PRIVACY POLICY

Bloom&Glow Effective Date: May 7, 2026 Last Updated: May 7, 2026

1. INTRODUCTION

Bloom&Glow ("we," "us," "our," or the "Company") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a purchase, or interact with our Services.

By using our Services, you consent to the practices described in this Policy. If you do not agree, please do not use our Services.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

We collect information you provide when you:

• Create an account or place an order (name, email address, shipping address, billing address, phone number)
• Process payment (payment card details, billing information—processed securely by our payment processors)
• Contact customer support (correspondence, complaints, feedback)
• Subscribe to our newsletter or marketing communications (email address, preferences)
• Participate in surveys, promotions, or contests

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, search terms, products viewed
• Cookies and Tracking Technologies: See Section 7 for details
• Location Data: General geographic location based on IP address

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors (transaction confirmations, fraud screening results)
• Shipping carriers and dropshipping suppliers (delivery status, tracking information)
• Marketing and analytics partners (audience insights, advertising performance)
• Social media platforms (when you interact with us through social channels)

3. HOW WE USE YOUR INFORMATION

We use your information to:

• Process and fulfill your orders, including sharing necessary details with our dropshipping suppliers and shipping carriers
• Communicate with you about your orders, account, and customer service inquiries
• Send marketing communications, promotions, and product updates (with your consent where required)
• Personalize your shopping experience and recommend products
• Improve our website, products, and services
• Detect, prevent, and address fraud, security issues, and technical problems
• Comply with legal obligations and enforce our Terms of Service
• Conduct analytics and market research

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information with:

4.1 Service Providers and Suppliers

• Dropshipping Suppliers and Manufacturers: We share your name, shipping address, contact details, and order information with our third-party suppliers (which may be located internationally, including in countries such as China) to fulfill your orders.
• Payment Processors: Such as Shopify Payments, Stripe, PayPal, or other processors to handle transactions securely.
• Shipping Carriers: Including USPS, UPS, FedEx, DHL, and international postal services for delivery.
• Email and Marketing Platforms: For sending transactional and marketing emails.
• Analytics Providers: Such as Google Analytics, Meta Pixel, and similar tools.
• Customer Support Tools: For managing inquiries and support tickets.

4.2 Legal and Safety Reasons

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our customers or others.

4.3 Business Transfers

If Bloom&Glow is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

5. INTERNATIONAL DATA TRANSFERS

Because we work with international suppliers, your information may be transferred to and processed in countries outside your country of residence, including countries that may have different data protection laws. By using our Services, you consent to such transfers. We take reasonable steps to ensure your information is treated securely.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal, accounting, or reporting requirements. Order and transaction records are typically retained for at least 7 years for tax and audit purposes. You may request deletion of your account and associated data subject to applicable legal obligations.

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, pixels, and similar technologies to:

• Remember your preferences and shopping cart contents
• Authenticate users and prevent fraud
• Analyze website traffic and user behavior
• Deliver targeted advertising
• Measure marketing campaign performance

You can control cookies through your browser settings. Disabling cookies may affect website functionality. For more information about advertising cookies, visit youronlinechoices.eu (EU) or aboutads.info (US).

8. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (subject to legal exceptions)
• Restriction: Request that we limit how we use your information
• Portability: Request your information in a structured, machine-readable format
• Objection: Object to certain processing activities, including direct marketing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

8.1 California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information.

8.2 European Economic Area, UK, and Switzerland (GDPR)

Residents of these regions have rights under the General Data Protection Regulation, including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the information in Section 13. We will respond within the timeframe required by applicable law.

9. MARKETING COMMUNICATIONS

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us directly. You will continue to receive transactional emails related to your orders and account.

If you provided a phone number for SMS marketing, you can opt out by replying STOP to any message. Standard message and data rates may apply.

10. DATA SECURITY

We implement reasonable technical and organizational measures to protect your personal information, including SSL encryption for data transmission, secure payment processing through PCI-compliant providers, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

11. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 18 (or the applicable age of majority). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated Policy will be posted on this page with a new "Last Updated" date. Material changes will be communicated through email or a prominent notice on our website. Your continued use of our Services after changes are posted constitutes acceptance.

13. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Bloom&Glow Email: privacy@bloomandglow.com Website: www.bloomandglow.com

For data protection inquiries specifically, please use the subject line "Privacy Request" so we can route your message appropriately.

By using Bloom&Glow's Services, you acknowledge that you have read and understood this Privacy Policy.