Privacy policy

Last updated: October 20, 2026

This policy explains how Tabloom collects and uses personal information when you visit shoptabloom.com, buy from us or contact us.

1. Who we are

Tabloom is a trading name of Zephrell Limited, a company registered in England and Wales (company number 16525246), registered office Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE, United Kingdom. We are the "controller" of your personal information under the UK GDPR and, for customers in the European Economic Area, the EU GDPR. For any privacy question or request, email support@shoptabloom.com.

2. What we collect

Information you give us: your name, email address, billing address and the contents of any message you send us.
Order information: what you bought, prices, taxes, order number, and the consent you give for immediate access to digital downloads.
Payment information: payments are processed by our payment providers (Shopify Payments, which works with Stripe, and PayPal if you choose it). We receive limited details, such as the card type, the last four digits and the card's country. We never see or store your full card number.
Device and usage information: your IP address, approximate location, browser, device type and the pages you view, collected through cookies and similar technologies (see section 7).
Marketing preferences: whether you have agreed to receive our emails.

We don't knowingly collect special category data (such as health information) through the store. Data you type into our spreadsheets stays on your own device or account. We never receive it.

3. How we use it, and our legal bases

To process your order, deliver your files and provide support: necessary to perform our contract with you.
To keep tax and accounting records, including the evidence of your location that tax law requires for digital sales: necessary to comply with our legal obligations.
To prevent fraud and keep the store secure: our legitimate interests in protecting our business and customers.
To understand how the store is used and improve it: our legitimate interests, and your consent where the law requires it for cookies.
To send you marketing emails: only with your consent, or where permitted by law because you have bought from us before. You can unsubscribe at any time using the link in every email.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers use automated fraud checks on transactions.

4. Who we share it with

Shopify, which hosts our store and processes data on our behalf. Shopify also uses some of this information, together with data from other Shopify stores, to improve its services, prevent fraud, and personalize the Shop app and ads. Shopify's privacy policy is at shopify.com/legal/privacy.
Payment providers (Shopify Payments and Stripe, and PayPal if you use it), to take payment and prevent fraud.
Checkout and fraud-prevention tools that check orders against our store rules, for example the countries we can sell to.
Service providers that help us run the business, such as email delivery and customer support tools, under contracts that require them to protect your information.
Professional advisers and authorities, such as our accountants, auditors, tax authorities and regulators, where the law requires it or to establish or defend legal claims.
A buyer of our business, if we sell all or part of it, under equivalent protections.

We do not sell your personal information for money. Under some US state laws, using data for personalized advertising can count as a "sale" or "sharing". You can opt out at any time using the "Your privacy choices" link in the store footer.

5. International transfers

Shopify stores our store's data in the European Union, which the UK recognizes as giving personal information adequate protection. If you are in the European Economic Area, your information is also transferred to the UK, which the EU recognizes as giving adequate protection. Our service providers may process your information outside the UK, including in Canada, the United States and other countries where they or their staff are based. Where they do, we rely on adequacy decisions (such as those for Canada, the UK-US Data Bridge and the EU-US Data Privacy Framework) or on approved safeguards such as standard contractual clauses or the UK International Data Transfer Agreement.

6. How long we keep it

Order, payment and tax records: for as long as tax law requires, which is at least 6 years after the end of our financial year (longer where another country's tax law requires it).
Support emails: up to 2 years after your last message.
Marketing preferences: until you unsubscribe, after which we keep a record so we don't email you again.

7. Cookies

We use cookies that are needed to run the store, such as keeping items in your cart and completing checkout. With your consent where the law requires it, we also use analytics cookies to understand how the store is used and, if we advertise, marketing cookies. Visitors in the UK and Europe are asked before any non-essential cookies are set. You can change your choice at any time using the privacy settings link in the store footer, and you can block cookies in your browser.

8. Your rights

United Kingdom and European Economic Area: you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or transfer it to another organization. Where we rely on consent, you can withdraw it at any time. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or, in the European Economic Area, to the data protection authority in the country where you live or work, though we would appreciate the chance to deal with your concern first.

United States: depending on your state, you may have the right to know what personal information we hold about you, to access, correct or delete it, and to opt out of targeted advertising, "sales" or "sharing" of your information. To opt out, use the "Your privacy choices" link in the store footer. We honor Global Privacy Control signals, and we won't discriminate against you for exercising your rights.

Other countries: you may have similar rights under your local law. Contact us and we will respond in line with it.

To make a request, email support@shoptabloom.com. We may need to confirm your identity first. We respond within one month, or sooner where your local law requires it.

9. Children

Our store is not directed to children under 16, and we do not knowingly collect personal information from children under 13.

10. Security

We use the security measures provided by Shopify and our payment providers, including encryption of data in transit. No method of transmission or storage is completely secure, so we can't guarantee absolute security.