting, consumer-protection and other legal requirements and to respond to lawful requests.
Legitimate interests: to operate, secure and improve our business and website, prevent fraud, maintain appropriate business records, understand store performance and respond to enquiries, where those interests are not overridden by your rights.
Consent: where consent is required, including for certain marketing activities or non-essential cookies and similar technologies.

Marketing

If you opt in to marketing, we may send you news, offers and product updates. You can unsubscribe using the link in our marketing emails or by contacting us. Unsubscribing from marketing does not prevent us from sending service messages about an order or account.

Cookies and similar technologies

Shopify and services used by our store may use cookies and similar technologies to operate the site, remember preferences, measure performance, prevent fraud and, where enabled and permitted, support advertising. Where the law requires consent for non-essential technologies, we will use the choices provided through our cookie or privacy controls.

Who we share information with

Where necessary for the purposes described above, we may share personal information with Shopify, payment providers, delivery and fulfilment providers, IT and website providers, professional advisers, marketing providers we use, fraud-prevention or security providers, and public authorities where disclosure is required by law. We share only information reasonably necessary for the relevant purpose.

Shopify

Our store is hosted by Shopify, which processes personal information in connection with providing its ecommerce platform, checkout, security and related services. Shopify may also process information for its own purposes as described in Shopify's privacy information.

International transfers

Some service providers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we and/or the relevant provider will use an appropriate lawful transfer mechanism.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, maintaining records required by law, resolving disputes, preventing fraud and establishing or defending legal claims. Retention periods therefore vary depending on the type of information and the legal or business reason for keeping it.

Your rights

Subject to the conditions and exemptions in applicable law, you may have rights to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise a privacy right, email hello@barrelandbloom.uk. We may need to verify your identity before completing a request.

Automated processing

Shopify, payment providers and fraud-prevention services may use automated systems to assess transactions or security risks. Where applicable data-protection law gives you rights in relation to solely automated decisions that have legal or similarly significant effects, those rights apply. Contact us if you have a question about a decision affecting you.

Complaints

If you are concerned about how we use your personal information, please contact us first so that we can investigate. You also have the right to complain to the UK Information Commissioner's Office where UK data-protection law applies.

Security

We use reasonable organisational and technical measures, together with the security features provided by Shopify and our service providers, to protect personal information. No method of transmission or storage is completely secure.

Children

Our store is not intended to collect personal information from children who are not legally able to make purchases or provide relevant consent. If you believe a child has provided personal information to us inappropriately, please contact us.

Changes to this policy

We may update this policy to reflect changes to our store, services, suppliers or legal requirements. The current version will be published on this website with an updated date.