Privacy Policy – Quest and Bloom

Last updated: 25 August 2026

This privacy notice explains how Quest & Bloom collects, uses, stores and protects personal information when you visit questandbloom.com, contact us, buy or enquire about a book, or ask us to create a personalised product.

Our books may be made for children, but this website and its contact and ordering services are intended for parents, guardians and other adults. Children should not send us personal information directly.

1. Who is responsible for your information?

Pearce Buy Ltd, trading as Quest & Bloom, is the data controller for the personal information described in this notice. Pearce Buy Ltd is registered in England and Wales under company number 09452636. Its registered office is Kemp House, 152–160 City Road, London EC1V 2NX. You can contact us, make a data-protection request or raise a complaint through our Contact page.

2. Information we collect

Depending on how you use the website, we may collect:

Contact information: your name, email address and the contents of messages you send through our contact form or by email.
Order and customer information: billing, delivery and transaction details needed to answer an enquiry, prepare an order, provide support, keep business records or deal with a refund or complaint.
Personalisation information: details supplied by a parent, guardian or other responsible adult to create a personalised book or product. This may include a child’s first name, appearance choices, a dedication and limited story preferences.
Website and technical information: IP address, browser and device type, approximate location derived from an IP address, pages requested, dates and times, referring pages, search terms entered on the site, and security or error logs.
Comment information: if comments are enabled and you choose to leave one, the information shown in the comments form, your IP address and browser information may be collected for moderation and spam prevention.
Marketing preferences: whether you have asked to receive or stop receiving email updates, if we offer an email sign-up service.

Please do not send us a child’s home address, school, health information, precise location, photograph or any other sensitive information unless we have specifically explained why it is genuinely necessary. We aim to collect the minimum information needed to provide the requested product or service.

We do not use personal information to make decisions about people solely by automated means, and we do not create behavioural advertising profiles of children.

3. How and why we use personal information

UK data-protection law requires us to have a lawful reason for each use of personal information. We use information:

to reply to questions, provide customer support and manage complaints, based on our legitimate interests in operating and improving Quest & Bloom;
to take steps requested before an order and to fulfil an order or other agreement with an adult customer;
to create a personalised product requested by a parent, guardian or other responsible adult, based on the adult customer’s contract with us and our legitimate interest in providing the requested service;
to process payments and arrange printing, delivery or digital fulfilment where applicable;
to protect the website, prevent fraud, investigate misuse, diagnose faults and maintain reliable records, based on our legitimate interests in keeping the service secure and effective;
to meet tax, accounting, consumer-protection and other legal obligations;
to send optional marketing only where you have consented or where the law otherwise permits it. You can opt out at any time.

4. Children’s information

Quest & Bloom is designed so that an adult supplies any information needed for a personalised children’s product. We do not ask children to create accounts, contact us, subscribe to marketing or submit personalisation details themselves.

We use a child’s information only to prepare and deliver the product requested by the adult, to correct a problem with that product, or where we must keep limited records by law. We do not sell children’s information, use it for targeted advertising or knowingly disclose it for unrelated purposes. A parent or guardian may contact us to ask what information we hold about their child and to request correction or deletion, subject to any information we must keep by law.

5. Contact forms and email

When you use our contact form, we collect your name, email address and message so that we can respond. The website may also record technical information needed for security and spam prevention. Please include only the information necessary for your enquiry.

6. Cookies and similar technologies

Cookies are small files stored on a device. Quest & Bloom may use strictly necessary cookies or similar technologies for website security, administration, session management, caching and reliable page delivery. WordPress also uses cookies for signed-in administrators. These operational cookies are not used to build advertising profiles.

We do not currently use advertising or behavioural-tracking cookies. If we add analytics, advertising or another non-essential technology, we will update this notice and provide a consent choice before the technology is used where the law requires it.

7. Who we share information with

We share personal information only where necessary. Recipients may include:

website hosting, security, caching, email and technical-support providers, including Hostinger and service providers used to operate this WordPress website;
payment, printing, production, delivery or digital-fulfilment providers needed to complete an order;
professional advisers such as accountants, insurers or legal advisers;
regulators, courts, law-enforcement bodies or other authorities where disclosure is required by law or is necessary to protect legal rights.

Service providers may use personal information only for the services they provide to us and must protect it appropriately. We do not sell personal information.

8. International transfers

Some service providers may store or process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we use an approved safeguard or another lawful transfer mechanism. You can contact us for more information about safeguards relevant to your information.

9. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose collected, including:

General enquiries: normally up to 24 months after the last meaningful contact.
Personalisation inputs and working files: normally deleted within 90 days after the order is completed, unless you ask us to retain them for an agreed reprint period, a problem remains unresolved or the law requires longer retention.
Order, payment and accounting records: normally up to six years where needed for tax, accounting, consumer or legal purposes. We minimise any child information retained in these records.
Security and technical logs: normally up to 90 days, unless an incident requires longer investigation or retention.
Marketing records: until you withdraw consent or opt out. We may retain a minimal suppression record so that we continue to respect an opt-out.

Backups may retain information for a limited additional period until they are securely overwritten.

10. How we protect information

We use proportionate technical and organisational measures to protect personal information, including access controls, software maintenance, secure hosting and limiting access to people or providers who need the information. No internet service can promise absolute security, but we review our safeguards and respond to suspected incidents.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

ask for a copy of personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete information;
ask us to restrict how information is used;
object to processing based on legitimate interests or to direct marketing;
receive certain information in a portable format;
withdraw consent at any time where consent is our lawful basis.

These rights are not absolute and an exemption may apply. We may need to verify your identity before acting on a request. To exercise a right, use our Contact page. We will respond within the time required by law.

12. Data-protection complaints

If you are concerned about how we use personal information, please contact us first so that we can investigate. We will acknowledge a data-protection complaint within 30 days and will keep you informed while we consider it.

You also have the right to complain to the UK Information Commissioner’s Office. Visit the ICO complaints page for current contact details and guidance.

13. Third-party websites

Our website may link to other websites, such as a retailer, payment service, social platform or delivery provider. Those organisations control their own websites and personal-information practices. Please read their privacy notices when you leave Quest & Bloom.

14. Changes to this notice

We may update this privacy notice when our website, products, service providers or legal obligations change. We will post the updated version here and change the “Last updated” date. If a change materially affects how we use information already collected, we will provide additional notice where appropriate.