Privacy Policy
Last updated: 10 August 2026
1. Who we are
This policy explains how InnerBloom collects and uses your personal data when you visit innerbloomsupplements.com, buy from us, or interact with our marketing.
We are the data controller for that information. Our registered office is [REGISTERED ADDRESS], company number [COMPANY NUMBER].
For any privacy question, or to exercise your rights, email support@innerbloomsupplements.com.
2. The information we collect
- Identity and contact data — name, billing and delivery address, email address, phone number.
- Order data — what you bought, order value, order history, delivery status, returns and refunds.
- Payment data — the last four digits and card type, plus the transaction result. We never see or store your full card number; payments are handled directly by our payment providers.
- Account data — login details and saved preferences, if you create an account.
- Communications data — emails, live chat and social media messages you send us, and our replies; your marketing preferences and consents.
- Technical and usage data — IP address, device and browser type, operating system, referring site, pages viewed, time on page, and how you interact with our emails.
- Content you submit — reviews, ratings, photographs and survey or quiz responses.
Health-related information
We do not ask you to give us health information, and we ask that you do not send us medical details you do not need to share. If you choose to tell us something about your or your child's skin or health — for example in an email to support, a product review, or a quiz answer — that may be special category data under data protection law. Where it is, we rely on your explicit consent, given by you choosing to send it, and we use it only to answer you or to handle the matter you raised. You can withdraw that consent and ask us to delete it at any time.
Buying a product from us is not, by itself, treated by us as a health record, and we do not use purchase history to infer or record a medical condition about you.
3. How we collect it
- Directly from you — when you order, create an account, subscribe to emails or SMS, enter a competition, leave a review, or contact support.
- Automatically — through cookies and similar technologies when you use the Site (see section 6).
- From third parties — our ecommerce platform (Shopify), payment providers, delivery partners, email and SMS platforms, advertising and analytics providers, and review platforms.
4. Why we use it, and our lawful basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Processing and delivering your order, taking payment, sending order updates | Identity, contact, order, payment | Performance of our contract with you |
| Handling returns, refunds, guarantees and complaints | Identity, contact, order, communications | Performance of our contract; legal obligation |
| Answering your support enquiries | Contact, order, communications | Legitimate interests (running our business and supporting customers) |
| Sending marketing emails and SMS | Contact, order, usage | Consent — or legitimate interests for existing customers about similar products, where the law allows |
| Online advertising and measuring campaign performance | Technical, usage, order | Consent (via cookie preferences) |
| Analytics, and improving the Site and our products | Technical, usage | Consent for non-essential cookies; otherwise legitimate interests |
| Preventing fraud and abuse of promotions | Identity, order, payment, technical | Legitimate interests; legal obligation |
| Product safety and reporting an adverse reaction | Identity, contact, order, any health details you give us | Legal obligation; vital interests; explicit consent where special category data is involved |
| Keeping accounting and tax records | Identity, order, payment | Legal obligation |
5. Marketing
We will only send you marketing emails or texts where you have opted in, or where you have bought from us and the law permits us to contact you about similar products.
You can opt out at any time — use the unsubscribe link in any email, reply STOP to any text, or email support@innerbloomsupplements.com. Opting out of marketing does not stop transactional messages such as order confirmations and delivery updates.
6. Cookies and tracking
We use cookies and similar technologies to make the Site work, remember your basket, understand how the Site is used, and measure and target advertising. Non-essential cookies — including advertising and analytics cookies — are only set where you consent through our cookie banner.
This includes tools provided by Shopify, Google Analytics, Meta (Facebook and Instagram) Pixel, TikTok Pixel, Klaviyo. You can change or withdraw your preferences at any time via the cookie settings link on the Site, and you can block cookies in your browser settings — though parts of the Site may then not work properly.
7. Who we share your data with
We do not sell your personal data. We share it only with:
- Our ecommerce platform — Shopify, which hosts the Site and processes orders.
- Payment providers — to take payment and screen for fraud.
- Fulfilment and delivery partners — to pick, pack and deliver your order and handle returns.
- Email, SMS and review platforms — to send messages you have asked for and collect feedback.
- Advertising and analytics providers — where you have consented to those cookies.
- Professional advisers — lawyers, accountants and insurers, where needed.
- Authorities and regulators — where we are required to by law, including product safety reporting.
- A buyer or successor — if our business is sold or reorganised.
All our providers are bound by contract to keep your data secure and to use it only on our instructions.
8. International transfers
Some of our providers are based outside the UK and the EEA. Where your data is transferred internationally, we make sure it is protected by an appropriate safeguard — an adequacy decision, the UK International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum. You can ask us for details of the safeguards used.
9. How long we keep it
- Order and transaction records — 6 years after the end of the financial year in which the order was placed, to meet accounting and tax obligations.
- Account data — while your account is active, then 24 months after your last interaction.
- Marketing data — until you unsubscribe, then a minimal suppression record so we do not contact you again.
- Support correspondence — 24 months after the enquiry is closed, or longer where it relates to a complaint, claim or product safety matter.
- Cookie and analytics data — for the retention period set out in our cookie settings.
10. Your rights
Under UK data protection law you have the right to:
- be told how your data is used, and to access a copy of it;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing, including objecting to direct marketing at any time;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing carried out before you withdrew it.
To exercise any of these, email support@innerbloomsupplements.com. We will respond within one month. There is no charge, and we may ask you to confirm your identity first.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — but please contact us first so we have a chance to put things right.
11. Children's privacy
The Site is intended for adults. We do not knowingly collect personal data from anyone under 18, and orders must be placed by an adult.
Although our products may be taken by teenagers, our relationship is with the adult purchaser and we do not create profiles of, or market directly to, under-18s. If you believe a child has given us personal data, contact support@innerbloomsupplements.com and we will delete it promptly.
If you send us a photograph or review featuring a person under 18, you confirm that you are their parent or guardian and consent on their behalf. You can withdraw that consent at any time.
12. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and vetted providers. No transmission over the internet is completely secure, so we cannot guarantee absolute security — but we have procedures to deal with any suspected breach and will notify you and the regulator where we are legally required to.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Where the change is significant, we will tell you directly.
14. Contact us
Email: support@innerbloomsupplements.com
Postal address: InnerBloom, [REGISTERED ADDRESS]