FabFinds Limited respects your privacy and is committed to protecting your personal data.
Sugar Bloom is a trading brand of FabFinds Limited. This Privacy Policy explains how FabFinds Limited, trading as Sugar Bloom, collects, uses, stores, and protects your personal data when you visit or use the Sugar Bloom website, purchase products from us, contact us, sign up to receive marketing, or otherwise interact with Sugar Bloom.
It also explains your privacy rights and how UK data protection law protects you.
We may update this Privacy Policy from time to time. The latest version will be published on the Sugar Bloom website.
Who We Are
For the purposes of UK data protection law, FabFinds Limited is the data controller responsible for personal data collected through Sugar Bloom.
Sugar Bloom is a trading brand of FabFinds Limited and is not a separate legal entity.
Legal entity: FabFinds Limited
Trading as: Sugar Bloom
Company number: 10809071
Registered office: 1 Hallaton Street, Leicester, LE2 8QY, United Kingdom
Email: marketing@sugarbloom.co.uk
If you have any questions about this Privacy Policy, how we use your personal data, or wish to exercise any of your data protection rights, please contact us using the details above.
The Personal Data We Collect
Personal data means information which identifies you or could reasonably be used to identify you.
Depending on how you interact with Sugar Bloom, we may collect the following types of information.
Identity and Contact Information
This may include:
-
Your name
-
Billing address
-
Delivery address
-
Email address
-
Telephone number
-
Account details
-
Details about a gift recipient where you ask us to send a product directly to another person
Order and Transaction Information
This may include:
-
Products you purchase
-
Order numbers
-
Order values
-
Delivery information
-
Returns and refunds
-
Discount or promotional codes used
-
Gift card information
-
Previous transactions with us
-
Correspondence relating to an order
Payment Information
Payment information is generally processed securely by our authorised payment providers.
We may receive limited information relating to a payment, such as confirmation that payment has been made, payment method, transaction reference, and information necessary to process a refund.
We do not ordinarily store full payment card details on our own systems.
Technical and Website Usage Information
When you use our website, we may automatically collect information such as:
-
IP address
-
Browser type and version
-
Device type
-
Operating system
-
Pages viewed
-
Products viewed
-
Items added to your basket
-
Referring website or source
-
Time spent on our website
-
Website interactions
-
Cookie and advertising identifiers
-
Information about how you navigate and use our website
Profile and Preference Information
This may include:
-
Products or categories you have shown an interest in
-
Wishlist information
-
Saved addresses
-
Marketing preferences
-
Communication preferences
-
Shopping behaviour
-
Responses to surveys or promotions
-
Preferences inferred from your interaction with our website, where permitted
Communications
We may keep records of communications between you and Sugar Bloom, including:
-
Emails
-
Online chat messages
-
Customer-service enquiries
-
Social-media messages sent directly to us
-
Telephone communications where applicable
-
Complaints, returns, and other correspondence
How We Collect Your Personal Data
We collect personal data in several ways.
Information You Give Us
You may provide personal data when you:
-
Place an order
-
Create an account
-
Contact us
-
Sign up for marketing
-
Complete an online form
-
Create or use a wishlist
-
Enter a promotion
-
Respond to a survey
-
Leave a review
-
Request a return or refund
-
Communicate with us through email, telephone, online chat, or social media
Information Collected Automatically
We may collect technical and usage information automatically when you use the Sugar Bloom website through cookies, pixels, and similar technologies.
Further information is provided in the Cookies and Similar Technologies section below.
Information We Receive From Other Organisations
We may receive information from organisations that help us provide our services, including:
-
Payment and fraud-prevention providers
-
Delivery companies
-
Ecommerce and website service providers
-
Marketing and analytics providers
-
Review platforms
-
Social-media and advertising platforms
For example, a payment provider may tell us whether a payment has been authorised, and a delivery provider may provide information about the status of your delivery.
How We Use Your Personal Data
We only use personal data where we have a lawful basis for doing so.
Depending on the circumstances, we may rely on performance of a contract, compliance with a legal obligation, legitimate interests, or consent.
