Privacy Policy

Effective Date: March, 2026
Blooms & Behold Luxe Florals
Website: www.bloomsandbehold.com

We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, how we use it, how we share it, and the choices you have. It applies to our website, subscription services, and related communications (collectively, the “Services”).

1) Information We Collect

We collect information in the following categories:

A. Information you provide directly

Account & Profile: name, email, password, phone number.
Orders & Subscriptions: delivery frequency, delivery notes, gift messages, product preferences, special occasions (e.g., birthdays, anniversaries).
Payment & Billing: billing address; we do not store full payment card numbers—those are processed by our payment provider.
Support & Communications: messages you send us (email, chat, SMS), survey responses, reviews.

B. Information collected automatically

Device/Usage Data: IP address, browser type, device identifiers, pages viewed, referring/exit pages, date/time stamps, and general location based on IP.
Cookies & Similar Technologies: pixels, tags, and web beacons to remember preferences, analyze traffic, and personalize content.

C. Information from third parties

Payment Processors: payment confirmations and limited billing details.
Delivery Partners: status updates to support delivery and customer service.
Marketing/Analytics Partners: aggregated or de‑identified insights to improve ads and user experience.

2) How We Use Your Information

We use your information to:

Provide the Services: process orders, manage subscriptions, personalize arrangements (e.g., color palette or style), and arrange deliveries.
Customer Support: respond to questions, handle returns or delivery issues.
Account Management: create and maintain your account, remember preferences, and manage your subscription schedule.
Payments & Fraud Prevention: process transactions securely and detect/prevent fraudulent activity.
Marketing & Personalization: send emails or texts about new collections, promotions, reminders (e.g., “subscription renewal” or “delivery tomorrow”), and recommend products aligned with your preferences.
Analytics & Improvement: analyze website performance and enhance user experience.
Legal Compliance: comply with law, enforce our Terms, and protect our rights and customers.

Legal bases (for EEA/UK users): contract performance, legitimate interests (e.g., security, improvement, marketing where permitted), consent (e.g., certain cookies/communications), and legal obligations.

3) How We Share Information

We may share information with:

Service Providers/Processors: e.g., payment processors (such as Stripe/Shopify Payments), e‑commerce platforms, email/SMS vendors, delivery partners, customer support tools, and analytics/advertising partners—only as needed to perform services on our behalf.
Business Transfers: as part of a merger, acquisition, financing, or sale of assets (your information may be transferred as permitted by law, with notice as required).
Legal & Safety: to comply with law, respond to lawful requests, or protect rights, property, safety of us, you, or others.
With Your Consent: if you ask us to or otherwise consent.

We do not sell your personal information as commonly understood, and we do not knowingly share information for cross‑context behavioral advertising where prohibited without offering choices required by applicable law.

4) Cookies and Tracking Technologies

We use cookies (essential, performance/analytics, functional, and advertising).
You can manage cookies via your browser settings and, where required, through our cookie banner or Cookie Preferences link. Disabling certain cookies may impact site functionality.

5) Retention

We retain personal information only as long as needed for the purposes described above, including to provide subscriptions, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or de‑identify information consistent with our retention policies.

6) Your Choices

Email Marketing: opt out via the “Unsubscribe” link in our emails or contact us.
SMS/Text Messages: reply STOP to opt out (or HELP for help). Message and data rates may apply.
Account: you can update certain information in your account dashboard or by contacting us.
Cookies: adjust browser settings and/or use our Cookie Preferences tool.

7) Your Privacy Rights

Depending on your location, you may have rights to:

Access: request a copy of your personal information.
Correct: request correction of inaccurate data.
Delete: request deletion of your personal information.
Portability: request your data in a portable format.
Object/Restrict: object to or restrict certain processing (e.g., direct marketing).
Withdraw Consent: where processing is based on consent.

California (CPRA/CCPA): California residents may request access, deletion, and correction; opt out of sharing for cross‑context behavioral advertising; and limit use/disclosure of sensitive personal information where applicable. We do not use sensitive personal information for purposes requiring a right to limit. To exercise rights, see Contact Us below. We will not discriminate against you for exercising your rights.

EEA/UK: You may also have the right to lodge a complaint with your local data protection authority.

We will verify requests as required by law and respond within applicable timelines.

8) Children’s Privacy

Our Services are not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

9) Data Security

We use administrative, technical, and physical safeguards designed to protect personal information (e.g., encryption in transit, access controls, secure data centers). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10) International Transfers

If you access our Services from outside the United States, your information may be processed in the U.S. and other countries that may have different data protection laws. Where required, we use appropriate safeguards for cross‑border transfers (e.g., Standard Contractual Clauses).

11) Third‑Party Links

Our website may contain links to third‑party sites or services. We are not responsible for their privacy practices. We encourage you to review their policies.

12) Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” above and, if changes are material, provide additional notice as required (e.g., via email or site notice). Your continued use of the Services after an update means you accept the revised policy.

13) Contact Us

If you have questions, want to exercise your privacy rights, or make a complaint, please contact us:

Blooms & Behold Luxe Florals
Email: hello@bloomsandbehold.com
Address: Oakland Park, FL, 33309

You may also designate an authorized agent (where permitted) to make requests on your behalf.

Optional Disclosures to Consider Adding

SMS Program Terms: short code, message frequency, HELP/STOP instructions, carrier disclaimer.
Do Not Track: statement on whether you respond to DNT signals (most sites currently do not).
Loyalty/Referral Programs: if you provide incentives, describe the categories of personal information involved and how value is reasonably related (for CPRA compliance).
Specific Vendor List: (e.g., Stripe, Shopify, Klaviyo, Attentive)—include links to their privacy notices if you want additional transparency.