Effective Date: 2 June 2025

Business Name: Ellie in Bloom

Contact Email: colouranalysis@ellieinbloom.com

At Ellie in Bloom, I am committed to protecting and respecting your privacy. This Privacy Policy explains how I collect, use, store, and protect your personal data when you visit my website, book a colour analysis session, or communicate with me.

1. Important Information and Who I Am

For the purposes of the UK General Data Protection Regulation (UK GDPR), I am the Data Controller responsible for your personal data.

If you have any questions about this privacy policy or how your data is handled, please contact me at: colouranalysis@ellieinbloom.com.

2. The Data I Collect About You

To provide you with a highly precise 16-subseason colour analysis and style consultation, I may collect and process the following types of personal data:

• Identity Data: Your name, title, and date of birth (if relevant to a specific milestone consultation).

• Contact Data: Your email address, phone number, and billing address.

• Consultation Data: Information you share with me about your style goals, life transitions (e.g., career changes, relationship changes), and any notes I take during our sessions to help you find your true colours.

• Visual Data: Headshots or photographs provided by you for digital colour analysis, or photos taken during our in-person sessions (only with your explicit consent).

• Financial Data: Payment details processed securely via our third-party payment gateway (e.g., Stripe, PayPal). I do not store your credit/debit card details.

• Technical & Usage Data: Information about how you use my website, your IP address, and browser type (collected via cookies).

3. How I Use Your Personal Data

I will only use your personal data when the law allows me to. Most commonly, I use your data in the following circumstances:

• To perform our contract: To book your session, communicate updates, and deliver your bespoke 16-subseason colour results.

• With your explicit consent: To use your before-and-after photographs for marketing or testimonial purposes on my website or social media. You can withdraw this consent at any time.

• For legitimate interests: To improve my services, respond to your enquiries, and send you occasional newsletter updates if you have opted in to receive them.

4. How Your Data is Shared

I value your privacy and never sell your data to third parties. To run my business smoothly, I only share your data with trusted service providers who adhere to strict data protection standards:

• Booking & Scheduling Software (to manage your appointments).

• Payment Processors (to handle secure transactions).

• Email Marketing Platforms (if you choose to subscribe to my newsletter).

• Professional Advisors or legal authorities, if required by UK law.

5. Data Security & Retention

I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

• Retention: I will only keep your personal data for as long as necessary to fulfil the purposes I collected it for, including satisfying any legal, accounting, or reporting requirements.

• Consultation Notes & Photos: Digital photos used for your analysis will be securely stored and deleted [Insert Timeline, e.g., 6 months / 1 year] after our final session, unless you consent to me keeping them to track your style journey or for marketing.

6. Your Legal Rights

Under the UK GDPR, you have rights regarding your personal data, including the right to:

• Request access to the personal data I hold about you.

• Request correction of any inaccurate or incomplete data.

• Request erasure of your personal data ("the right to be forgotten").

• Object to or restrict the processing of your data.

• Withdraw consent at any time where I am relying on consent to process your data (such as for marketing or using your photos).

To exercise any of these rights, please email me at colouranalysis@ellieinbloom.com

7. Third-Party Links

This website may include links to third-party websites (for example, booking platforms or social media). Clicking on those links may allow third parties to collect or share data about you. I do not control these websites and am not responsible for their privacy statements.

8. Changes to this Privacy Policy

I may update this policy from time to time to reflect changes in my practices or for legal reasons. The latest version will always be posted on this page.

How to lodge a complaint: > If you are unhappy with how I handle your data, please contact me directly so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).