Processing Your Orders
We use your personal data to:
-
Accept and process orders
-
Take or arrange payment
-
Arrange delivery
-
Provide order updates
-
Manage returns
-
Process refunds
-
Respond to problems with an order
-
Provide customer service
We generally process this information because it is necessary to perform our contract with you or to take steps at your request before entering into a contract.
Customer Service
We use personal data to respond to questions, complaints, returns, product enquiries, and other requests.
Depending on the nature of the enquiry, we may process this information because it is necessary to perform our contract with you or because it is in our legitimate interests to provide effective customer service and maintain appropriate records.
Fraud Prevention and Website Security
We may use personal data to:
-
Protect our website
-
Detect suspicious activity
-
Prevent fraud
-
Verify transactions
-
Protect Sugar Bloom, FabFinds Limited, our customers, and other users
-
Investigate security incidents
We process this information where necessary for our legitimate interests in protecting our business and customers and, where relevant, to comply with our legal obligations.
Improving Our Website and Services
We may analyse website activity, orders, customer behaviour, and other information to:
-
Understand how customers use our website
-
Improve website performance
-
Identify technical issues
-
Improve our products and services
-
Understand product demand
-
Analyse business performance
-
Carry out forecasting and reporting
Depending on the technology and information involved, we may rely on our legitimate interests or your consent.
Where consent is legally required before using cookies or similar technologies, we will request that consent through our cookie controls.
Legal and Regulatory Requirements
We may process and retain personal data where necessary to:
-
Comply with tax and accounting requirements
-
Respond to legal claims
-
Comply with regulatory requirements
-
Respond to lawful requests from authorities
-
Protect or enforce our legal rights
The lawful basis for this processing may be compliance with a legal obligation or our legitimate interests in establishing, exercising, or defending legal rights.
Marketing
We may use your contact information to send you information about Sugar Bloom products, new arrivals, offers, and other relevant marketing.
Where required, we will only send electronic marketing where you have consented to receive it.
In certain circumstances, we may also send marketing to existing customers about our own similar products where the law allows us to rely on the existing-customer marketing exception, sometimes referred to as the "soft opt-in".
Where we rely on this approach, you will have been given an opportunity to opt out when your information was collected and you will be given a clear way to unsubscribe from every subsequent marketing communication.
You can unsubscribe from marketing at any time by:
-
Using the unsubscribe link included in our marketing emails
-
Updating your available marketing preferences
-
Contacting us at marketing@sugarbloom.co.uk
Opting out of marketing does not prevent us from contacting you about an order, account, return, refund, or another service-related matter.
We currently use Omnisend to assist with the delivery and management of email marketing communications.
Personalised Advertising
Where you have provided the required consent, we may use information about your interaction with our website to help us provide more relevant advertising.
This may involve advertising and social-media platforms such as:
-
Meta, including Facebook and Instagram
-
Google
-
Pinterest
These services may use cookies, pixels, or similar technologies to understand website activity, measure advertising performance, create audiences, and display advertising.
Where consent is required, advertising and tracking technologies will not be activated until the appropriate consent has been provided.
You can change your available cookie and tracking preferences using the controls provided on our website.
Cookies and Similar Technologies
Like most ecommerce websites, Sugar Bloom uses cookies and similar storage and access technologies.
Cookies are small pieces of information placed or accessed on your browser or device. They can help websites recognise your device, remember information, maintain shopping baskets, provide functionality, measure website performance, and support advertising.
We may use technologies including cookies, pixels, tags, and similar tools.
Strictly Necessary and Permitted Technologies
Some technologies are necessary for the website to operate or may otherwise be used without consent where permitted by law.
These may be used for purposes such as:
-
Keeping the website secure
-
Maintaining your shopping basket
-
Processing checkout
-
Remembering privacy choices
-
Preventing fraud
-
Providing functionality you have specifically requested
Analytics and Performance
We may use analytics technologies to help us understand how visitors use our website and to improve its performance.
Where consent is required by law for a particular analytics technology, we will obtain your consent before using it.
