Privacy Policy
Bloomish Inc. (“Bloomish,” “we,” or “us”) is a Florida corporation. This Privacy Policy explains how we collect, use, and protect personal information when you visit bloomish.com or purchase our products.
This policy applies to our website and direct sales to customers in the United States.
Privacy directory
Information we collect
You give us
Name, email address, phone number, shipping and billing address, order contents, account login credentials, product reviews, customer service messages, and anything you send us directly.
Collected automatically when you visit
IP address, device and browser type, operating system, pages viewed, referring site, time on site, and general location inferred from IP. Collected through cookies and similar technologies.
From others
Payment confirmation and fraud signals from our payment processors, shipping status from carriers, and advertising and analytics data from platforms including Meta, Google and TikTok where applicable.
What we do not collect
We never see or store your full payment card number. Card data goes directly to our payment processor.
We do not ask for your Social Security number, tax identification number, or any government ID.
We do not knowingly collect information indicating health conditions, precise geolocation, race, religion, sexual orientation, biometric data, or other categories treated as sensitive under state law. If you tell us about a skin sensitivity or reaction in a customer service message, we use it only to help you and to meet our safety reporting obligations, and we do not use it for advertising.
How we use it
- Process, fulfill and ship your orders
- Handle returns, exchanges and refunds
- Respond to customer service inquiries
- Send order and shipping notifications
- Send marketing email or SMS, if you've opted in
- Detect and prevent fraud
- Understand how the site is used and improve it
- Show you Bloomish advertising on other platforms
- Meet legal obligations, including cosmetic product safety reporting to the US Food and Drug Administration
Who we share it with
We do not sell your personal information for money.
We share information with service providers who need it to do their jobs: our ecommerce platform (Shopify), our fulfillment center, payment processors, shipping carriers, email and SMS providers, analytics providers, and customer service tools. They may use it only to provide services to us.
Advertising. We use advertising and analytics technologies that share information about your device and browsing with platforms such as Meta, Google and TikTok so we can show you relevant ads. Under California, Colorado, Connecticut and several other state laws, this is treated as "selling" or "sharing" personal information, and you have the right to opt out. See Section 05.
Legal. We disclose information where required by law, subpoena or court order, to protect our rights, or to report serious adverse events to the FDA as required for cosmetic products.
Business transfers. If Bloomish is acquired or merges, customer information may transfer as part of that transaction.
Cookies and tracking
We use cookies for essential site function (keeping your cart, keeping you logged in), for analytics, and for advertising.
You can manage non-essential cookies through the preference control on our site, and you can block cookies in your browser settings. Blocking essential cookies will break checkout.
Global Privacy Control. We recognize and honor the GPC signal. If your browser sends GPC, we treat it as a valid opt-out of the sale and sharing of your personal information for that browser.
Your rights and choices
Depending on where you live, you may have the right to:
- Know what personal information we've collected, where it came from, why we have it, and who we've shared it with
- Access a copy of your personal information
- Correct inaccurate information
- Delete your personal information
- Take it with you in a portable format
- Opt out of the sale or sharing of your information for targeted advertising
- Opt out of profiling that produces legal or similarly significant effects
- Not be discriminated against for exercising any of these rights
How to make a request. Email customerservice@bloomish.com.
We'll verify your identity before acting, usually by confirming you control the email on the account, and we may ask for additional information for deletion requests. We respond within 45 days and will tell you if we need more time.
Authorized agents. You may use an authorized agent. We'll ask for written proof of authorization and may ask you to verify your identity directly.
Appeals. If we deny your request, you may appeal by replying to our response. If we deny the appeal, you may contact your state Attorney General.
Opting out of ads. Use the "Do Not Sell or Share My Personal Information" link in our footer, or enable GPC in your browser.
Marketing. Unsubscribe from any email, or reply STOP to any text. Order and shipping notifications will continue since they're not marketing.
Text messages
If you opt in to SMS, you're agreeing to receive automated marketing texts from Bloomish at the number you gave us. Consent isn't a condition of purchase. Message and data rates may apply. Frequency varies. Reply STOP to cancel, HELP for help.
How long we keep it
Order records: seven years, for tax and accounting. Marketing contacts: until you unsubscribe, plus a suppression record so we don't contact you again. Adverse event records: as required by the Modernization of Cosmetics Regulation Act. Site analytics: 26 months.
Security
We use encryption in transit, restricted internal access, and PCI-compliant payment processing. No system is completely secure, and we can't guarantee absolute security.
Children
Our site isn't directed to children under 13 and we don't knowingly collect their information. If you believe a child under 13 has given us information, email customerservice@bloomish.com and we'll delete it.
We do not sell or share the personal information of consumers we know to be under 16.
Where your information is processed
Bloomish Inc. stores and processes your personal information in the United States. Our website platform, payment processing, fulfillment and customer service systems are operated in the US.
We do not share US customer information with our manufacturing partner in Mexico or with any affiliated company outside the United States. Product formulation and manufacturing involve no customer data.
Bloomish México (bloomish.com.mx) is a separate website operated by a separate company on a separate platform. It has no access to information collected here, and this policy does not apply to it.
Nevada residents
Nevada residents may direct us not to sell certain personal information. Email customerservice@bloomish.com with "Nevada Opt-Out" in the subject line.
Changes
We'll post any changes here with an updated date. Material changes will be announced by email or a site notice.
Contact
To report a reaction to a Bloomish product, contact us at customerservice@bloomish.com.