About this Privacy Policy

Bloomeffects, Inc. ("Bloomeffects", "we", "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose and otherwise process personal information when you interact with Bloomeffects.

This Privacy Policy applies to information collected through bloomeffects.com, our online store, customer accounts, loyalty and rewards programs, Skin Quiz, promotions, contests and sweepstakes, reviews, customer service interactions, email and SMS communications, social media interactions, events and other interactions with Bloomeffects (collectively, the "Services").

This Privacy Policy does not apply to websites, applications or services operated independently by third parties. Their privacy practices are governed by their own privacy policies.

Personal information we collect

Depending on how you interact with us, we may collect the following categories of personal information.

• Contact information, such as your name, email address, telephone number, billing address and shipping address.
• Account information, such as customer account details, account identifiers, login information, preferences and account history.
• Order and transaction information, such as products purchased, order history, returns, discounts, transaction details, shipping information and fulfilment information.
• Payment information. Payment information may be collected and processed by our payment processors and ecommerce providers in order to complete transactions. Bloomeffects does not necessarily receive or store complete payment card details.
• Rewards and loyalty information, such as points, rewards activity, referrals, loyalty status and birthday information voluntarily provided for birthday rewards. We do not require your full date of birth for this purpose.
• Skin Quiz and beauty preference information, including information you voluntarily provide about your skin type, skin goals and skin concerns so that we can provide product recommendations and improve your experience. Our Skin Quiz does not request medical history, medications, pregnancy information or other health information.
• Communications, including emails, SMS messages, customer service requests, feedback and other communications you send to us.
• Marketing preferences, such as whether you have subscribed to email or SMS marketing and your communication preferences.
• User content, such as product reviews, ratings, comments, photographs or other content you choose to submit.
• Device and internet activity information, such as IP address, browser type, operating system, device type, device identifiers, pages viewed, referring pages, interactions with our website, timestamps, approximate location derived from IP address and similar technical information.
• Cookie and advertising information, such as cookie identifiers, advertising identifiers, analytics information, attribution information and information about interactions with advertisements and marketing campaigns, subject to your consent and privacy choices where required.
• Promotion information that you provide when entering a competition, promotion, giveaway or similar program.
• Fraud and security information used to protect transactions, accounts, our website and our customers.

How we collect personal information

We collect personal information from several sources:

• Directly from you, including when you place an order, create an account, join our rewards program, complete the Skin Quiz, subscribe to marketing, contact customer service, submit a review, participate in a promotion or otherwise communicate with us.
• Automatically when you use our Services, including through cookies, pixels, tags, software development kits and similar technologies, subject to applicable consent requirements and your privacy choices.
• From service providers and business partners, including ecommerce providers, payment providers, analytics providers, advertising platforms, social media platforms, fulfilment providers and other companies that assist us in operating our business.
• From other sources where permitted by applicable law, including information you make publicly available or provide through third-party platforms.

Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember preferences, understand website usage, measure performance, prevent fraud, personalise experiences and, where you have provided the required consent, support advertising, attribution and marketing activities.

We use CookieYes to manage cookie consent and privacy preferences. Where consent is required, non-essential cookies and tracking technologies are subject to your consent choices.

You can change or withdraw your cookie choices using the cookie preference controls available on our website.

For more information about the cookies and similar technologies used on our website, including their purposes and duration, please review our Cookie Policy.

How we use personal information

We may use personal information to:

• Provide, operate and maintain our Services.
• Process purchases, payments, returns and refunds.
• Arrange shipping, delivery and fulfilment.
• Create and manage customer accounts.
• Operate our rewards and loyalty programs.
• Provide Skin Quiz results and product recommendations.
• Respond to customer service enquiries and other requests.
• Send transactional and administrative communications.
• Send marketing and promotional email or SMS communications where permitted by law and in accordance with your preferences.
• Personalise our website, content, product recommendations and customer experience.
• Measure and analyse website traffic, usage and performance.
• Understand customer preferences and purchasing trends.
• Improve and develop our products, Services and customer experience.
• Measure advertising performance, attribution and marketing effectiveness.
• Conduct advertising and retargeting where permitted and subject to required consent and opt-out rights.
• Administer promotions, contests, giveaways and surveys.
• Detect, investigate and prevent fraud, misuse and security incidents.
• Protect our customers, business, systems and legal rights.
• Comply with legal, tax, accounting and regulatory obligations.
• Facilitate a merger, acquisition, financing, restructuring, sale of assets or other business transaction.

