Privacy Policy

Last updated: September 2024

1. Introduction

Blossom-beaver ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website blossom-beaver.com or use our financial education services.

Please read this privacy policy carefully. By using our website and services, you consent to the practices described in this policy.

2. Information We Collect

We may collect information about you in a variety of ways:

Personal Data

When you book a session or make an enquiry, we may collect:

• Full name
• Email address
• Information about your financial situation that you choose to share
• Service preferences and booking details

Automatically Collected Information

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• Pages visited and time spent on those pages
• Referring website addresses
• IP address (anonymised where possible)

3. How We Use Your Information

We use the information we collect to:

• Process and manage your service bookings
• Communicate with you about your sessions and enquiries
• Prepare personalised educational content for your sessions
• Send follow-up materials and resources after sessions
• Improve our website and services based on usage patterns
• Comply with legal obligations

4. Legal Basis for Processing

Under UK data protection law, we process your personal data based on:

• Contract: Processing necessary to fulfil our service agreement with you
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
• Consent: Where you have given explicit consent for specific processing activities
• Legal obligation: Processing required to comply with applicable laws

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, typically:

• Service records: 7 years from the date of last service, in line with professional standards
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months from collection

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Staff training on data protection
• Access controls limiting who can view personal data

7. Third-Party Services

We may share your information with third-party service providers who assist us in operating our website and delivering our services, such as:

• Website hosting providers
• Email service providers
• Video conferencing platforms (for remote sessions)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

8. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request that we limit how we use your data
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected].

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Blossom-beaver
47 Prosperity Lane
London, EC2A 4NE
United Kingdom
Email: [email protected]

12. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.