Last updated: April 14, 2026

This Privacy Policy explains how Karalyte Ltd, trading as Bloomerangas (“Bloomerangas”, “we”, “us”, or “our”), collects, uses, stores, and protects your personal data when you visit our website, contact us, purchase from us, or otherwise use our services.

We are committed to handling personal data responsibly and in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Karalyte Ltd
Trading as Bloomerangas
Company code: 16476836
14 Archbishop Coggan House
London SE13 7PS
United Kingdom

Email: hello@karalyte.com

For the purposes of data protection law, Karalyte Ltd is the data controller of the personal data described in this Privacy Policy.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly

• your name;
• email address;
• phone number;
• billing and payment information;
• postal address;
• account login details, if applicable;
• enquiry or message content you send to us;
• any other information you choose to provide.

Information collected automatically

When you use our website, we may automatically collect certain technical and usage information, such as:

• IP address;
• browser type and version;
• device type;
• operating system;
• referral source;
• pages viewed;
• time spent on pages;
• dates and times of access; and
• cookie or similar tracking data.

Information from third parties

We may receive personal data from third parties such as:

• payment providers;
• analytics providers;
• advertising or social media platforms;
• customer support tools;
• business partners; and
• publicly available sources where relevant.

The UK GDPR requires privacy information to explain what personal data is collected, the purposes for processing it, and who receives it.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

• to provide and operate our website and services;
• to respond to enquiries and communicate with you;
• to process orders, payments, subscriptions, and transactions;
• to manage customer relationships and support requests;
• to send service-related communications;
• to improve our website, products, and services;
• to analyse website usage and performance;
• to maintain security and prevent fraud or misuse;
• to comply with legal and regulatory obligations;
• to establish, exercise, or defend legal claims; and
• where permitted, to send marketing communications.

4. Our Lawful Bases for Processing

Under UK GDPR, we must identify a lawful basis for each use of personal data. The ICO says privacy information should state both the purpose and the lawful basis relied on.

We generally rely on one or more of the following lawful bases:

Contract

We process personal data where necessary to perform a contract with you, or to take steps at your request before entering into a contract. For example:

• processing purchases;
• delivering services;
• managing accounts; and
• providing customer support related to paid services.

Legitimate interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests. For example:

• operating and improving our website and services;
• responding to non-contractual enquiries;
• maintaining business records;
• preventing fraud and abuse;
• securing our systems; and
• understanding how people use our website.

Legal obligation

We may process personal data where necessary to comply with legal obligations, such as:

• tax and accounting requirements;
• fraud prevention obligations; and
• responding to lawful requests from regulators, courts, or authorities.

Consent

We may rely on your consent where required, including for certain cookies or direct marketing activities. Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Marketing Communications

If you sign up to receive marketing from us, we may use your contact details to send you updates, offers, news, or other promotional content.

You can unsubscribe from marketing emails at any time by:

• clicking the unsubscribe link in our emails; or
• contacting us using the details in this Privacy Policy.

We will not send you marketing where the law requires consent unless we have that consent.

6. Cookies and Similar Technologies

We may use cookies and similar technologies to:

• make our website function properly;
• remember your preferences;
• understand website traffic and usage;
• improve performance; and
• support analytics and, where applicable, marketing.

You can control cookies through your browser settings and, where applicable, through our cookie banner or preference tool.

For more information, please see our Cookie Policy.

The ICO’s guidance for small organisations specifically treats privacy notices and cookies as related transparency obligations and recommends clear, accessible explanations.

7. Sharing Your Personal Data

We may share your personal data with:

• payment processors;
• website hosting providers;
• IT and software service providers;
• email and communications platforms;
• analytics providers;
• customer support providers;
• professional advisers such as lawyers, accountants, and insurers;
• regulators, law enforcement, courts, or public authorities where required; and
• buyers or investors in connection with a business sale, merger, or restructuring.

We require service providers processing personal data on our behalf to handle it appropriately and only for authorised purposes.

8. International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we will take appropriate steps to ensure it remains protected in accordance with applicable data protection law, such as using recognised transfer safeguards where required.

9. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including for legal, regulatory, tax, accounting, dispute-resolution, and record-keeping purposes.

Retention periods may vary depending on the type of information and the reason we hold it. For example:

• customer account and transaction records may be retained for accounting and tax purposes;
• enquiry data may be retained for follow-up and business administration;
• technical logs may be retained for security and diagnostic purposes; and
• marketing suppression records may be retained so we can respect opt-out requests.

The ICO states that privacy information should explain retention periods, or the criteria used to decide them.

10. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request transfer of your personal data to you or another provider;
• withdraw consent where processing is based on consent; and
• object to direct marketing.

These rights are not absolute and may be subject to legal exemptions.

If you want to exercise any of these rights, please contact us using the details below.

11. Complaints

If you have concerns about how we handle your personal data, we would appreciate the opportunity to address them first.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. The ICO explains that individuals have a right to be informed about how their personal data is used and provides official routes for complaints and guidance.

12. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Third-Party Links

Our website may contain links to third-party websites, plugins, or services. If you follow a link to a third-party site, that third party will have its own privacy practices and policies. We are not responsible for those third-party policies or practices.

14. Children’s Privacy

Our website and services are not intended for children under the age of [13/16], and we do not knowingly collect personal data from children without appropriate legal basis or consent where required.

If you believe a child has provided us with personal data, please contact us so we can review and, if appropriate, delete the information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, legal obligations, or data practices.

When we make material changes, we will update the “Last updated” date at the top of this page and take any additional steps required by law. The ICO also advises organisations to review and update privacy information when necessary and to bring new uses of personal data to people’s attention before starting that processing.

16. Contact Us

If you have any questions about this Privacy Policy or how we process personal data, please contact us:

Karalyte Ltd
Trading as Bloomerangas
Company code: 16476836
14 Archbishop Coggan House
London SE13 7PS
United Kingdom
Email: hello@karalyte.com