Customer Data Management and Privacy Policy

Last Updated: 13th July 2026

This Privacy Policy describes how Bloom (“Bloom”, “we”, “us”, or “our”) collects, uses, shares, and protects information about you when you visit our website at www.ibloom.me (the “Website”), use our services, or interact with us. By using the Website, you agree to the terms of this Privacy Policy.

1. Information We Collect

a) Information You Provide Directly

  • Name, email address, phone number, and delivery address when placing an order
  • Account credentials if you create an account
  • Payment information (processed securely via third-party payment processors)
  • Health-related information you voluntarily provide (e.g., through wellness quizzes, consultation forms, or product recommendation tools)
  • Communications you send us via email or contact forms

b) Information Collected Automatically

When you visit our Website, we and our third-party partners automatically collect certain information, including:

  • Internet Protocol (IP) address and approximate location (city, state, region)
  • Browser type and version, operating system, and device identifiers
  • Pages visited, time spent on pages, and clickstream data
  • Referring URLs and search terms
  • Session identifiers and timestamps

c) Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar tracking technologies to operate and improve our Website. These include:

  • Essential cookies: Required for the Website to function (e.g., shopping cart, login sessions)
  • Analytics cookies: Help us understand how visitors use the Website (e.g., Google Analytics)
  • Advertising cookies: Used for marketing and remarketing (e.g., Google Ads, DoubleClick)
  • Social media pixels: Enable sharing and audience building on platforms like Facebook

You can control cookies through your browser settings or our cookie consent tool. Disabling certain cookies may affect Website functionality.

2. Third-Party Tracking and Advertising

Our Website loads third-party scripts and pixels that may collect addressing and signaling information (including IP addresses and device/browser identifiers) as part of normal webpage operation. These third parties include:

These services are subject to their own privacy policies. We encourage you to review Google’s Privacy Policy at https://policies.google.com/privacy.

Certain third-party trackers may constitute “pen registers” under California law (Cal. Penal Code § 638.50(b)). By continuing to use this Website after being presented with this notice and our cookie consent banner, you provide informed, specific, and prior consent to the installation and use of these tracking processes on your device, as required by California Penal Code § 638.51(a).

3. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders and manage your account
  • Send order confirmations, shipping updates, and customer service communications
  • Provide personalized wellness recommendations, where applicable
  • Improve and optimize our Website and user experience
  • Measure advertising effectiveness and attribute conversions
  • Retarget and remarket to Website visitors across platforms
  • Comply with legal obligations
  • Detect and prevent fraud and security incidents

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Service providers: Payment processors, shipping carriers, email service providers, and IT vendors who process data on our behalf
  • Advertising and analytics partners: Google and other platforms that help us measure and optimize our marketing
  • Legal authorities: When required by law, subpoena, or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets

5. Your Privacy Rights

California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
  • Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information

Consent to Tracking (California Pen Register Law)

Under California Penal Code § 638.51(a), installing or using a pen register requires either a court order or prior informed consent. By clicking “Accept” on our cookie consent banner, or by continuing to use our Website after reviewing this Policy and the cookie banner, you provide your informed, specific, and voluntary consent to the use of tracking technologies described in Section 2.

You may withdraw consent at any time by: (1) clicking “Manage Cookies” in our cookie banner, (2) adjusting your browser settings to block cookies, or (3) using opt-out tools provided by Google at https://adssettings.google.com.

Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, and other states with applicable privacy laws may have similar rights. Contact us to exercise your rights.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Analytics and advertising data is retained in accordance with the retention settings configured in our third-party platforms (typically 18 months for Google Analytics).

Data Request Process: Users may submit a request to access their personal information through our chatbot.

7. Data Security

Personal information collected through our website is stored and processed using secure hosting and cloud infrastructure providers. We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of your data.

8. Children’s Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 years of age. If we become aware that personal information has been collected from a child under 13 without appropriate parental consent, we will take reasonable steps to delete such information.

9. Links to Third-Party Sites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Website after any changes constitutes your acceptance of the updated Policy.