1. Our commitment
GetBloomDirect is built to help independent florists work directly with one another. We collect information needed to operate, secure, support, and improve the platform. We do not sell personal information for money, and we do not use personal information for third-party targeted advertising.
This Privacy Policy applies to the GetBloomDirect website, applications, accounts, and related services (collectively, the “Services”).
2. Information we collect
Account and business information
When a shop creates or manages an account, we may collect:
- Business name, contact name, email address, and phone number
- Business address, website, hours, and delivery information
- Login credentials and account-verification information
- Subscription status and limited billing-related information
Profile and network information
Shops may provide information displayed to other users, including:
- Logos, banners, photos, descriptions, and public profile details
- Fulfillment offerings, prices, delivery areas, and availability
- Accepted payment methods, reviews, and network activity
Order and communication information
When florists use the Services to send or fulfill orders, we may process order-related information such as:
- Sending and fulfilling florist information
- Recipient name, delivery address, phone number, and delivery notes
- Arrangement details, card messages, prices, taxes, and fees
- Order status, activity history, messages, reviews, and support records
Florists who submit information about customers, recipients, or other people are responsible for having the authority to provide that information and for using it lawfully.
Technical information
We may automatically collect device, browser, IP address, session, diagnostic, security, and usage information when the Services are accessed.
3. How we use information
We may use information to:
- Create, authenticate, and manage accounts
- Operate florist profiles, search, ordering, messaging, and reviews
- Deliver account, order, verification, billing, and security notices
- Provide support and respond to questions or disputes
- Process Bloom Pro subscriptions through our payment provider
- Detect, prevent, investigate, and address fraud, abuse, or security issues
- Analyze reliability and improve the Services
- Enforce our Terms of Service and comply with legal obligations
4. How information is shared
We may share information in the following circumstances:
- With other florists: Public profile information and information needed to send, accept, fulfill, communicate about, and review orders may be shared with the relevant shops.
- With service providers: Vendors may process information for hosting, database services, file storage, email delivery, geocoding, maps, analytics, security, and subscription billing.
- For legal and safety reasons: We may disclose information when reasonably necessary to comply with law, legal process, protect rights or safety, investigate misuse, or enforce agreements.
- During a business transaction: Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of all or part of the business, subject to appropriate protections.
- With your direction: We may share information when you ask or authorize us to do so.
5. Service providers
GetBloomDirect currently relies on service providers that may include Stripe for subscription billing, Resend for transactional email, MongoDB Atlas for database hosting, Amazon Web Services for file storage, Vercel for application hosting, and mapping or geocoding providers used to support address and delivery features.
These providers process information under their own terms and privacy notices. Their services and our provider list may change as the platform develops.
6. Cookies and similar technologies
We use cookies and similar technologies that are necessary for login, session management, security, preferences, and core platform functionality. We may also use limited performance or analytics tools to understand how the Services operate and improve reliability.
Browser settings may allow you to block or delete cookies. Disabling required cookies may prevent parts of the Services from working.
7. Data retention
We retain information for as long as reasonably necessary to provide the Services, maintain business and order records, resolve disputes, enforce agreements, protect the platform, and satisfy legal, accounting, or reporting obligations.
Retention periods vary by the type of information and the reason it was collected. Some information may remain in backups or be retained when deletion is not legally or operationally appropriate.
8. Your choices and privacy rights
Depending on your location and applicable law, you may be able to:
- Access or correct certain account information
- Update or remove information from your public profile
- Request a copy of certain personal information
- Request deletion of certain personal information
- Object to or request limits on certain processing
- Appeal a decision concerning a privacy request, where required
We may need to verify your identity and authority before completing a request. Some requests may be limited by legal exceptions or our need to preserve order, security, fraud-prevention, or financial records. Authorized agents may submit requests where permitted by law, subject to verification.
GetBloomDirect does not discriminate against users for exercising privacy rights provided by applicable law.
9. Security
We use reasonable administrative and technical safeguards designed to protect information, including encrypted connections, access controls, password hashing, private file storage where appropriate, and trusted infrastructure providers.
No online service can guarantee absolute security. Users are also responsible for protecting passwords, devices, email accounts, API keys, and other credentials used to access the Services.
10. Children’s privacy
The Services are intended for businesses and adults acting on behalf of those businesses. They are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. Contact us if you believe a child has provided personal information directly to GetBloomDirect.
11. United States operation
GetBloomDirect is operated from the United States. Information may be processed and stored in the United States and other locations where our service providers operate. Those locations may have privacy laws that differ from the laws where you live.
12. Changes to this policy
We may update this Privacy Policy as the Services, laws, and business practices change. The updated date at the top of this page shows when the policy was most recently revised. We may provide additional notice when a change is material.
13. Contact us
Questions or privacy requests may be submitted through the GetBloomDirect contact page or by email at getbloomdirect@gmail.com.