Advertising and Marketing
Advertising technologies may be used to:
-
Measure advertising effectiveness
-
Understand whether someone has interacted with an advert
-
Create advertising audiences
-
Show more relevant advertising
-
Limit how often an advert is displayed
Where consent is required, these technologies will only be used after consent has been provided.
Managing Your Cookie Choices
Where applicable, our website provides controls that allow you to accept, reject, or manage categories of cookies and similar technologies.
You can change your choices where the relevant controls are made available.
You can also control cookies through your browser settings, although blocking some cookies may affect the operation or functionality of the website.
Simply continuing to browse the website is not treated as consent where the law requires a positive consent choice.
Who We Share Personal Data With
We may share personal data with trusted third parties where this is necessary to operate Sugar Bloom, fulfil orders, provide services, meet legal requirements, or pursue our legitimate business interests.
Depending on the circumstances, these organisations may act as processors acting on our instructions or as independent controllers responsible for their own use of personal data.
Delivery and Fulfilment Providers
We may provide your name, delivery address, contact details, and necessary order information to organisations involved in delivering your order.
These may include delivery providers such as:
-
DPD
-
Evri
-
Parcelforce
-
Royal Mail
We may also use order-management, dispatch, and fulfilment service providers, including services such as Zenstores and StoreFeeder.
Payment Providers
Payment providers may process payment and fraud-prevention information in connection with your order.
These may include providers such as:
-
PayPal
-
Stripe
Payment providers may process certain personal data as independent controllers under their own privacy policies.
Website and Technology Providers
We may share or make personal data available to organisations that provide:
-
Website and ecommerce infrastructure
-
Hosting
-
IT support
-
Database services
-
Security
-
Order management
-
Customer service technology
-
Analytics
These organisations may process information on our behalf to provide their services.
Marketing Providers
We may use organisations that provide email, advertising, analytics, audience measurement, and marketing services.
These may include:
-
Omnisend
-
Meta
-
Google
-
Pinterest
The information shared and the legal basis used will depend upon the particular service and your privacy choices.
Review Platforms
We may use review services such as Trustpilot to collect feedback about Sugar Bloom and the products or services you have received.
Where appropriate, we may provide limited information necessary to invite you to leave a review.
Trustpilot may act as an independent controller in relation to personal data it processes and will have its own privacy information explaining how it uses that data.
Professional Advisers and Authorities
We may disclose personal data to professional advisers such as accountants, insurers, lawyers, or auditors where reasonably necessary.
We may also disclose information to regulators, law-enforcement agencies, courts, government bodies, or other authorities where required or permitted by law.
We Do Not Sell Your Personal Data
We do not sell your personal data.
Where we share information with advertising, analytics, ecommerce, fulfilment, or other service providers, we do so for the purposes explained in this Privacy Policy and subject to applicable data protection and privacy laws.
International Transfers
Some of the organisations and technology providers we use may process or store personal data outside the United Kingdom.
Where personal data is transferred internationally and UK data protection law restricts that transfer, we will use an appropriate lawful transfer mechanism.
Depending on the destination and provider, this may include:
-
UK adequacy regulations
-
The UK International Data Transfer Agreement
-
The UK Addendum to approved standard contractual clauses
-
Another safeguard or exception permitted under applicable data protection law
Where required, we will also consider whether additional measures are necessary to protect personal data.
You can contact us at marketing@sugarbloom.co.uk if you would like further information about the safeguards relevant to a particular transfer.
Third-Party Links
The Sugar Bloom website may contain links to websites, services, or platforms operated by other organisations.
Those organisations are responsible for their own privacy practices.
We do not control third-party websites and recommend that you review the relevant privacy information before providing personal data to another organisation.
Social Media
Sugar Bloom may operate accounts on social-media platforms such as Facebook, Instagram, Pinterest, TikTok, and other platforms.
If you interact with us through a social-media platform, both Sugar Bloom and the relevant platform may receive information about that interaction.
The social-media platform is responsible for explaining how it processes personal data through its own privacy policy and account settings.
Information you choose to make public on social media may be visible to other users.
Data Security
We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, disclosure, or access.
We restrict access to personal data to employees, contractors, and service providers who require access for legitimate business purposes.
