Privacy Policy
Privacy Policy
Last updated: March 15, 2025
This Privacy Policy explains how Byron Bloom (the "Site", "we", "us" or "our") collects, uses and discloses your personal information when you visit, use our services or make a purchase on byronbloom.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this Policy, "you", "your" refers to the user of the Services, whether a customer, site visitor or other person whose data is collected in accordance with this Policy.
Please read this Privacy Policy carefully.
Changes to this Privacy Policy
We may periodically update this Policy to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the updated version on the Site, update the "Last updated" date and take any other measures required by applicable law.
How we collect and use your personal information
To provide the Services we collect personal information from various sources as described below. The information we collect and how we use it varies depending on how you interact with us.
In addition to the specific uses outlined below, we may use information about you to communicate with you, provide or improve the Services, comply with legal obligations, enforce applicable Terms of Service and protect or defend the Services, our rights and those of our users or third parties.
Personal information we collect
1. Information provided directly by you
- Contact details: name, address, phone number and email
- Order data: name, billing and shipping address, payment confirmation, email and phone number
- Account data: username, password, security questions and other information used for account security
- Customer support: any data you choose to provide us in communications (e.g. messages sent through the Services)
Some features of the Services require you to provide us with certain information; without such data you may not be able to use or access such features.
2. Information collected automatically (Usage Data)
We automatically collect certain information about your interaction with the Services through cookies, pixels and similar technologies ("Cookies"), including:
- Device and browser type
- IP address and network data
- How you use the Site and account
3. Information obtained from third parties
We may receive data from service providers who collect information on our behalf, such as:
- Shopify and other partners who support the Site
- Payment providers, who collect payment data (bank account, credit/debit card, billing address) to process payments and complete orders
- Advertising partners who use online tracking technologies (pixels, web beacons, SDKs, third-party libraries, cookies) when you visit the Site, open or click our emails or interact with our ads
Such information will be processed in accordance with this Policy. See also "Third-party websites and links".
How we use your personal information
| Purpose | Details | Legal basis (EU/EEA) |
|---|---|---|
| Provision of Services | Process payments, fulfill orders, send account and transaction notifications, manage shipping, returns, exchanges and account features (including possible integration with other Shopify services). | Performance of a contract (Art. 6(1)(b) GDPR) |
| Marketing and advertising | Sending promotional communications via email, SMS or mail; personalizing ads on our Site and third-party sites. | Legitimate interest in promoting our products (Art. 6(1)(f) GDPR) |
| Security and fraud prevention | Detect, investigate and counter fraudulent or illegal activities. | Legitimate interest in keeping the Site secure (Art. 6(1)(f) GDPR) |
| Support and improvement | Provide customer support and improve the Services. | Legitimate interest in ensuring responsiveness and quality (Art. 6(1)(f) GDPR) |
Cookies
Like many sites, we use cookies. A detailed list of cookies used by Shopify is available at https://www.shopify.com/legal/cookies. Cookies help us to:
- Operate and optimize the Site
- Remember preferences and actions
- Perform analysis on the use of Services
You can manage cookies through your browser settings; however, blocking or deleting them may limit the user experience and some functionality.
How we disclose personal information
We may disclose personal information to third parties for the purposes indicated, including:
- Service providers (IT, payments, data analytics, customer support, cloud, order fulfillment and shipping)
- Business and marketing partners who provide services or advertising; they will use the data according to their own privacy policies
- Third parties authorized by you, for example for product shipping or use of social widgets
- Affiliated companies in our group, for business management
- Corporate transactions (mergers, acquisitions, insolvency) or for legal obligations, authority orders, defense of our rights or those of third parties
Categories of data and recipients
| Category of personal data | Recipients |
|---|---|
| Identifiers (contacts, order and account data) | Service providers, business and marketing partners, affiliates |
| Commercial information (orders, purchases, support) | Same |
| Internet/network activity (usage data) | Same |
| Geolocation data (derived from IP or technical metrics) | Same |
We do not use or disclose sensitive personal information without your consent or to infer personal characteristics.
With your consent, we may share personal data for marketing and advertising activities.
Third-party websites and links
Our Site may contain links to third-party sites or platforms. We are not responsible for their privacy or security practices. Information you share on public areas or social platforms may be seen by other users. The inclusion of such links does not imply endorsement of the related content.
Children's data
The Services are not intended for minors and we do not knowingly collect personal data from children. If you are a parent or guardian of a minor who has provided us with personal data, please contact us to request its deletion.
As of the date of this Policy, we do not sell or knowingly share (as defined by law) personal data of minors under 16 years of age.
Data security and retention
We adopt reasonable measures to protect personal information, but no transmission or storage system is completely secure. The duration of data retention depends on operational, legal and dispute resolution needs.
Your rights
Depending on your jurisdiction, you may have one or more of the following rights:
- Access / Right to know what personal data we hold
- Deletion of personal data
- Correction of inaccurate data
- Data portability
- Opposition to sale, sharing or targeted advertising
- Limitation of processing
- Withdrawal of consent, where processing is based on it
- Appeal against decisions on your requests
- Management of communication preferences (unsubscribe from promotional emails)
You can exercise these rights through the options available on the Site or by contacting us at info@byronbloom.com. We may ask you to verify your identity and, where permitted, you may appoint an authorized representative. We will respond within the timeframes required by law and will not discriminate against you for exercising your rights.
Complaints
For complaints about the processing of your data, contact us at info@byronbloom.com. If you are not satisfied with the response, you may appeal to your local data protection authority. In the EU/EEA you can find the list of competent authorities here.
International users
Your personal information may be transferred, stored or processed outside your country. If we transfer data outside the European Economic Area, we use recognized mechanisms (e.g. Standard Contractual Clauses) unless the destination country offers an adequate level of protection.
Contact
For questions about our privacy practices or to exercise your rights, write to us at info@byronbloom.com.
Unless otherwise indicated, Byron Bloom is the controller of your personal data under applicable regulations.