Privacy notice

Who is responsible

Blossom Breeze is the data controller for personal data collected through this website and its retail operations. The shop is located at 214, Triq il-Belt Valletta, Qormi, Malta. Privacy requests can be made in person, on +356 9902 0605 or at blossombreeze214@gmail.com.

Data we process

Depending on use, we may process a name, email address, telephone number, delivery and billing details, company and VAT details, order contents, customer notes, fulfilment status, tracking number, coupon use, payment status, correspondence, consent choices, device and security information, and records needed for returns or complaints. Card details are entered on the secure hosted payment page and are not stored by Blossom Breeze.

Purposes and legal bases

• To respond to enquiries and take requested steps before a contract.
• To process, deliver, collect, cancel, refund, track and support orders under a contract.
• To keep tax, accounting and consumer records where required by law.
• To secure the website, prevent fraud, enforce coupon limits and defend legal claims based on legitimate interests.
• To send optional marketing or load optional analytics only with consent, which can be withdrawn at any time.

Who receives data

Data is shared only where needed with providers supporting hosting, security, payment, delivery, transactional email, consented analytics, professional advice and legal compliance. Providers receive only the data needed for their task and act under applicable duties and safeguards.

International transfers

Some providers may process data outside Malta or the European Economic Area. Where required, transfers rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

Retention

Order, tax and accounting records are retained for the period required by Maltese law. Enquiries are kept while needed to respond. Security logs and failed checkout records are retained for a limited operational period. Consent records are kept while needed to demonstrate and respect a choice. Data may be kept longer for a legal claim, dispute, fraud investigation or legal hold.

Tracking privacy

The tracking page returns limited order progress associated with a high-entropy tracking number. It does not display the customer's name, address, email, telephone number, payment details or item list. Keep the tracking link private and contact the shop if it may have been shared.

Your rights

Subject to the GDPR and applicable limits, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent without affecting earlier lawful processing. Identity may need to be verified before a request is completed.

Complaints

Please contact Blossom Breeze first so the concern can be addressed. You may also complain to Malta's Information and Data Protection Commissioner at idpc.org.mt, or to the supervisory authority where you live or work.

Automated decisions and changes

Blossom Breeze does not currently make decisions producing legal or similarly significant effects solely by automated means. This notice may be updated when the service or legal requirements change. The date above identifies the current version.