Email and SMS marketing

If you subscribe to marketing communications, we may send you information about products, promotions, offers and other Bloomeffects news.

You can unsubscribe from marketing emails using the unsubscribe link contained in our emails. You may opt out of marketing SMS messages by following the instructions provided in those messages, including replying STOP where applicable.

Opting out of marketing communications does not prevent us from sending non-marketing communications that are necessary to provide our Services, such as order confirmations, shipping notifications, account notifications, security messages or customer service communications.

Automated processing and personalisation

We use automated technologies in connection with ordinary ecommerce operations, including product recommendations, customer segmentation, analytics, advertising attribution and personalisation, and fraud and security detection.

We do not use solely automated decision-making that produces legal effects or similarly significant effects concerning you.

How we disclose personal information

We may disclose personal information to third parties where reasonably necessary to operate our business, provide the Services or for the other purposes described in this Privacy Policy.

These recipients may include:

• Ecommerce, website and hosting providers.
• Payment processors.
• Shipping, fulfilment and logistics providers.
• Customer service providers.
• Email and SMS communications providers.
• Analytics and measurement providers.
• Advertising and social media platforms.
• Fraud prevention, cybersecurity and security providers.
• Loyalty, rewards, reviews and subscription providers.
• Professional advisers, including lawyers, accountants and consultants.
• Government authorities or other parties where required by law.
• Parties involved in an actual or proposed merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction.
• Other parties where you direct us to disclose information or provide your consent.

We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you, subject to applicable law.

Sale and sharing of personal information

Bloomeffects does not sell personal information for money in the conventional sense.

However, certain privacy laws, including California law, define "sale" and "sharing" more broadly. Some disclosures involving advertising technologies, cookies, pixels and advertising or social media partners may constitute a "sale", "sharing", or processing for targeted or cross-context behavioural advertising under applicable law.

Where applicable, these activities are subject to your consent and privacy choices. You may exercise applicable rights using our cookie/privacy preference controls or by contacting us using the information below.

We do not knowingly sell or share personal information of consumers under 16 years of age.

Categories disclosed, sold or shared

During the preceding 12 months, depending on your interactions with us, we may have disclosed the following categories of personal information for business purposes:

• Identifiers and contact information.
• Customer account information.
• Commercial information, including purchases and order history.
• Payment, billing, shipping and fulfilment information.
• Internet and electronic network activity, including device, browser, cookie and website usage information.
• Approximate location information.
• Marketing and communication preferences.
• Customer service communications.
• Skin type, skin goals and skin concerns voluntarily provided through our Skin Quiz.
• Inferences concerning product interests and preferences derived from interactions with our Services and purchase activity.

For purposes of privacy laws that define advertising-related disclosures as "sale" or "sharing", the categories involved may include identifiers, internet or electronic network activity, device and cookie identifiers, approximate location, commercial information and inferences concerning interests and preferences.

The recipients of these disclosures may include service providers, contractors, ecommerce providers, payment providers, fulfilment and shipping providers, communications providers, analytics providers, advertising and social media platforms, fraud and security providers, loyalty and reviews providers and other business service providers.

Browser privacy signals and Global Privacy Control

Where required by applicable law, we recognise and process supported browser-based universal opt-out preference signals, including Global Privacy Control ("GPC"), as requests to opt out of applicable sale, sharing or targeted advertising activities.

Browser "Do Not Track" ("DNT") signals are not interpreted consistently across the industry. Where our consent management technology recognises a supported browser privacy signal, we apply the corresponding privacy preference in accordance with our configuration and applicable law.

Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our Services, maintaining customer accounts and transaction records, meeting legal, accounting and tax requirements, resolving disputes, preventing fraud and enforcing agreements.

Retention periods vary depending on the nature of the information, why it was collected and applicable legal requirements.

When we no longer have a legitimate need to retain personal information, we will delete, anonymise or otherwise securely dispose of it, subject to information maintained in backups or records that we are legally required to retain.

International transfers

Bloomeffects is based in the United States and uses service providers that may process personal information in the United States and other countries. Accordingly, your information may be transferred to, stored or processed in a country other than the country in which you live.

Where personal information protected by the European Economic Area ("EEA"), United Kingdom or other applicable data protection laws is transferred to a country that has not been recognised as providing an adequate level of data protection, we use appropriate safeguards where required, which may include approved Standard Contractual Clauses or other lawful transfer mechanisms.

