Privacy Policy

Last Revision 24th May 2018

  1. Who are we?

    1. We are Sassy Bloom Limited trading as “Sassy Bloom”. We own and operate this website. Please contact us if you have any questions or feedback about this Privacy Notice : click here.

  2. What’s the point of this Privacy Notice?

    1. This Privacy Notice tells you how we deal with your “personal data” (i.e. technical term for information about any identified or identifiable living person). Please read on to find out what kinds of personal data we collect, how we use and protect it, who we share it with, how long we keep it for and how you can access and rectify it.
    2. Please do not use our website unless you are completely happy with this Privacy Notice.

  3. Might the Privacy Notice change?

    1. It may well do. Whenever we have updated our Privacy Notice, we will alert you via email. Please take that opportunity to re-read it. We will assume you agree to the revised Privacy Notice if you use the website after the effective date shown at the top of the Privacy Notice.

  4. What personal or other data do we collect?

    1. We collect and store the information which you give us via forms on our website – such as your name, address, email address, phone number (“contact data”), information about the child whom we are personalising the order for such as the child’s name, date of birth and gender (“order information”) or when communicating with us by email, or in some other way.
    2. We also collect and store your IP address (“customer behaviour data”) to improve your shopping experience by suggesting suitable products for you, based on previous purchases.
    3. We collect your bank card details (payment information) in order to process payments and refunds.
    4. We collect survey data (biannual survey, NPS, etc.) which can include household makeup (number of kids and age bracket), age (bracket not birthday), gender and flikes and dislikes in order to understand how we are serving different types of customers and what we need to do to improve their experience.
    5. Under GDPR, we will use the lawful basis of “contractual”, where we use contact and payment data to fulfill orders. When we use contact, survey, or customer behaviour data for marketing reasons, the lawful basis will be “consent”, or “legitimate interest”. If you would like further information, please contact us using the details within this privacy notice.

  5. How do we use your personal data?

    1. We use “contact data” to provide our services : e.g. send service messages, communicate to you about your account / orders and to fulfill orders.
    2. If you have given permission, we may use your “contact data” to send you marketing emails, mails, calls or SMS with details of our, or third party goods or services which may be of interest to you, including information about special offers or promotions.
    3. We use “payment information” to process payments and refunds.
    4. We may use your IP address to recognise you when you visit, or return to our website. This allows us to track anonymised traffic and usage patterns, prevent or detect fraud and help us improve our service. We may use cookies to do this. See below the Privacy Notice.
    5. If you supply us with a friend’s email address for the “Refer A Friend” programme, we will use that email address only to send a special offer to your friend. We will provide your name in the offer email to your friend, so that they know where we obtained their contact details from.
    6. We may use information we collect on you to recommend you recipes and to improve our service for you and other customers.
    7. We retain your data during a period of 36 months months after the last order. We do that in order to comply with legal obligations, enforce our terms and conditions, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations and take other actions as permitted by law.

  6. How do we protect personal data?

    1. Security is a high priority for us. We take appropriate precautions to protect personal data. We will make every effort to look after your data and treat it with the respect it deserves.
    2. Your data will be transferred, stored and/or processed outside the EEA as our suppliers sometimes operate from outside of the EEA. We will only transfer your data outside of the EEA in compliance with data protection laws and provided appropriate or suitable safeguards are in place to protect your data, these being either Standard Contractual Clauses, Binding Corporate Rules or, in the case of transfers to the US, a Privacy Shield certification. Please contact us if you would like details of the appropriate safeguards.

  7. To whom do we disclose personal data?

    1. We may allow access to your personal data by third parties who supply us with a service. Examples include e-commerce platform providers, couriers (to enable delivery of goods), website hosts, content delivery networks and businesses which assist us in undertaking communications or monitoring our website.
    2. We share your payment information with Worldpay (our payment gateway and our payment provider) in order to process the payments of your orders and any potential refund.
    3. Your personal data may be supplied by our payment partners to relevant third parties including credit reference and fraud prevention agencies, who may keep a record of that information.
    4. We may disclose personal data so far as reasonably necessary if we have reason to believe that it breaches our terms and conditions, or that such steps are necessary to protect us or others, or that a criminal act has been committed, or if there has been a complaint about content posted by you, or if we are required to do so by law or appropriate authority.

  8. How to access and control your information?

    1. You have the right to request a copy of your information, to rectify your information, to opt out from marketing communications and to request the deletion of your information. Below, we describe the processes for making these requests.
    2. Update/rectify your information: You can easily correct/change the following personal information on “My Details” page by logging in to your account on our website:
      1. first name and last name
      2. phone number
      3. email address
      4. delivery address
      You can update the following by logging into your Worldpay Shopper Account (you will receive login details directly from Worldpay when you place an order):                               1.card details and future billing information
    3. Alternatively you can contact us : click here.
    4. Opt out of marketing communications: You can easily change your change your marketing permissions on once you have logged into your account on our website.
    5. Access your information: You have the right to request personal data that we hold about you, subject to us reserving the right to withhold such data to the extent permitted by law. Contact our Customer Care team for this request : click here
    6. Delete your information: You have the right to request to delete all the personal data that we hold about you. Contact our Customer Care team for this request : click here
    7. If you wish to contact us about anything to do with your data and Gousto, please contact us : click here
    8. For information about your rights under UK data protection laws, see the website of the UK Information Commissioner.
    9. You can report any concern to the ICO by clicking here.