Data is retained in our order data base in line with the General Data Protection Regulations (GDPR) and the ‘lawful basis’ of legitimate interest.

In terms of data protection within the UK, zebomb Bath Bomb Fizzers is both the Data Controller and the Data Processor.

zebomb will not share information with third parties, unless prohibited by law.

zebomb Bath Bomb Fizzers IT and information security and confidentiality ensures that your information is protected, and available only to staff directly involved in processing your orders.

If you have any concerns or complaints you can Contact Us. Alternatively, If you are dissatisfied with how we have processed your personal data you can contact the Data Protection Officer (DPO) to request an internal review. If you are dissatisfied with the outcome of the internal review, they have the right to appeal directly to the Information Commissioner for an independent review. https://ico.org.uk/concerns/