Legal
Privacy policy
Last updated: 15 August 2026
Beam & Bloom Studio respects your privacy. This policy explains what personal information we process through this website, enquiries and our authorised Meta- and Pinterest-connected publishing tools.
1. Who we are
Beam & Bloom Studio is a small UK family business based in Hythe, Hampshire. We are the data controller for information described in this policy. Contact us at privacy@beamandbloomstudio.com.
2. Information we may collect
- your name, email address and the content of messages you send us;
- order or personalisation details you choose to discuss with us;
- basic, aggregated website performance information supplied by Vercel Analytics;
- if you accept optional analytics, Google Analytics information such as pages viewed, referral source, interactions with product enquiry links, device or browser type and approximate region;
- when an authorised administrator connects a Meta account: account, Page or Instagram profile names and identifiers, permissions granted, access tokens, selected media or post content, publishing status and technical logs;
- when an authorised administrator connects our Pinterest Business account: account, board and Pin identifiers, permissions granted, access and refresh tokens, selected original media, publishing status, organic performance information and technical logs;
- information needed to investigate security, misuse or service faults.
Purchases are completed on Etsy. Etsy collects and controls payment details and other information needed for its marketplace. Please read Etsy's own privacy policy for that processing.
3. Why we use information and our lawful bases
- Contract: to respond to an order-related request, prepare personalisation or provide a service you ask for.
- Legitimate interests: to run and improve our website, manage our own social publishing, answer enquiries, prevent misuse and keep our services secure.
- Consent: where you choose to connect a Meta or Pinterest account, or where consent is otherwise required. You may withdraw consent at any time.
- Legal obligation: where we must keep records or disclose information to comply with law.
We do not sell personal information or use Meta- or Pinterest-connected data for unrelated advertising.
4. Who we share information with
We share information only when needed with service providers that help us operate, including Meta for Facebook and Instagram connectivity, Pinterest for publishing and measuring our own Pins, Vercel for website hosting and aggregated analytics, Google for consented website analytics, Etsy for marketplace orders, and professional or public authorities where required by law. Providers may process information outside the UK; where applicable, we rely on their contractual and legal safeguards for international transfers.
5. How long we keep information
- general enquiries: normally up to 24 months after the last contact;
- Meta and Pinterest access tokens and connected-account data: until access is disconnected, no longer required or deletion is requested;
- social publishing and security logs: normally up to 12 months;
- records required for tax, accounting or legal purposes: for the period required by law, commonly up to six years.
We may retain anonymised information that can no longer identify you.
6. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict your information; to object to processing; to receive portable data; and to withdraw consent. Email us to exercise a right. We may need to verify your identity and will normally respond within one calendar month.
You may also complain to the UK Information Commissioner's Office at ico.org.uk.
7. Cookies and analytics
This site does not use advertising cookies. Vercel Analytics helps us understand aggregated site performance. Google Analytics loads only if you select “I Accept” in the cookie banner; it helps us understand where visitors come from, which pages are useful and which product links lead to enquiries or Etsy visits. If you select “I Do Not Accept”, Google Analytics is not loaded. You can change your choice later using the Cookie settings button on the site.
8. Security, children and changes
We use reasonable technical and organisational measures to protect information. No internet service can be guaranteed completely secure. Our services are not directed at children under 13 and we do not knowingly collect their information through the connected social publishing tools.
We may update this policy when our services or legal duties change. The latest version and update date will always appear on this page.