Privacy Policy
Last Updated: 4 August 2025
1. Introduction
Welcome to Bump and Bloom ("we", "us", "our"). We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard the personal data you provide to us when you use our services or visit our website (bumpandbloommidwife.co.uk).
For the purpose of the UK General Data Protection Regulation (UK GDPR), the data controller is Bump and Bloom, located in Oadby, Leicestershire.
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
Identity Data: Includes your first name, last name, and the first name of your attending Birth Partner.
Contact Data: Includes your billing address, email address, and telephone number.
Special Category (Health) Data: Includes your estimated due date and any allergies or dietary requirements you or your Birth Partner disclose to us for safety and planning purposes.
Financial Data: We do not store your full payment card details. All payments are processed securely by our third-party payment provider (e.g., Stripe, PayPal).
Transaction Data: Includes details about payments to and from you and other details of products and services you have purchased from us.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and your consent for the use of photographs or videos.
Technical Data: Includes internet protocol (IP) address and browser type when you visit our website.
3. How Is Your Personal Data Collected?
We collect data from and about you when you:
Fill in our online booking or contact forms.
Correspond with us by post, phone, or email.
Book a course or session.
Consent to photography during a session.
4. How We Use Your Personal Data & Our Lawful Basis for Doing So
To Fulfil Our Contract With You: We process your Identity, Contact, and Transaction Data to perform the contract between us. This includes registering you as a new client, delivering the course you have booked, processing your payments, and managing our relationship with you (for example, sending booking confirmations and other essential service communications).
With Your Explicit Consent: For certain activities, we rely on your clear consent. We process Special Category (Health) Data, such as allergies or dietary requirements, based on the explicit consent you provide on your booking form to ensure your safety. We also rely on your separate consent before using any photographs or videos of you for promotional purposes.
To Comply With a Legal Obligation: We process your Identity, Contact, and Transaction Data where it is necessary for compliance with a legal obligation, such as keeping accurate financial records for tax purposes as required by HMRC.
For Our Legitimate Interests: We may process your Identity, Contact, and Technical Data where it is necessary for our legitimate interests, such as for running our business, providing administration and IT services, and keeping our website and services secure.
5. Data Sharing
We do not sell your personal data to third parties. We may have to share your data with trusted service providers for the purposes set out above, such as:
Payment processing providers.
Professional advisers including lawyers, bankers, auditors, and insurers.
HM Revenue & Customs, regulators, and other authorities based in the UK.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to those who have a business need to know.
7. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.
8. Your Legal Rights
Under UK data protection law, you have rights including:
Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request correction of any inaccurate personal data.
Right to Erasure: To ask us to delete your personal data where there is no good reason for us continuing to process it.
Right to Object: To object to the processing of your personal data where we are relying on a legitimate interest.
Right to Restrict Processing: To ask us to suspend the processing of your personal data in certain scenarios.
Right to Data Portability: To request the transfer of your personal data to you or to a third party.
Right to Withdraw Consent: To withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us at [bumpandbloommidwife@gmail.com].
9. Cookies
Our website may use cookies to enhance your user experience. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. You can set your browser to refuse all or some browser cookies.
10. Changes to This Privacy Policy
We keep our privacy policy under regular review. Any updates will be posted on this page. This policy was last updated on the date shown at the top.
11. How to Complain
We hope to be able to resolve any query or concern you raise about our use of your information. Please contact us first at [bumpandbloommidwife@gmail.com].
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).
12. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us:
Email:
bumpandbloommidwife@gmail.comWebsite:
bumpandbloommidwife.co.uk