Privacy Policy 🔒

1. Introduction

Welcome to BloomGarden ("we," "us," "our," or "Company"). BloomGarden is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, make a purchase, or otherwise interact with us.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using BloomGarden, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an account: Name, email address, phone number, password
• Make a purchase: Billing address, shipping address, payment information
• Contact us: Messages, inquiries, feedback through contact forms
• Subscribe to newsletter: Email address for marketing communications
• Use our services: Information about services requested (garden design, maintenance, etc.)
• Provide testimonials: Your name, feedback, and any personal details you share

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Device Information: Device type, operating system, browser type and version
• Usage Information: Pages visited, time spent on pages, links clicked, search queries
• Location Information: Approximate location based on IP address (not precise GPS)
• Cookies & Tracking: Data from cookies and similar tracking technologies
• Log Data: IP address, browser type, referring/exit pages, timestamps

2.3 Third-Party Information

We may receive information about you from third parties, including:

• Payment processors and financial institutions
• Delivery and logistics partners
• Marketing and analytics partners
• Social media platforms (if you link accounts)
• Public databases and business partners

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Service Delivery

• Processing and fulfilling your orders
• Delivering plants and products to your address
• Providing garden design and maintenance services
• Customer support and technical assistance
• Responding to inquiries and requests

3.2 Communication

• Sending order confirmations and shipping updates
• Transactional emails (receipts, invoices)
• Marketing communications (if you've opted in)
• Service announcements and updates
• Customer feedback and surveys

3.3 Business Operations

• Improving our website and services
• Personalizing your experience
• Analyzing usage patterns and trends
• Fraud prevention and security
• Compliance with legal obligations

3.4 Marketing & Advertising

• Sending promotional emails and offers (with your consent)
• Displaying targeted advertisements
• Creating marketing campaigns
• Analyzing campaign effectiveness

4. Data Security

We are committed to protecting your personal information. We implement appropriate technical and organizational measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

4.1 Security Measures

• SSL Encryption: Your data is transmitted using secure SSL/TLS encryption
• Secure Servers: We use secure, industry-standard servers with firewalls
• Access Controls: Limited access to personal data by authorized personnel only
• Regular Audits: Periodic security assessments and vulnerability testing
• Password Protection: Your account is protected by a secure password

4.2 Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Typically:

• Account information: Retained while your account is active + 2 years after closure
• Transaction records: Retained for 7 years (for tax/legal compliance)
• Marketing data: Retained until you unsubscribe
• Cookies: Retained as specified in our Cookie Policy

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who assist us in operating our website and conducting our business, including:

• Payment processors (for secure payment handling)
• Shipping and delivery companies (for order fulfillment)
• Email service providers (for newsletters and communications)
• Analytics providers (for website improvement)
• Hosting providers (for website operation)

5.2 Legal Requirements

We may disclose your information when required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the safety, rights, and property of BloomGarden, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

If BloomGarden is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice before any such change takes effect.

5.4 With Your Consent

We may share your information for purposes other than those outlined above only with your explicit consent.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze website usage, and deliver personalized content.

6.1 Types of Cookies

• Essential Cookies: Required for website functionality (login, cart, security)
• Performance Cookies: Analyze website usage and performance
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising and retargeting

6.2 Controlling Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to:

• Accept or reject cookies
• Delete existing cookies
• Set preferences for specific websites
• Enable "Do Not Track" signals

6.3 Third-Party Tracking

We may use third-party analytics and advertising partners (such as Google Analytics, Facebook Pixel) to:

• Analyze website traffic and user behavior
• Display targeted advertisements
• Measure advertising campaign effectiveness

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access & Portability

You have the right to request and access a copy of your personal information we hold about you, in a commonly used and machine-readable format.

7.2 Rectification

You have the right to correct, update, or amend inaccurate or incomplete personal information.

7.3 Erasure ("Right to be Forgotten")

You may request deletion of your personal information, subject to certain legal exceptions (such as record-keeping obligations).

7.4 Restriction of Processing

You may request that we limit how we use your personal information while we verify its accuracy or assess the lawfulness of our processing.

7.5 Objection

You may object to certain types of processing, including:

• Direct marketing and promotional communications
• Automated decision-making and profiling
• Processing for legitimate interests

7.6 Withdraw Consent

If we process your information based on consent, you may withdraw that consent at any time by contacting us.

8. Third-Party Links & Services

Our website may contain links to third-party websites, applications, and services that are not operated by BloomGarden. This Privacy Policy applies only to information collected through our website.

8.1 External Links

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party services before providing your personal information.

8.2 Social Media

If you interact with us through social media platforms or link your accounts, those platforms' privacy policies apply to the information you share with them. Please review their policies for details on how they handle your data.

8.3 Payment Processing

We use third-party payment processors to handle credit card and other payment information. These processors maintain their own privacy policies and security standards. We do not store your complete payment card information on our servers.

9. Children's Privacy

BloomGarden's website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

9.1 Age Restrictions

If you are under 13 years old, please do not use our website or provide any information to us. If you are between 13 and 18, parental consent may be required for certain services.

9.2 Parental Notification

If we discover that we have collected personal information from a child under 13 without verified parental consent, we will take immediate steps to delete such information and notify the parent or guardian.

9.3 Contact for Concerns

If you believe we have collected information from a child, please contact us immediately at hello@bloomgarden.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the bottom of this policy
• Notify you via email (if required by law)
• Post a notice on our website
• Request your consent for significant changes (if required)

Your continued use of our website after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Data Protection Authority

If you are not satisfied with our response to your privacy inquiry, you may have the right to lodge a complaint with your local data protection authority or supervisory authority.