Privacy policy

Privacy Policy

Last updated: [PREENCHER 4 — data]

This policy explains what personal data we collect, why we collect it and what you can do about it. It applies to every customer, wherever you are in the world. Where your country gives you stronger rights than those described here — including under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) and comparable laws — those rights apply to you in addition to what is set out below.

1. Controller

[PREENCHER 1 — razão social], 500 4th St NW, Suite 102 #1963, Albuquerque, NM 87102, United States of America.
Data protection contact: privacy@bloomholm.com

2. What we collect

When you order: name, delivery and billing address, email address, phone number where provided, order contents and payment status. We never receive or store your full card number — payment data is handled directly by our payment providers.

When you browse: IP address, device and browser type, pages viewed, referring site and interaction data collected through cookies and similar technologies.

When you contact us: the content of your message and your contact details.

When you subscribe: your email address and a record of your consent.

3. Why we use it, and on what legal basis

Purpose	Legal basis
Processing and delivering your order	Performance of a contract — Art. 6(1)(b)
Customer service and handling returns	Performance of a contract — Art. 6(1)(b)
Fraud prevention and site security	Legitimate interest — Art. 6(1)(f)
Accounting and tax records	Legal obligation — Art. 6(1)(c)
Marketing emails	Consent — Art. 6(1)(a)
Analytics and advertising cookies	Consent — Art. 6(1)(a)

4. Who we share it with

We share personal data only with parties who need it to fulfil your order or operate the site:

Shopify Inc. — e-commerce platform and hosting
Payment providers — Shopify Payments, PayPal and the providers shown at checkout
Fulfilment partners and carriers — to pick, pack and deliver your order
Email and review platforms — to send order updates and, with your consent, marketing
Analytics and advertising platforms — Meta, TikTok and Google, where you have consented to marketing cookies
Tax, accounting and legal advisers — where required

We never sell your personal data.

5. International transfers

We are established in the United States, and some of our processors are outside the European Economic Area and the United Kingdom. Where data is transferred, we rely on the European Commission's Standard Contractual Clauses or on an adequacy decision, together with additional safeguards where required.

6. How long we keep it

Order and transaction records: 10 years, to meet tax and accounting obligations.
Customer service correspondence: 3 years.
Marketing consent records: until you withdraw consent, plus 3 years as proof of consent.
Cookie and analytics data: as stated in our cookie banner, typically up to 13 months.

7. Your rights

Wherever you live, you may ask us to access, correct or delete the personal data we hold about you, and you may withdraw consent to marketing at any time. Under the GDPR and UK GDPR you additionally have the right to access your data, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these, write to privacy@bloomholm.com. We respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority — for example the competent state authority in Germany, the CNIL in France, the Garante in Italy, or the Information Commissioner's Office in the United Kingdom.

California residents. We do not sell or share personal information as those terms are defined by the CCPA. You may request disclosure or deletion of your personal information at privacy@bloomholm.com, and we will not discriminate against you for exercising that right.

8. Cookies

We use cookies that are strictly necessary for the site to function and, only with your consent, cookies for analytics and advertising. You can accept, refuse or change your choices at any time through the cookie banner or the cookie settings link in the footer. Refusing non-essential cookies does not prevent you from ordering.

9. Marketing emails

We send marketing emails only if you have opted in. Every email contains a one-click unsubscribe link that takes effect immediately. Transactional emails about an order you have placed are not marketing and are sent regardless.

10. Children

Our site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal data, write to privacy@bloomholm.com and we will delete it.

11. Security

We use TLS encryption across the whole site, restrict internal access to personal data to those who need it, and work only with processors who provide appropriate technical and organisational safeguards.