Privacy Policy - Bloom Supply

Privacy Policy

Last updated: January 1, 2025

At Bloom Supply Canada, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website or place an order with us. By using our website, you consent to the practices described in this policy.

Information We Collect

We collect personal information that you provide directly to us when you:

Create an account or register on our website
Place an order for products
Subscribe to our email newsletter or promotional communications
Contact our customer support team
Participate in surveys, contests, or promotions

Information we collect includes:

Name and contact information (email address, phone number, mailing address)
Payment information (processed securely through our payment processor — we do not store full credit card numbers)
Order history and transaction details
Account credentials (username and encrypted password)
Communication preferences
Device and browser information collected automatically when you visit our website (IP address, browser type, pages visited, time spent on site)

How We Use Your Information

We use the personal information we collect to:

Process and fulfil your orders, including arranging shipping and sending order confirmation and tracking information
Create and manage your customer account
Communicate with you about your orders, including shipping updates and delivery confirmations
Send promotional emails and newsletters if you have opted in — you may unsubscribe at any time
Respond to your customer service inquiries and support requests
Improve our website, products, and services based on usage patterns and customer feedback
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Comply with our legal obligations under applicable Canadian law

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information with:

Service providers. Third-party companies that help us operate our business — including payment processors, shipping carriers (Canada Post), email service providers, and website hosting providers. These parties are contractually required to protect your information and use it only for the services they provide to us.

Canada Post. Your name and shipping address are provided to Canada Post to facilitate delivery of your order. Canada Post’s privacy practices are governed by their own privacy policy.

Legal requirements. We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Bloom Supply, our customers, or others.

Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, customer information may be transferred as part of that transaction. We will notify you via email or prominent website notice of any such change.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data at any time by contacting us.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device that help us remember your preferences, keep you logged in, and understand how our website is used.

We use the following types of cookies:

Essential cookies — required for the website to function properly, including maintaining your shopping cart and session
Analytics cookies — help us understand how visitors interact with our website so we can improve the experience
Marketing cookies — used to deliver relevant promotions and track the effectiveness of our advertising

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, use, alteration, or disclosure. Our website uses 256-bit SSL encryption for all data transmitted between your browser and our servers. Payment processing is handled by PCI-compliant third-party payment processors — we do not store full payment card details on our systems.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

Your Rights Under Canadian Privacy Law

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Withdraw consent to the collection and use of your personal information (subject to legal and contractual restrictions)
Request deletion of your personal information, subject to our legal retention obligations
File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact us at the details below.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

Children’s Privacy

Our website and services are intended for adults aged 19 and older (18+ in Alberta and Quebec). We do not knowingly collect personal information from individuals under the legal purchase age. If we become aware that we have inadvertently collected information from a minor, we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of our website following any changes constitutes your acceptance of the updated policy.