Skip to content

Privacy Policy

This Privacy Policy explains how Kashmir Bloom collects, uses, and protects your personal information when you visit kashmirbloom.com or place an order with us. We try to be plainspoken — if anything is unclear, write to hello@kashmirbloom.com and we will explain.

Who We Are

Kashmir Bloom is a luxury textile brand offering handwoven shawls, stoles, and apparel from Kashmir. The data controller for the personal information collected through this website is Kashmir Bloom Ltd. You can reach us at hello@kashmirbloom.com for any privacy-related question or request.

Information We Collect

We collect only the information we need to fulfil your order, support you as a customer, and run the site. Specifically:

  • Account information — when you create an account: your name, email address, and a password (stored hashed, never as plain text).
  • Order information — when you place an order: your shipping address, billing address, phone number, and the items you bought.
  • Payment information — when you pay: handled entirely by our payment processor (Stripe). We never see or store your full card number, CVC, or expiry. Stripe returns to us only a tokenised reference and the last four digits, which we keep for receipt and fraud protection purposes.
  • Newsletter — if you subscribe: your email address and the date of consent.
  • Site usage — basic analytics about how visitors use the site (pages viewed, device type, approximate location), collected through cookies. See the Cookies section below.
  • Communications — if you write to us, we keep a copy of the correspondence so we can answer follow-ups.

How We Use Your Information

  • To process and ship your order, including handing the necessary details to our shipping carriers.
  • To send transactional emails — order confirmation, dispatch notification, delivery updates, and password resets.
  • To provide customer support and respond to enquiries.
  • To send marketing emails about new collections, journals, and offers — only if you have opted in. You can unsubscribe at any time using the link in every marketing email.
  • To improve the site, identify problems, and prevent fraud.
  • To comply with legal obligations such as tax, accounting, and consumer protection law.

Who We Share Your Data With

We share your information only with parties that need it to deliver your order or run the service:

  • Stripe — for processing payments. Stripe is PCI-DSS compliant and operates under its own published privacy policy.
  • Shipping carriers — to deliver your order to the address you provide. The carrier will receive your name, shipping address, and phone number.
  • Email service providers — to send transactional and marketing emails.
  • Analytics providers — to understand site usage in aggregate. These providers may collect cookie identifiers and approximate location.
  • Legal authorities — only when required by law or court order.

We never sell your personal information.

International Data Transfers

Kashmir Bloom operates between the United Kingdom and India. Your information may be transferred between these and other jurisdictions in the course of fulfilling your order. Where we transfer data outside the UK or EEA, we rely on standard contractual clauses or equivalent safeguards approved by the relevant authorities.

Cookies

Cookies are small text files stored on your device when you visit a website. We use them in three categories:

  • Strictly necessary — for the site to work (cart contents, login session, checkout flow). These cannot be disabled.
  • Analytics — to understand traffic patterns and improve the site. Anonymised wherever possible.
  • Marketing — only set with your consent, used for retargeting and conversion tracking.

You can manage cookies through your browser settings or our cookie consent banner. Disabling strictly-necessary cookies will prevent checkout from working.

How Long We Keep Your Data

  • Order records — kept for 7 years after the order, as required by UK tax law.
  • Account data — kept while your account is active. You can request deletion at any time; we will remove your account and personal data, but retain anonymised records of any orders placed (required by law).
  • Newsletter subscriptions — kept until you unsubscribe.
  • Customer support emails — typically kept for 3 years, then deleted.

Your Rights

Under UK GDPR, EU GDPR, and India’s Digital Personal Data Protection Act, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — ask us to delete your personal data, subject to legal retention obligations.
  • Restriction — ask us to limit processing of your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing where we rely on legitimate interest, including marketing.
  • Withdraw consent — for any processing based on consent (e.g. marketing).

To exercise any of these rights, write to hello@kashmirbloom.com. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or the equivalent authority in your country.

Security

We protect your data with industry-standard measures: HTTPS encryption across the entire site, hashed passwords, restricted internal access, and tokenised payment processing. No system is ever entirely secure, but we work continuously to keep your information safe.

Children’s Privacy

Kashmir Bloom is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time as our practices or applicable law evolve. The current version always lives at this page, and we will note material changes at the top.

Contact

For any privacy question, request, or concern, write to hello@kashmirbloom.com. We answer personally.