top of page

Privacy Policy

Effective Date: 6/2/2026

1. Introduction

Bloom & Vital ("Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, process, store, and protect your personal information when you visit our website, create an account, make a purchase, communicate with us, or otherwise use our services.

This Privacy Policy is intended to comply with applicable privacy and data protection laws, including:

  • The European Union General Data Protection Regulation (GDPR)

  • The UK General Data Protection Regulation (UK GDPR), where applicable

  • Applicable United States federal laws

  • Georgia state laws, including Georgia data breach notification requirements

  • Other applicable privacy laws based on your location

 
2. Data Controller

For purposes of the GDPR, Bloom & Vital is the Data Controller of your personal information.

Contact Information:

Bloom & Vital
Email: info@bloomandvital.store
 

3. Personal Information We Collect

We collect the following categories of personal information:

 
Identity Information

  • First and last name

  • Username

  • Account credentials

 
Contact Information

  • Email address

  • Billing address

  • Shipping address

  • Telephone number

 
Transaction Information

  • Order history

  • Product purchases

  • Returns and refunds

  • Payment confirmations

 
Payment Information

Payment card information is generally processed directly by our third-party payment processors. We do not store complete payment card numbers on our servers.

 
Technical Information

  • IP address

  • Browser information

  • Device identifiers

  • Operating system

  • Time zone settings

  • Website usage information

 
Marketing Information

  • Communication preferences

  • Subscription preferences

  • Responses to promotions and surveys

 
4. How We Collect Information

We collect information through:

  • Account registration forms

  • Checkout and purchase processes

  • Customer support interactions

  • Newsletter signups

  • Cookies and tracking technologies

  • Analytics tools

  • Payment processors

  • Shipping providers

  • Social media integrations

 
5. Lawful Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction requiring a legal basis for processing, we process your personal information under one or more of the following lawful bases:

 
Contract Performance

To:

  • Process orders

  • Deliver products

  • Manage customer accounts

  • Provide customer support

 
Legitimate Interests

To:

  • Improve website performance

  • Prevent fraud

  • Secure our systems

  • Analyze website usage

  • Maintain business operations

 
Consent

To:

  • Send marketing communications

  • Use non-essential cookies

  • Conduct certain advertising activities

You may withdraw consent at any time.

 
Legal Obligation

To:

  • Comply with tax laws

  • Maintain required records

  • Respond to lawful government requests

  • Meet regulatory obligations

 
6. Why We Use Personal Information

We use personal information to:

  • Process and fulfill orders

  • Provide customer support

  • Manage customer accounts

  • Prevent fraud and unauthorized transactions

  • Improve website functionality

  • Conduct analytics

  • Send service-related notifications

  • Send marketing communications where permitted

  • Comply with legal obligations

  • Protect our legal rights and business interests

 
7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain website functionality

  • Remember user preferences

  • Analyze website traffic

  • Measure advertising effectiveness

  • Personalize user experiences

For visitors from the EEA, UK, and jurisdictions requiring consent, non-essential cookies are activated only after receiving your consent.

You may manage cookie preferences through our cookie consent banner or your browser settings.

 
8. Marketing Communications

We may contact you using:

  • Email

  • SMS/Text Messages

  • Push Notifications

  • Postal Mail

  • Telephone Calls (where permitted)

Purposes include:

  • Promotions and discounts

  • Product announcements

  • Newsletter updates

  • Loyalty program communications

  • Customer surveys

  • Company news

 
Opting Out

You may unsubscribe at any time by:

  • Clicking the unsubscribe link in emails

  • Replying STOP to SMS messages

  • Adjusting account communication preferences

  • Contacting us at info@bloomandvital.store

Transactional communications relating to orders, security, accounts, or customer service may still be sent.

 
9. Disclosure of Personal Information

We may share personal information with:

 
Service Providers

Including:

  • Payment processors

  • Hosting providers

  • Cloud storage providers

  • Shipping carriers

  • Customer support platforms

  • Email marketing providers

  • Analytics providers

All service providers are required to process information according to contractual confidentiality and security obligations.

 
Business Transactions

Information may be transferred in connection with:

  • Mergers

  • Acquisitions

  • Asset sales

  • Corporate reorganizations

 
Legal Compliance and Law Enforcement

We may disclose personal information:

  • To comply with legal obligations

  • In response to subpoenas, court orders, or lawful requests

  • To law enforcement agencies where required by law

  • To protect our rights, property, or safety

  • To investigate fraud or security incidents

We disclose only the information reasonably necessary under applicable law.

 
10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries.

Where GDPR applies, we implement appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions where available

  • Other lawful transfer mechanisms recognized under applicable law

 
11. Data Retention

We retain personal information only as long as necessary to:

  • Provide services

  • Fulfill contractual obligations

  • Maintain business records

  • Comply with legal requirements

  • Resolve disputes

  • Enforce agreements

Retention periods vary depending on the nature of the information and applicable legal requirements.

 
12. Your Privacy Rights
 
GDPR Rights

Individuals in the EEA and UK may have the right to:

  • Access personal information

  • Correct inaccurate information

  • Delete personal information

  • Restrict processing

  • Object to processing

  • Receive data portability

  • Withdraw consent

  • Lodge a complaint with a supervisory authority

To exercise these rights, contact:

Email: info@bloomandvital.store

We generally respond within one month as required by GDPR.

 
U.S. Privacy Rights

Depending on your state of residence, you may have rights regarding:

  • Access to personal information

  • Correction of inaccurate information

  • Deletion of personal information

  • Data portability

  • Opt-out rights where applicable

Requests may be submitted through:

Email: info@bloomandvital.store

We may verify your identity before processing requests.

 
13. Children's Privacy

Our website is not intended for children under 13 years of age.

We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If we discover that personal information from a child under 13 has been collected improperly, we will delete the information as soon as reasonably practicable.

Parents may contact us at info@bloomandvital.store to request deletion of a child's information.

 
14. Security Measures

We maintain reasonable administrative, technical, and physical safeguards, including:

  • SSL/TLS encryption

  • Secure payment processing

  • Access controls

  • Password protection

  • Network monitoring

  • Data encryption where appropriate

  • Employee confidentiality training

While we strive to protect personal information, no security system is completely secure.

 
15. Georgia Data Breach Notification

If a security breach involving personal information occurs, we will provide notifications as required by applicable Georgia and federal laws. Notifications may be provided by email, website notice, written notice, or other legally permitted methods.

 
16. Contact Information

For privacy-related inquiries or requests:

Privacy Officer
Bloom & Vital
Email: info@bloomandvital.store
EU/EEA residents may also contact their local data protection authority regarding concerns about our processing of personal information.

bottom of page