Privacy notice
Last updated: 28 March 2023
1. Purpose of this privacy notice
Bloomworks Legal Limited (“Bloomworks Legal”, “we” or “us”) is committed to protecting your personal data and processing it in accordance with applicable privacy and data protection law. This privacy notice applies to all processing of your personal data by Bloomworks Legal, when you use this website (www.bloomworkslegal.com or www.bloomworks.legal), sign up to our newsletter or receive our services as a client. It explains:
how we collect, receive, use, store, share, transfer and process personal data;
our reasons for processing personal data; and
your legal rights in relation to your personal data.
By visiting our website, signing up for our newsletter or using our services, you are agreeing to the terms of this privacy notice. We may update this privacy notice from time to time, without notifying you.
2. Who we are
Bloomworks Legal Limited is a company registered in England and Wales.
Registered Office: 124 City Road, London, United Kingdom, EC1V 2NX
Company number: 14620092
We are registered with the Information Commissioner’s Office under the Data Protection Act 2018 (registration reference: ZB526335).
3. Our role in relation to your personal data
We act as data controller of the personal data you give us when you use this website, (www.bloomworkslegal.com or www.bloomworks.legal), sign up to our newsletter or receive our services as a client.
4. How and why we process personal data
The type of personal data we process will depend on our relationship with you. We only process personal data when we have a purpose and a lawful basis to do so.
If you’re a website user:
Data we collect, store and use: Name, email address, any personal data (about you or third parties) you provide via our contact form, IP address, browser type, device type, clicks, pages visited and similar technical information.
Purpose: To respond to requests we receive from you via our contact form and to ensure our website works properly and is visible to you.
Lawful basis: Legitimate interests.
If you subscribe to our email newsletter:
Data we collect, store and use: Name, email address, analytics about how you engage with our newsletter.
Purpose: To provide you with information about our services and useful resources, for marketing purposes. We run our newsletter on Substack (www.substack.com), a third party publishing platform. When you sign up to our newsletter, we act as the data controller and Substack, as processor, processes your personal data on our behalf. Substack may act as a data controller where it collects certain data on how you engage with the newsletter (e.g. views and links you click) for its own purposes. More information about Substack’s privacy practices is available at https://substack.com/privacy. You may unsubscribe from our newsletter immediately by clicking on the “unsubscribe” link located within each email, or by contacting us at hello@bloomworkslegal.com. If you’d prefer not to subscribe at all, you may read all newsletter posts via our newsletter landing page at https://bloomworkslegal.substack.com/.
Lawful basis: Consent.
If you’re a client:
Data we collect, store and use: Name, title, job title, contact information, identity documents, proof of address, information provided in order to obtain legal advice and consulting services (which may include personal data about you or third parties), financial and billing information, client feedback.
Purpose: To check the identity of new clients, register them to receive our services, provide legal advice and consulting services, process payments, manage our client relationships and administer our business.
Lawful basis: Legitimate interests, to perform a contract with you and/or to comply with our legal, regulatory, accounting, tax or reporting obligations.
We do not collect:
any “special category” personal data about you (for example information about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, genetic and biometric data or criminal convictions and offences); or
data relating to children.
5. Who we share your personal data with
We may share the personal data we process with:
third party service providers (e.g. website hosting providers, cloud service providers, email providers, payment services providers, or our newsletter publishing platform), as long as we have an appropriate contract and other industry-standard safeguards in place to protect the personal data;
regulatory authorities, government authorities, courts or law enforcement, as long as disclosure is legally required, needed for us to exercise or defend our legal rights, or to protect a person’s vital interests;
our own consultants, lawyers, accountants, insurers or advisors; or
any other person if the relevant data subjects have consented.
We do not sell any personal data to third parties or use automated decision-making or profiling when we process personal data.
6. International transfers
We are based in the United Kingdom. Your personal data may be shared with, and processed by, third parties (such as service providers) located in countries outside of the United Kingdom and European Economic Area. In these cases, we either:
transfer only to countries that are recognised by the appropriate UK and/or EU authorities as having adequate data protection laws; or
put in place appropriate safeguards, such as entering into approved standard contracts.
7. Retention
We will keep your personal data for as long as we need to for the purposes described in this privacy notice. After this we will either delete it or anonymise it so that you are no longer identifiable from it. We may keep your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
8. Your rights
You have the following rights under data protection law:
the right to access the personal data we hold about you;
the right to ask us to correct inaccurate personal data or complete personal data that is incomplete;
the right to ask us to delete your personal data under certain circumstances;
the right to restrict our processing of your personal data under certain circumstances;
the right to object to processing under certain circumstances; and
the right to ask us to transfer your personal data to another organisation, or to you, under certain circumstances.
Where we are processing your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not make any of our previous processing unlawful. If we are processing your personal data on a different basis (e.g. our legitimate interests) then we may continue to do so even after you withdraw your consent.
Please contact us at hello@bloomworkslegal.com if you wish to exercise any of these rights. You are not required to pay any fee to exercise your rights, unless your request is clearly unfounded, repetitive or excessive.
We respond to all requests in line with the requirements of applicable data protection law. If your request is particularly complex or you have made several requests, we will notify you of our timelines and keep you updated.
9. Cookies
This website uses cookies and similar technologies. Cookies are small files or pieces of data that websites store on a device when a visitor accesses a website or app (for example, to remember your preferences). We have disabled all analytics and performance cookies on our website and we only use cookies that are strictly necessary to deliver the website to you. These include functional and required cookies, which allow Squarespace, our hosting platform, to securely serve this website to you.
10. Contact us
If you have any questions or concerns about how we process your personal data, or would like to exercise any of the legal rights listed above, please contact us by sending an email to hello@bloomworkslegal.com.
If you have contacted us with a concern that we are unable to resolve, you also have the right to lodge a complaint with the UK’s data protection authority, the Information Commissioner’s Office (www.ico.org.uk).