Privacy policy

Last updated: 1 November 2026

Rose Edinburgh is operated by Studio Bloom by M, a business registered in the Netherlands. We operate the website https://www.roseedinburgh.co.uk, including its related information, content, features, products and services (the "Services").

Our online store is powered by Shopify.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, make a purchase, contact us or otherwise interact with our Services.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect:

- Contact details: Your name, billing address, shipping address, telephone number and email address.
- Payment information: Payment method, transaction details and payment confirmation. Payment information is processed through our payment providers.
- Account information: Account credentials, preferences and settings, where customer accounts are available.
- Order information: Products you view or purchase, shopping cart activity, order history, returns and cancellations.
- Communications: Messages and enquiries you send to our customer service team.
- Device information: Browser type, device information, IP address and network identifiers.
- Usage information: How you interact with our website, including pages visited and shopping activity.

2. How We Collect Your Information

We collect personal information:

- Directly from you when you place an order, create an account or contact us.
- Automatically through our website, including cookies and similar technologies.
- From service providers that process information on our behalf.
- From advertising, analytics and other partners, where applicable and permitted by law.

3. How We Use Your Information

We use personal information to:

- Process payments, fulfil orders and arrange deliveries.
- Handle returns, refunds and customer enquiries.
- Maintain customer accounts and improve our website.
- Send marketing communications where permitted by law.
- Provide relevant advertising where appropriate consent has been obtained.
- Detect fraud and protect our website and customers.
- Comply with legal obligations and resolve disputes.

Where UK GDPR or EU GDPR applies, our lawful bases may include performance of a contract, compliance with legal obligations, legitimate interests and consent, depending on the processing activity.

4. Sharing Your Information

We may share necessary personal information with:

- Shopify, our ecommerce platform provider.
- Payment processing providers.
- Shipping, fulfilment and logistics partners.
- Customer support and IT service providers.
- Analytics and advertising providers, where applicable.
- Government authorities where legally required.

We do not sell personal information for money.

Certain advertising or analytics activities may be subject to additional privacy rights under applicable law.

5. Shopify

Our store is hosted by Shopify.

Shopify may process personal information to operate and improve its services, including information relating to your use of our website.

You can read more about Shopify's privacy practices at:
https://www.shopify.com/legal/privacy/consumers

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember shopping cart contents, support checkout functionality and understand website performance.

Where required by law, we request your consent before placing non-essential analytics or advertising cookies.

You can manage cookie preferences through the consent tools available on our website, where enabled, or through your browser settings.

7. Marketing Communications

If you subscribe to our marketing communications, we may send you information about new collections, promotions and special offers.

You can unsubscribe at any time using the link included in our marketing emails or by contacting us.

8. Children's Privacy

Our Services are not intended for children.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has provided us with personal information, please contact us so we can review the request and take appropriate action.

9. Data Security

We take reasonable measures to protect personal information against unauthorised access, loss, misuse and disclosure.

However, no online system can guarantee complete security.

10. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including processing orders, providing customer service, complying with legal recordkeeping requirements and resolving disputes.

Applicable tax and accounting laws may require us to retain certain business records for several years.

When information is no longer required, we will delete or anonymise it where appropriate.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of your information.
- Request restriction of certain processing.
- Object to certain processing activities.
- Request a portable copy of eligible information.
- Withdraw consent where processing is based on consent.
- Opt out of marketing communications.

To exercise these rights, contact info@roseedinburgh.co.uk.

We may request reasonable identity verification before processing certain requests.

We will respond within the timeframe required by applicable law.

12. United Kingdom Privacy Rights

If you are located in the United Kingdom, your personal information may be protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You may raise privacy concerns directly with us or lodge a complaint with the Information Commissioner's Office (ICO).

ICO website: https://ico.org.uk

13. European Economic Area Privacy Rights

If you are located in the European Economic Area, your personal information may be protected under the EU General Data Protection Regulation (GDPR).

You may contact your relevant national data protection authority if you believe your rights have been violated.

14. International Data Transfers

As we use international service providers, personal information may be transferred to or processed in countries outside the United Kingdom or European Economic Area.

Where required, we use appropriate safeguards recognised under applicable data protection law, including adequacy decisions or approved contractual protections.

15. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for their privacy practices, security measures or content.

We encourage you to review their privacy policies before sharing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business practices, services or legal requirements.

Any updates will be published on this page with a revised "Last updated" date.

17. Contact Information

Store name: Rose Edinburgh
Website: https://www.roseedinburgh.co.uk
Registered company name: Studio Bloom by M

Registered company address:
Raadhuisstraat 13A
6061 EA Posterholt
The Netherlands

Company registration number (KvK): 98038419
VAT identification number: NL005305863B18

Telephone: +31683357971
Email: info@roseedinburgh.co.uk

Customer Service Hours

Monday – Friday: 09:00 – 17:00 (GMT/BST)
Saturday – Sunday: 11:00 – 16:00 (GMT/BST)

We aim to respond to all customer enquiries within 24 hours on business days.