Privacy policy

Introduction and scope

This Privacy Policy explains how Bloom Bold (“we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information when you visit our website, browse or purchase cosmetic and skincare products, create a customer account, subscribe to marketing emails, participate in promotions, or contact our customer care team. We respect your privacy and are committed to handling your data lawfully, fairly, and transparently. This policy applies to information processed through our online store and related communications. It does not govern third-party websites or apps that we may link to; those services have their own policies. If you do not agree with this policy, please discontinue use of our services. By continuing to use our site or placing an order, you acknowledge the practices described here.

Information we collect

We collect information that you provide directly and information collected automatically when you use our services. Account and order data may include your name, email address, phone number, billing and shipping addresses, payment-related details (processed securely by our payment partners—we do not store full card numbers on our servers), order history, product preferences, and gift or promotional codes you apply. Communications include messages you send via contact forms, email, chat, or social channels, including attachments or images you choose to share (for example, photos related to a product concern). Marketing preferences include whether you opted in to newsletters, your interests where you tell us, and records of consent where required. Automatically collected data may include IP address, device type, browser type, operating system, referring URLs, pages viewed, time spent, and approximate location derived from IP. We may use cookies, pixels, and similar technologies as described below. We may also receive limited information from payment processors, delivery partners, or fraud-prevention services to complete transactions and protect our business.

How we use your information

We use personal information to operate our store and serve you: to process and fulfil orders, take payment, arrange shipping, send order confirmations and delivery updates, handle returns and refunds, and provide customer support. We use data to maintain and improve our website, diagnose technical issues, analyse usage trends, and develop new products or features. With your consent where required, we send marketing about new launches, tutorials, and offers; you may unsubscribe at any time using the link in our emails or by contacting us. We use information to comply with legal obligations, respond to lawful requests from authorities, enforce our terms, and protect the rights, safety, and property of our customers, our team, and the public. We may use aggregated or de-identified data that cannot reasonably identify you for analytics, reporting, and business planning.

Legal bases and retention

Depending on where you live, we rely on appropriate legal bases such as performance of a contract (processing necessary to deliver your purchase), legitimate interests (for example, fraud prevention, website security, and understanding how our store is used—balanced against your rights), consent (for certain marketing cookies or communications where required), and legal obligation (tax, accounting, or regulatory record-keeping). We retain personal data only as long as needed for the purposes above. Order and tax records may be kept for a number of years as required by law. Marketing data is kept until you withdraw consent or unsubscribe, after which we suppress your address rather than delete all historical logs where we must retain evidence of consent. Technical logs may be retained for a shorter rolling period for security purposes.

Sharing and international transfers

We share information with service providers who assist us under strict contracts: hosting, email delivery, payment processing, analytics, customer support tools, and shipping carriers. They may only use data on our instructions and must protect it appropriately. We may disclose information if required by law, court order, or government request, or to protect our legal rights. In the event of a merger, acquisition, or sale of assets, customer data may transfer as part of the business, subject to continued protection consistent with this policy. If we transfer data across borders, we implement safeguards such as standard contractual clauses or equivalent mechanisms where applicable.

Cookies and similar technologies

We use cookies and similar tools to remember your session, keep items in your cart, understand traffic sources, measure campaign performance, and improve site usability. Essential cookies are necessary for the site to function. Where required, we ask permission before using non-essential analytics or marketing cookies. You can control cookies through your browser settings; disabling some cookies may limit certain features such as staying logged in or saving preferences.

Security

We implement administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, or alteration. These include access controls, encryption in transit where appropriate for our stack, and staff training. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your account credentials.

Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is consent-based. You may opt out of marketing emails at any time. To exercise rights, contact us using the details on our website. You may also lodge a complaint with a supervisory authority in your country if you believe our processing violates applicable law.

Children

Our cosmetic products and website are directed to adults. We do not knowingly collect personal information from children below the age at which parental consent is required in their region. If you believe we have collected such information, please contact us and we will take steps to delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or our business. The “last updated” indication may appear on this page when we make material changes. We encourage you to review this page periodically. Continued use of our services after updates constitutes acceptance of the revised policy where permitted by law.

Contact us

For privacy-related questions, requests, or concerns, please contact us through our contact page. We will respond within a reasonable timeframe in line with applicable regulations.