Privacy policy

Last updated: October 26, 2026

This Privacy Policy explains how Konstant Group Ltd (trading as Well and Bloom, "we", "us", "our") collects, uses and shares personal information when you visit wellandbloom.com, buy from us or contact us. We are a company registered in England and Wales (company number 17522402) with our registered office at 128 City Road, London EC1V 2NX, United Kingdom. We are the controller of your personal information under the UK GDPR and the EU GDPR.

The short version

  • We collect what we need to take your payment, deliver your order and look after you afterwards.
  • To deliver your order we share your name, delivery address, phone number (if you give one) and order contents with suppliers, fulfilment partners and carriers. Some of them are outside the UK and EU, including in China.
  • We use analytics and advertising cookies only where you allow them, or where the law lets us.
  • We do not sell your personal information for money.
  • You can ask to see, correct or delete your information at any time by emailing support@wellandbloom.com.

Information we collect

  • Order and contact details: name, email, phone number, billing and delivery address, and what you bought.
  • Payment details: handled by our payment providers. We do not see or store your full card number.
  • Account details: if you create an account, your login details and preferences.
  • Messages: what you send us (emails, forms, photos for a damaged-item claim) and what we send you.
  • Device and usage data: IP address, browser, device, pages viewed, how you arrived at our site, and basic location (country or region) from cookies and similar technologies.
  • Reviews and photos you choose to submit.
  • Fraud-prevention signals from Shopify and our payment providers.

How and why we use it

  • To take, deliver and support your order (including payments, shipping, returns, refunds and customer service). Legal basis: performing our contract with you.
  • To prevent fraud and keep our site secure. Legal basis: our legitimate interests in protecting our business and customers.
  • To keep legal, tax and accounting records. Legal basis: legal obligation.
  • To send marketing emails or texts. Legal basis: your consent, or for existing UK customers our legitimate interests in telling you about similar products (you can opt out in every message).
  • To measure how our site is used and improve it. Legal basis: your consent where cookies require it, otherwise our legitimate interests.
  • To show you our ads on other platforms and measure whether they work. Legal basis: your consent where required, otherwise our legitimate interests.

We do not make decisions with legal or similarly significant effects based only on automated processing. Our platform and payment providers use automated fraud screening, and if an order is flagged you can email us to have a person review it.

Who we share it with

  • Shopify, which hosts our store, runs checkout and provides fraud analysis.
  • Payment providers such as Shopify Payments, PayPal and the card networks.
  • Suppliers, fulfilment partners, order-management providers and carriers, who need your name, delivery address, phone number (if given) and order contents to pack and deliver your parcel.
  • Email, customer-support and review tools that work on our behalf.
  • Advertising and analytics partners such as Meta, Google and TikTok, through cookies and pixels, where you allow them.
  • Professional advisers, regulators and law enforcement where we are legally required or need to protect our rights.
  • A buyer of our business, if we are ever sold or restructured.

We do not sell your personal information for money. See Your Privacy Choices for how advertising cookies are treated under US state laws.

International transfers

Our suppliers and fulfilment partners operate outside the UK and the European Economic Area (including in China), and some of our service providers are in the United States. Sending your delivery details to them is necessary for us to fulfil your order. Where the law requires safeguards for these transfers, we use adequacy decisions where they exist, the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, and where none of these apply we rely on the exception for transfers that are necessary to perform our contract with you (Article 49(1)(b) of the GDPR). The laws of those countries may allow authorities to access data in ways that differ from UK and EU law. If you would rather your details were not sent to such partners, please do not place an order, as we cannot fulfil it without them. You can ask us for a copy of the safeguards we use.

How long we keep it

  • Order, invoice and payment records: 6 years, to meet UK tax and accounting rules.
  • Customer support messages: up to 3 years after the last contact.
  • Marketing preferences and subscriber details: until you unsubscribe or ask us to stop.
  • Cookie and analytics data: for the lifetime of each cookie, as described in our Cookie Policy.

Your rights

Under the UK GDPR and EU GDPR you can ask us to: give you a copy of your information; correct it; delete it; restrict how we use it; send it to you or another company in a portable format; and stop using it for direct marketing or where we rely on legitimate interests. Where we rely on your consent you can withdraw it at any time, without affecting what we did before. To use any of these rights, email support@wellandbloom.com. We will reply within one month, we do not charge a fee, and we may need to check your identity first.

Complaints

Please contact us first so we can put things right. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in the country where you live or work.

US residents

If you live in a US state with a privacy law (for example California, Colorado, Connecticut, Texas, Virginia or Washington), you may have additional rights, including to opt out of targeted advertising and the sharing of your data for it. See Your Privacy Choices.

Cookies

We use cookies and similar technologies. See our Cookie Policy for details and how to change your choices.

Children

Our store is for adults and is not directed at children under 16. We do not knowingly collect their personal information. If you think a child has given us information, email support@wellandbloom.com and we will delete it.

Security

We use reasonable technical and organisational measures to protect your information, including encrypted checkout through Shopify. No system is completely secure, so we cannot guarantee absolute security.

Relationship with Shopify

Our store is hosted by Shopify, which collects and processes information about your use of our store to provide and improve the service. For some enhanced features, Shopify is responsible for its own use of your information. You can read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to exercise your rights over that data.

Third-party links

Our site may link to other websites. We are not responsible for their privacy practices, so please read their policies.

Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "Last updated" date, and tell you directly if the changes are significant.

Contact us

Konstant Group Ltd, trading as Well and Bloom
Company number 17522402
Registered office: 128 City Road, London EC1V 2NX, United Kingdom
Email: support@wellandbloom.com
Phone: +44 20 3996 0437