Privacy
Policy
Your privacy matters to us. Learn how The Blossom Labs collects, protects, stores, and processes your personal information in accordance with UK GDPR and international privacy standards.
About
The Blossom Labs
The Blossom Labs is a UK-based natural food supplement company, operated by ORYSON UK LTD (Company Number: 13982346), registered and trading in the United Kingdom. We develop research-backed natural food supplements using premium, ethically sourced ingredients, transparent formulations, and responsible business practices.
Our mission is to support everyday wellness, vitality, and balance through nature-inspired products crafted to the highest quality standards. We are committed to treating the personal information of our customers, visitors, and partners with the utmost respect, care, and transparency.
This Privacy Policy explains how we collect, use, store, protect, and share your personal data when you visit our websites at theblossomlabs.co.uk and blossomlabshealth.com, purchase our products, or contact us in any way. This policy applies to all users of our services and is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information
We Collect
We collect a range of personal and non-personal information to provide and improve our services. We only collect information that is necessary, proportionate, and relevant to our legitimate business operations.
Personal Information
- Full name and contact details (email address, phone number, and postal address)
- Billing and delivery address for order fulfilment
- Account login credentials (username and encrypted password)
- Order history and purchase details
- Messages and enquiries submitted through contact forms
- Newsletter subscription preferences and email communication history
Technical Information
- IP address, browser type and version, operating system
- Pages visited, time spent on pages, and referring website information
- Device type and screen resolution
- Cookie preferences and session data
How We Collect Information
We collect information directly from you when you place an order, create an account, subscribe to our newsletter, complete a contact form, email us, or communicate with us via phone or WhatsApp.
Some information is collected automatically as you browse our website through cookies, log files, and analytics tools. This helps us understand how visitors use our site so we can improve your experience.
On occasion, we may receive information from third-party payment processors, shipping partners, or analytics providers who help us deliver our services. These third parties operate under their own privacy policies and are required to process data lawfully.
Why We Collect Personal Data
We process your personal data only where we have a lawful basis to do so under UK GDPR. Our lawful bases include contract performance, legitimate interests, legal obligation, and — where required — your explicit consent.
- Order fulfilment: To process your purchases, arrange delivery, and manage returns or refunds
- Customer service: To respond to enquiries, provide support, and resolve any issues you experience
- Account management: To maintain your account, preferences, and purchase history
- Marketing (with consent): To send wellness tips, promotional offers, and product updates — only where you have opted in
- Website improvement: To analyse how our website is used and enhance your browsing experience
- Legal compliance: To comply with our obligations under UK law, including tax and financial record-keeping requirements
- Fraud prevention: To protect our customers and our business from fraudulent activity and security threats
Newsletter & Marketing
We may send you wellness tips, product news, exclusive offers, and updates about The Blossom Labs — but only where you have freely given your consent to receive such communications.
When you subscribe to our newsletter, we collect your email address and store it securely. We will never sell, rent, or share your email address with third parties for their own marketing purposes.
You may unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link in any email we send, or by contacting us directly at support@theblossomlabs.co.uk. Unsubscribing from marketing does not affect transactional communications related to your orders.
Our email marketing operations use industry-standard practices and comply with the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR requirements for consent-based marketing.
Cookies Policy
Our website uses cookies — small text files stored on your device — to improve your browsing experience, remember your preferences, and help us understand how our website is used.
Types of Cookies We Use
Strictly necessary for our website to function. These include session cookies, shopping cart cookies, and security cookies. You cannot opt out of these.
Help us understand visitor behaviour through tools such as Google Analytics. Data collected is aggregated and anonymised. You may opt out of analytics cookies through our cookie consent banner.
Remember your choices such as language, currency, and region preferences to deliver a more personalised experience.
You can manage or delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website.
Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it from unauthorised access, loss, alteration, or disclosure.
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Secure payment processing via trusted, PCI-DSS compliant payment providers — we do not store card details on our systems
- Access controls ensuring only authorised personnel can access personal data
- Regular security updates and monitoring of our hosting infrastructure
- Password encryption using industry-standard hashing protocols
While we take every reasonable precaution, no method of data transmission over the internet or electronic storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) in accordance with our legal obligations.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.
- Order data: Retained for seven years in accordance with UK tax and accounting requirements
- Customer accounts: Retained until you request deletion or account closure
- Newsletter subscriptions: Retained until you unsubscribe or withdraw consent
- Contact enquiries: Retained for up to two years after the final communication
- Analytics data: Retained in aggregated, anonymised form indefinitely for business improvement purposes
When your data is no longer required, we securely delete or anonymise it. You may request the deletion of your personal data at any time (subject to our legal obligations).
Third Party Services
To deliver our products and services, we work with carefully selected third-party service providers. We only share the minimum personal data necessary, and all third parties are contractually required to process your data securely and lawfully.
- Payment processors: Secure, PCI-DSS compliant providers who handle payment transactions — card details are never stored by The Blossom Labs
- Delivery and logistics partners: To fulfil and track your orders
- Website hosting and infrastructure: Our hosting provider processes data as part of website operations, under a GDPR-compliant data processing agreement
- Analytics services: We use Google Analytics to understand website usage. Data is anonymised and aggregated where possible. You may opt out via Google's opt-out tools
- Email marketing platforms: Used to deliver newsletters and transactional emails in a secure and compliant manner
We do not sell, trade, or share your personal information with third parties for their own marketing purposes.
Your GDPR Rights
Under UK GDPR, you have a number of important rights regarding your personal data. We are committed to helping you exercise these rights quickly and without unnecessary barriers.
Request a copy of all personal data we hold about you (Subject Access Request).
Ask us to correct any inaccurate or incomplete personal data we hold.
Request deletion of your personal data (the "right to be forgotten"), subject to legal retention requirements.
Ask us to limit how we use your data in certain circumstances while you exercise other rights.
Object to our processing of your data for direct marketing or on grounds of legitimate interests.
Receive your personal data in a portable, machine-readable format so you can transfer it to another service.
To exercise any of these rights, please contact us at support@theblossomlabs.co.uk. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children's Privacy
Our website and products are intended for adults aged 18 and over. We do not knowingly collect, process, or store personal data from individuals under the age of 18.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at support@theblossomlabs.co.uk. We will take prompt action to locate and delete any such data from our systems.
We do not display advertising specifically targeted at children or use personal data belonging to minors for any purpose.
International Users
The Blossom Labs is based in the United Kingdom and primarily serves customers in the UK. We also welcome visitors and customers from the United States, Canada, Europe, and other international locations.
If you are accessing our website from outside the United Kingdom, please be aware that your personal data may be transferred to and processed in the UK. We ensure that any international data transfers comply with applicable data protection laws and are subject to appropriate safeguards.
Our international website at blossomlabshealth.com serves our global customer base. Visitors from any region are welcome to contact us with privacy-related enquiries at info@theblossomlabs.co.uk, and we will respond in a manner that respects all applicable local laws and regulations.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after any changes have been published constitutes your acceptance of the updated policy.
Archived versions of our previous Privacy Policy are available upon request — please contact us at info@theblossomlabs.co.uk.
Get In Touch
For any privacy-related enquiries, data requests, or to exercise your rights under UK GDPR, our team is ready to assist you.
Company No. 13982346
WhatsApp: +44 7737 814999
Nottingham, United Kingdom
NG5 9RC
Your Trust is Our
Priority
At The Blossom Labs, we handle your personal data with the same care and precision we apply to our premium supplements. If you have any questions, we are always here to help.