EEA and UK privacy rights

If the GDPR or UK GDPR applies to the processing of your personal information, our legal basis depends on the particular processing activity.

We may process personal information on the basis of:

• Contract, where processing is necessary to provide products or Services you request or perform a contract with you.
• Consent, including where consent is required for cookies, marketing or other processing activities.
• Legitimate interests, including operating, securing and improving our business and Services, preventing fraud, understanding how customers interact with our Services, providing customer support, maintaining business records and improving our products and customer experience, provided those interests are not overridden by your rights and interests.
• Legal obligations, where processing is necessary to comply with laws or regulatory requirements applicable to us.

Subject to applicable law, you may have the right to request access to, correction of or deletion of your personal information; restrict or object to certain processing; receive certain information in a portable format; and withdraw consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

You may also have the right to lodge a complaint with the data protection authority responsible for your jurisdiction.

United States state privacy rights

Residents of certain US states may have privacy rights under applicable state law. Depending on your state and subject to applicable exceptions, these may include rights to:

• Know or confirm whether we process your personal information.
• Access personal information we maintain about you.
• Correct inaccurate personal information.
• Request deletion of personal information.
• Obtain a portable copy of certain personal information.
• Opt out of the sale or sharing of personal information or its processing for targeted advertising where those rights apply.
• Limit certain uses and disclosures of sensitive personal information where applicable.
• Not receive discriminatory treatment for exercising applicable privacy rights.
• Appeal our decision regarding a privacy request where applicable state law provides that right.

You may exercise applicable cookie, advertising, sale or sharing preferences through the privacy controls available on our website. You may exercise other privacy rights by contacting us using the details below.

We may need to verify your identity before completing certain requests. Where permitted by law, you may use an authorised agent to submit a request on your behalf, subject to appropriate verification.

California privacy disclosures

California residents may have additional rights under the California Consumer Privacy Act, as amended ("CCPA").

The categories of personal information we collect, the sources from which we collect it, the purposes for which we use it, and the categories of recipients to whom it is disclosed are described throughout this Privacy Policy.

We do not sell personal information for monetary consideration. As described above, certain advertising-related disclosures may constitute "sale" or "sharing" under the CCPA's definitions.

California consumers may opt out of applicable sale or sharing through the privacy controls provided on our website. Where required, we also process recognised opt-out preference signals such as Global Privacy Control.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

California Shine the Light

California residents may also have rights under California's "Shine the Light" law regarding certain disclosures of personal information to third parties for their own direct marketing purposes. To submit a request, email info@bloomeffects.com with "Request for California Privacy Information" in the subject line.

Rewards and loyalty program

Bloomeffects may operate a loyalty or rewards program through which customers can earn points, rewards, discounts or other benefits for activities such as purchases, referrals or providing birthday information.

Participation is voluntary. Information collected through the program is used to administer membership, calculate and provide rewards, communicate with members and operate and improve the program.

You may choose not to participate or may request to leave the program, subject to the applicable program terms.

Children's privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We also do not knowingly sell or share the personal information of consumers under 16 years of age for purposes requiring affirmative authorisation under applicable law.

If you are a parent or legal guardian and believe a child has provided us with personal information inappropriately, please contact us at info@bloomeffects.com. If we determine that we have collected personal information from a child in circumstances prohibited by applicable law, we will take appropriate steps to delete it.

Social media and public content

Our Services may allow you to interact with social media platforms or submit reviews, comments, images or other content. Information that you choose to make public may be visible to other users or the general public.

Third-party social media platforms independently control information processed through their services and their own privacy policies apply to that processing.

Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Third-party websites and services

Our Services may contain links to websites, applications and services operated by third parties. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy notices before providing personal information to them.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, Services or legal obligations.

When we update this Privacy Policy, we will revise the effective date at the top of this page. Where required by law, we will provide additional notice or obtain consent for material changes.

Contact us and exercise your privacy rights

If you have questions about this Privacy Policy or would like to exercise an applicable privacy right, you may contact us at:

Bloomeffects, Inc.
64 Bleecker St Ste 410
New York, NY 10012-2410
USA

Email: info@bloomeffects.com
Telephone: 1-877-969-1788

Contact page: https://bloomeffects.com/pages/contact-us

When you submit a privacy request, we may need to verify your identity before responding. We will respond within the timeframe required by applicable law.