Privacy Policy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Personal Information: Name, email address, phone number, business name, and billing address.
• Usage Data: Information about how you interact with our website and services.
• Communication Data: Records of correspondence when you contact us.
• Technical & Device Data: IP address, browser type and version, device type, operating system, referring pages, and timestamps of your visits.
• Payment Information: Card details are entered directly into our payment processor, Stripe, and are transmitted straight to Stripe.

We never see, handle, or store full payment card numbers on our own systems or in our database. Stripe processes and stores card data as a PCI-DSS Level 1 certified provider; we retain only non-sensitive records such as the last four digits, card brand, and transaction status needed for invoicing and support.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send promotional communications (with your consent)
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with our legal, tax, and accounting obligations

3. Information Sharing

We do not sell or rent your personal information. We share it only with the service providers that make our business run, and only to the extent each provider needs it:

• Stripe — payment processing and card storage
• Microsoft 365 — business email, calendar, and document storage
• Google — website analytics, reCAPTCHA spam protection, and optional Google sign-in
• Nodes Unlimited — web hosting, servers, and domain infrastructure
• OpenAI, Deepgram, DeepSeek — AI features, including our voice and chat assistant
• Tawk.to — live chat support on our website

We may also disclose information when required by law, subpoena, or other legal process; to enforce our agreements; to protect the rights, property, or safety of Blooming Brands Inc., our clients, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

6. Your Rights

Depending on where you live, including under the GDPR and the CCPA/CPRA, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Receive a portable copy of your data in a machine-readable format
• Object to or restrict certain processing of your information
• Not be discriminated against for exercising any of these rights

To exercise any of these rights, email [email protected]. We will verify your identity and respond within 45 days, or within one month where the GDPR applies. Exercising these rights is free of charge, and we will never deny you service or charge you a different price for doing so.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this policy. Client project and account records are retained for the duration of our engagement and for up to seven (7) years afterwards to meet tax, accounting, and contractual obligations. Marketing contacts are retained until you unsubscribe. Website analytics and server logs are retained for up to twenty-six (26) months. When information is no longer needed, we delete it or irreversibly anonymize it.

8. Children's Privacy

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact [email protected] and we will delete it promptly.

9. International Data Transfers

We are based in the United States, and the information we collect is processed and stored in the United States and other countries where our service providers operate. If you access our services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism to protect your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date shown at the top of this page, and for material changes we will provide additional notice by email or through a prominent notice on our website. Your continued use of our services after an update takes effect means you accept the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your privacy rights, please contact us:
Email: [email protected]
Phone: +1-888-898-8008
Blooming Brands Inc., 303 Pawtucket Blvd, Lowell, MA 01854, USA