Privacy Policy

Welcome to BloomWitness. We understand the importance of your personal information and are committed to protecting your privacy and personal data security. This privacy policy explains how we collect, use, store, share, and protect your information when you visit our website or use our services.

This policy applies to all users of our website, products, and services. It complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Before using our products or services, please carefully read and understand this policy. By using our services, you acknowledge that you have read and agree to this policy.

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and using your personal information depends on the specific data involved and the context in which we collect it. We process your personal data under the following legal bases:

• Contractual Necessity: To fulfill orders, process payments, and provide customer support.
• Legitimate Interests: To improve our website, prevent fraud, and ensure network and information security.
• Consent: For marketing communications and non-essential cookies, where we request your explicit consent.
• Legal Obligations: To comply with applicable laws and regulatory requirements.

We work with trusted third-party service providers to operate our business. These providers process your data only on our instructions and are contractually obligated to protect your information. We do not sell your personal information to any third party.

Our current third-party service providers include:

• Payment Processing: PayPal / Stripe — for processing online payments. These providers handle your payment details in accordance with their own privacy policies and PCI DSS standards.
• Security: Cloudflare Inc. — for Turnstile bot protection and CDN services (see Turnstile Notice section below).
• Analytics: Google Analytics — to understand website traffic and usage patterns in anonymized form.
• Email & Communications: We may use third-party email service providers to send order confirmations and support communications.

We encourage you to read the privacy policies of these third-party providers for more information on how they handle your data.

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Deletion ("Right to be Forgotten"): You can request that we delete your personal data, subject to certain legal exceptions.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Opt-Out of Data Sale: (CCPA) We do not sell your personal information. However, California residents have the right to opt out of any future sale of their data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Right to Object: You can object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to your request within 30 days, as required by applicable law.

We use cookies and similar tracking technologies to identify your browser or device, understand your interests, and provide you with basic functionality and services. The types of cookies we use include:

• Essential Cookies: Required for the website to function properly, including shopping cart and account login.
• Analytics Cookies: Help us understand how visitors interact with our website to improve user experience.
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

Upon your first visit to our website, we display a cookie consent banner that allows you to accept or decline non-essential cookies. You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect your complete experience of our services.

This website uses Cloudflare Turnstile, a security service provided by Cloudflare Inc., to protect our forms and checkout process from automated abuse and bots.

Turnstile collects certain information about your device and browser activity for the sole purpose of determining whether you are a human visitor. This processing is necessary for our legitimate interest in ensuring the security and integrity of our website.

By using this website, you acknowledge that you have read and understood Cloudflare's Turnstile Privacy Addendum, which is incorporated by reference into this Privacy Policy. You can review the full addendum at: Cloudflare Turnstile Privacy Policy