Privacy Policy

Our Commitment to Privacy

At bloom bca, we respect and protect your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services. We are committed to transparency and giving you control over your personal data.

By using our website or services, you consent to the practices described in this privacy policy. We encourage you to read this document carefully and contact us with any questions or concerns.

Information We Collect

Personal Information You Provide

• Contact Information: Name, email address, phone number, and delivery address when you place orders or submit inquiries
• Order Information: Details about floral arrangements, delivery preferences, recipient information, and special instructions
• Payment Information: Billing address and payment details processed securely through third-party providers
• Communication Records: Messages sent through contact forms, email correspondence, and phone call records

Information Collected Automatically

• Usage Data: IP address, browser type, device information, pages visited, and time spent on site
• Cookie Data: Information stored through cookies and similar technologies (see our Cookie Policy)
• Analytics Data: Website performance metrics and user behavior patterns

How We Use Your Information

Service Delivery

• Process and fulfill your floral orders
• Coordinate delivery logistics and timing
• Communicate order updates and delivery confirmations
• Provide customer support and respond to inquiries

Business Operations

• Maintain customer accounts and order history
• Process payments and prevent fraud
• Improve website functionality and user experience
• Comply with legal obligations and tax requirements

Marketing Communications (With Consent)

• Send promotional emails about new services and special occasions
• Provide personalized recommendations based on past orders
• Share educational content about flower care and arranging

Data Protection Measures

We implement comprehensive security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission between your device and our servers
• Access Controls: Limited employee access to personal data based on job requirements
• Secure Storage: Protected databases with regular security audits and updates
• Payment Security: PCI-compliant payment processing through trusted third-party providers
• Breach Notification: Prompt notification within 72 hours of any data security incident

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Order Records: 5 years for financial and tax compliance
• Contact Form Submissions: 3 years for service improvement
• Marketing Data: Until consent is withdrawn or account is closed
• Analytics Data: Anonymized after 26 months per industry standards

Your Privacy Rights

Under Canadian privacy law and GDPR (where applicable), you have the following rights:

• Right to Access: Request copies of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Object: Object to processing of your data for marketing purposes
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

Third-Party Services

We work with trusted third-party providers to deliver our services:

• Payment Processors: Secure payment gateways for transaction processing
• Analytics Services: Website performance and user behavior analysis
• Email Services: Communication and marketing email delivery
• Hosting Providers: Secure website and data storage

These providers are contractually obligated to protect your data and use it only for specified purposes. We do not sell your personal information to third parties.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. Parents or guardians who believe we may have collected information from a child should contact us immediately.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email to registered users. The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this policy regularly to stay informed about how we protect your information.