Legal

Privacy Policy

Last Updated: 18.06.2026

Welcome to FromGrief2Bliss. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit www.fromgrief2bliss.com or buy from us. We are committed to transparency and to handling your data carefully, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

FromGrief2Bliss is a sole trader business owned by Connie Solomon, based in Milton Keynes, UK. We are the "data controller" responsible for your personal information.

  • Business Name: FromGrief2Bliss
  • Trading Address: 7 Cogan Court, Milton Keynes, MK8 0BJ, United Kingdom
  • Contact Email: fromgrief2bliss@gmail.com

2. The Information We Collect

We collect different types of information depending on how you interact with us.

When you subscribe to our newsletter:

  • Your email address.

When you fill out our contact form:

  • Your first and last name.
  • Your email address.
  • Details of your enquiry (the "interest" you select, and your message).

When you place an order through our shop:

  • Your full name.
  • Your delivery address (street, city, county, postcode).
  • Your email address.
  • Your order details (items, quantities, prices).

When you make a payment:

We use PayPal (operated by PayPal (Europe) S.à r.l. et Cie, S.C.A.) to process payments. PayPal handles your payment information (such as card details or PayPal account credentials) directly - we do not see, store, or have access to your card or PayPal account credentials. We only receive a confirmation of payment from PayPal, along with the buyer name and the delivery address you provided.

When you visit our website (automatic):

  • Your IP address.
  • Information about your device, browser, and operating system.
  • Pages you visit, time spent on the site, and the source that referred you.

3. How We Use Your Information

  • To fulfil your order - process payments, dispatch your goods, send dispatch and delivery confirmation emails, and handle any returns or refunds.
  • To send our newsletter - deliver occasional emails about new products, workshops, and reflections (only if you have explicitly subscribed).
  • To respond to your enquiries - reply to your contact form messages or emails.
  • To improve our website - analyse aggregated traffic data to understand how visitors use our site and improve their experience.
  • To meet legal obligations - keep sales records and accounting information for the period required by UK tax law.

4. Our Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your data. We rely on the following:

  • Contract - we need to process your data to fulfil your order and deliver your goods.
  • Consent - when you subscribe to our newsletter, you give us explicit consent. You can withdraw it at any time using the unsubscribe link in every email.
  • Legitimate interest - we use aggregated analytics to understand how our site is used and how we can improve it.
  • Legal obligation - we keep sales transaction records for HMRC and tax accounting purposes (typically 6 years).

5. Who We Share Your Information With

We do not sell your data. We share it only with the trusted service providers we need to run our business:

We may also disclose your information if required to do so by law, court order, or regulatory authority.

6. International Data Transfers

Some of our service providers operate outside the UK (for example Google LLC in the United States and Web3Forms). Where this happens, the transfer is protected by appropriate safeguards: an adequacy decision by the UK Government, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

7. How Long We Keep Your Information

  • Order records and invoices - 6 years from the end of the relevant tax year (to comply with HMRC).
  • Customer contact details (for delivery) - 6 years, in line with sales records.
  • Newsletter subscribers - until you unsubscribe. You can unsubscribe at any time using the link in every email.
  • Contact form enquiries - up to 2 years from the date of your last interaction with us.
  • Analytics data - retained by Google for up to 14 months (default GA4 retention).

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you (a "subject access request").
  • Correct inaccurate data we hold about you.
  • Erase your data, in certain circumstances (the "right to be forgotten").
  • Restrict how we use your data, in certain circumstances.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time, where consent is the legal basis.
  • Data portability - receive a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please email us at fromgrief2bliss@gmail.com. We will respond within one month, as required by law.

9. Cookies and Tracking

Our website uses cookies and similar technologies. Cookies are small text files placed on your device.

We use:

  • Essential cookies - necessary for the basket and checkout to function. These do not require your consent.
  • Analytics cookies (Google Analytics 4) - help us understand how visitors use our site. These collect aggregated, non-personal usage data.

By continuing to use our website, you consent to our use of cookies as described in this policy. You can disable cookies in your browser settings, although some features of the site may not work correctly without them.

10. Children

Our website and services are not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at fromgrief2bliss@gmail.com so we can delete it.

11. Security

We take reasonable steps to protect your personal data from unauthorised access, loss, misuse, or alteration. Our website uses HTTPS encryption. We choose service providers (PayPal, MailerLite, Web3Forms, Google) who maintain industry-standard security practices. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.

13. How to Make a Complaint

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: https://ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the chance to address your concerns first - please email us at fromgrief2bliss@gmail.com before contacting the ICO.

14. Contact

For any questions about this Privacy Policy or our data practices: