Driftbloom is the trading name of GLOBAL TECH BFD LTD (Company No. 15445491), registered at 21 Daisy Street, Bradford, West Yorkshire, BD7 3PL, United Kingdom, directed by Imran Tariq. We are the data controller for personal data processed through this website. Contact: hello@driftbloom.co.uk or +44 7446765677.
1. What we collect and why
- Order data — your name, delivery address, email address and phone number, collected when you place an order. Legal basis: performance of a contract. Used to process, deliver and support your order.
- Payment data — handled directly by our payment processor (Stripe). We never see or store your full card details. Legal basis: performance of a contract.
- Customer service correspondence — emails and messages you send us. Legal basis: legitimate interests (responding to you and keeping records of what was agreed).
- Strictly necessary cookies — see our Cookie Policy. We do not run advertising or third-party analytics trackers on this site.
- Newsletter sign-ups — your email address, only if you choose to subscribe via the footer form. Legal basis: consent. We store it solely to send you occasional product updates, we never share it for marketing, and you can unsubscribe at any time by emailing hello@driftbloom.co.uk.
2. Who we share data with
We share your data only with the service providers needed to fulfil your order: our payment processor (Stripe) and our delivery couriers (Royal Mail, Evri). We do not sell personal data, and we do not share it with marketing platforms. Where a provider processes data outside the UK, transfers are protected by UK-approved safeguards such as the UK GDPR adequacy framework or standard contractual clauses.
3. How long we keep data
Order and transaction records are kept for six years after the tax year of the transaction, as required for UK tax and accounting purposes (HMRC). Customer service correspondence is kept for as long as needed to resolve the matter and for a reasonable period afterwards. Data no longer needed is deleted or anonymised.
4. Your rights
Under the UK GDPR you have the right to access your personal data, to have inaccurate data corrected, to have data erased where there is no continuing reason to keep it, to restrict or object to processing, and to data portability. To exercise any right, email hello@driftbloom.co.uk — we respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
5. Security
This site is served over HTTPS. Payment is handled by Stripe under PCI-DSS. Access to order data is limited to the people who need it to run the business.
6. Changes to this policy
We will update this page if our data practices change, and the “last updated” date below will always reflect the current version. Last updated: July 2026.