Where third parties process personal data on our behalf, we require appropriate data-protection obligations to be in place where required by law.
We also maintain procedures for identifying and responding to suspected personal-data breaches and will notify affected individuals and the Information Commissioner's Office where legally required.
How Long We Keep Your Personal Data
We do not keep personal data for longer than is reasonably necessary for the purpose for which it was collected, taking into account our legal, accounting, regulatory, contractual, and reporting obligations.
The period for which information is retained depends on the type of data and why we hold it.
For example:
-
Order and transaction records may be retained for the period necessary to meet accounting, tax, consumer-law, and legal-claims requirements.
-
Customer-service communications may be retained for as long as reasonably necessary to deal with the enquiry and maintain an appropriate record.
-
Account information may be retained while an account remains active and for an appropriate period afterwards.
-
Marketing information may be retained while you remain subscribed. If you unsubscribe, we may retain limited information on a suppression list to ensure that your marketing preference continues to be respected.
-
Website and analytics information is retained in accordance with the settings and retention periods applying to the relevant technology or provider.
-
Cookie durations may vary depending on their purpose and will be managed through our cookie and consent systems where applicable.
We may retain information for longer where required by law, where there is an ongoing dispute or legal claim, or where there is another lawful reason to do so.
Where personal data is no longer required, we will delete, anonymise, or otherwise securely dispose of it as appropriate.
We may retain anonymised information indefinitely where it can no longer identify an individual.
Your Data Protection Rights
Depending on the circumstances and the lawful basis on which we process your personal data, you may have the following rights.
Right of Access
You can ask us whether we process your personal data and request a copy of the personal data we hold about you.
This is commonly known as a Subject Access Request.
Right to Rectification
You can ask us to correct personal data which is inaccurate or complete information which is incomplete.
Right to Erasure
In certain circumstances, you can ask us to delete your personal data.
This right does not apply in every situation. For example, we may need to retain certain information to comply with a legal obligation or establish, exercise, or defend a legal claim.
Right to Restrict Processing
In certain circumstances, you can ask us to restrict how we use your personal data.
Right to Data Portability
Where the legal requirements are met, you may be entitled to receive certain personal data in a structured, commonly used, machine-readable format or ask us to transfer it to another organisation.
Right to Withdraw Consent
Where we rely upon consent to process your personal data, you can withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Your Right to Object
You have the right to object at any time to the use of your personal data for direct marketing.
You may also have the right to object where we rely on legitimate interests as our lawful basis. Where this applies, we will stop processing unless we can demonstrate compelling legitimate grounds which override your rights and interests or the information is required for legal claims.
Exercising Your Rights
To exercise your data protection rights, contact:
Sugar Bloom
FabFinds Limited trading as Sugar Bloom
1 Hallaton Street
Leicester
LE2 8QY
United Kingdom
Email: marketing@sugarbloom.co.uk
You do not usually have to pay a fee to exercise your data protection rights.
We may need to request information reasonably necessary to confirm your identity before disclosing personal data or acting on certain requests.
We will respond to valid requests within the timescales required by applicable data protection law.
For a Subject Access Request, this will normally be within one month once we have the information reasonably required to deal with the request. In certain circumstances permitted by law, the response period may be extended, and we will explain this to you where applicable.
Complaints
If you have concerns about how Sugar Bloom or FabFinds Limited has handled your personal data, please contact us first at:
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.
Information about making a complaint can be found on the ICO website at www.ico.org.uk.
Changes to This Privacy Policy
We may update this Privacy Policy where our business practices, technology, service providers, or legal obligations change.
Where appropriate, we will notify you of significant changes.
The date shown at the top of this Privacy Policy indicates when it was last updated.
Contact Us
For privacy enquiries or requests relating to your personal data, please contact:
FabFinds Limited trading as Sugar Bloom
1 Hallaton Street
Leicester
LE2 8QY
United Kingdom
Company number: 10809071
Email: marketing@sugarbloom.co.uk
FabFinds Limited is the data controller responsible for personal data processed in connection with the Sugar Bloom website and Sugar Bloom's operations.
Last updated: 1 October 2026