Privacy Policy

Last Updated: [Date]

Welcome to BloomBag ("we," "our," or "us"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase from www.bloombag.shop (the "Site"), which is hosted on Shopify.

By using our Site, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

Information You Provide Directly

When you place an order, create an account, contact us, subscribe to our newsletter, or otherwise interact with our Site, we may collect:

• Full name

• Billing address

• Shipping address

• Email address

• Phone number

• Payment information

• Order history

• Customer support communications

Information Collected Automatically

When you visit our Site, we may automatically collect:

• IP address

• Browser type and version

• Device information

• Operating system

• Website usage data

• Referring websites

• Pages viewed and interactions

• Cookies and similar tracking technologies

Shopify-Collected Information

Our store is hosted on Shopify Inc. Shopify collects and processes certain information on our behalf, including order information, payment processing information, device identifiers, and analytics data necessary to operate the online store.

For more information about Shopify's privacy practices, please visit Shopify's Privacy Policy.

2. How We Use Your Information

We use personal information to:

• Process and fulfill orders

• Provide products and services

• Verify transactions and prevent fraud

• Communicate with customers

• Respond to inquiries and support requests

• Improve our website and customer experience

• Personalize content and marketing

• Comply with legal obligations

• Enforce our terms and policies

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we process your personal information based on one or more of the following legal grounds:

• Performance of a contract

• Compliance with legal obligations

• Legitimate business interests

• Your consent

• Protection of vital interests

Where consent is required, you may withdraw consent at any time.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Operate the website

• Remember customer preferences

• Analyze website traffic

• Measure advertising effectiveness

• Improve user experience

Cookies may be placed by Shopify and third-party providers such as analytics, payment, advertising, and marketing services.

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

5. Marketing Communications

We may send promotional emails, SMS messages, or other marketing communications where permitted by law.

You may opt out at any time by:

• Clicking the unsubscribe link in emails

• Following SMS opt-out instructions

• Contacting us directly

Opting out of marketing communications does not affect transactional messages related to orders or account activity.

6. Sharing Personal Information

We may share personal information with trusted service providers, including:

• Shopify

• Payment processors

• Shipping and logistics providers

• Marketing and advertising partners

• Analytics providers

• Fraud prevention services

• Professional advisors

• Government authorities when legally required

We do not sell personal information in exchange for monetary compensation.

7. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence.

Where required by law, we implement appropriate safeguards for international transfers, including contractual protections and other legally recognized transfer mechanisms.

8. Data Retention

We retain personal information for as long as necessary to:

• Provide our services

• Maintain business records

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

When information is no longer needed, it will be securely deleted or anonymized.

9. Your GDPR Rights

If you are located in the EEA, UK, or similar jurisdictions, you may have the right to:

• Access your personal information

• Correct inaccurate information

• Delete personal information

• Restrict processing

• Object to processing

• Withdraw consent

• Data portability

• Lodge a complaint with a supervisory authority

To exercise these rights, contact us using the information provided below.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the following rights:

• Right to know what personal information is collected

• Right to access personal information

• Right to delete personal information

• Right to correct inaccurate information

• Right to opt out of the sale or sharing of personal information

• Right to limit the use of sensitive personal information where applicable

• Right to non-discrimination for exercising privacy rights

To submit a privacy request, contact us using the details below.

We will not discriminate against you for exercising your privacy rights.

11. Do Not Track Signals

Some web browsers offer a "Do Not Track" feature. Because there is no universally accepted standard for responding to such signals, our Site may not respond to Do Not Track requests.

12. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information.

However, no internet transmission or electronic storage system is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy

Our Site is not intended for children under the age of 13 (or higher age limits where required by applicable law).

We do not knowingly collect personal information from children.

14. Third-Party Services and Links

Our Site may contain links to third-party websites and services.

We are not responsible for the privacy practices, content, or policies of third parties.

We encourage users to review the privacy policies of any third-party services they access.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or regulatory changes.

Any updates will be posted on this page with a revised "Last Updated" date.

16. Contact Information

If you have questions, requests, or complaints regarding this Privacy Policy, please contact us:

Business Name: BloomBag
Email: info@bloombag.shop
Phone: 03237084301
Address: Ali Town Metros Station House 87 Street 2 Lahore

For privacy-related requests, please include sufficient information to verify your identity before we process your request.