Privacy policy
1. Who is responsible
MARVENOR LIMITED operates Everbloom-London and is responsible for the personal information it processes for the shop.
MARVENOR LIMITED
FLAT 5, 4/F, WON HING BUILDING
74-78 STANLEY STREET
CENTRAL
HONG KONG
For privacy enquiries or to exercise your rights, email Support@everbloom-london.com.
2. Information used for shopping and support
When you order or contact us, the information involved can include your name, email, delivery and billing details, order contents, transaction references and support correspondence. Payment information is handled through the payment method you select; its provider may also process information under its own privacy notice.
Operating a website also involves technical information, such as IP addresses, device/browser information and security logs. The particular information involved depends on the services you use. Please avoid sending unnecessary sensitive information in support messages.
3. Purposes and legal grounds
- Orders and customer service: processing orders, arranging delivery, handling cancellations, returns and related enquiries where necessary to perform a contract or take requested steps before a contract.
- Legal obligations: keeping records and responding to lawful requirements where required by applicable tax, accounting or other law.
- Security and legitimate interests: protecting the shop, preventing misuse and establishing or defending legal claims where the processing is necessary and our interests are not overridden by your rights. You may object to processing on this basis.
- Consent: where a service, marketing activity or non-essential technology legally requires consent, it must be based on valid consent. You may withdraw consent at any time.
Information necessary for an order must be provided for us to process and deliver that order. You are not required to consent to optional marketing to make a purchase.
4. Recipients
Information needed for the relevant service may be shared with shop-platform and hosting providers, payment providers, fulfilment partners and delivery carriers, customer-service or communications providers, and professional advisers or authorities where legally necessary. Sharing must be limited to the relevant purpose. Payment providers and some other recipients may act as independent controllers.
Our shop uses the Shoporu platform and supports delivery tracking through 17TRACK. If you want information about the recipients involved in your specific order or enquiry, contact our privacy email.
5. International processing
MARVENOR LIMITED is based in Hong Kong. Providing services may involve processing outside the UK. Where UK data protection law requires safeguards for a restricted international transfer, the transfer must use an applicable lawful mechanism, such as an adequacy regulation, approved contractual safeguards with the required assessment, or a permitted exception. Being based in Hong Kong is not itself evidence of adequacy.
You can contact us for information about the destinations, recipients and safeguards applicable to your data, and how to obtain information about those safeguards.
6. How long information is kept
Information must be retained only for as long as necessary for its purpose. Relevant criteria include fulfilment of your order, handling returns and complaints, statutory accounting and tax obligations, limitation periods for legal claims, and necessary security investigations. Different records may require different periods. Information that is no longer required must be deleted or anonymised, subject to lawful retention duties.
Marketing and consent records, where applicable, are kept only as needed to respect your choices and demonstrate compliance. A limited suppression record may be retained to honour an objection to marketing. Contact us if you need the retention criteria applicable to a particular record.
7. Your data protection rights
Where UK data protection law applies, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. These rights have legal conditions and exceptions. You can object to direct marketing at any time and withdraw consent without affecting the lawfulness of processing before withdrawal.
Email us to exercise your rights. We may need proportionate information to verify your identity. Requests are normally answered within one month; any lawful extension or reason for declining a request will be explained. You may also request information about any automated decision concerning you and the protections that apply where required by law.
8. Complaints
You can complain to the UK Information Commissioner’s Office at ico.org.uk where UK data protection law applies, or to another competent authority. You do not have to contact us first, although we welcome the chance to resolve your concern.
9. Cookies and changes
See our Cookie policy for information about cookies, browser storage and consent. This notice may be updated to reflect changes in services or legal requirements. Any material change affecting your data must be communicated as required by applicable law.