This Privacy Policy outlines how Bliss&Bloom, based in Johannesburg, South Africa, collects, uses, shares, and protects your personal information when you visit our website or make a purchase. We comply with South Africa’s Protection of Personal Information Act (POPIA) and other applicable laws. By using our website or services, you consent to the practices described in this policy.

Collecting Personal Information

When you interact with our website, we gather certain details about your device, your activities on the site, and information required to process your orders. Additional information may be collected if you reach out for customer support. In this policy, “Personal Information” refers to any data that can identify an individual. Below, we detail what we collect and why.

Device Information

• Examples of Personal Information Collected: Web browser version, IP address, time zone, cookie data, viewed pages or products, search terms, and site interaction patterns.
  
• Purpose: To ensure the site loads correctly and to analyze usage for improving site performance and user experience.
  
• 
  Source: Collected automatically from your device.
  

Order Information

• Examples of Personal Information Collected: Name, billing and shipping addresses, payment details (e.g., credit card numbers), email address, and phone number.
  
• Purpose: To fulfill orders, process payments, arrange shipping, provide invoices or order confirmations, communicate with you, screen for fraud or risk, and, with your consent, send marketing about our products or services.
• Source: Collected directly from you.
  

Customer Support Information

• Examples of Personal Information Collected: Any additional details you provide when contacting us, such as feedback or inquiries.
  
• Purpose: To address your queries and improve our services.
  
• Source: Collected directly from you.
  

Minors

Our site is not intended for individuals under 16 years old. We do not knowingly collect Personal Information from minors. If you are a parent or guardian and believe your child has shared Personal Information, please contact us to request its removal.

Sharing Personal Information

We share your Personal Information with trusted service providers to deliver our services and fulfill our agreements with you. Examples include:

• We use an e-commerce platform to operate our online store, which processes your data according to its privacy policy.
  
• We may share data to comply with South African laws, respond to legal requests (e.g., subpoenas), or protect our rights.
  

We ensure all service providers adhere to POPIA and other relevant regulations.

Behavioral Advertising

We use your Personal Information to deliver tailored advertisements or marketing communications we believe may interest you. For example:

• We use analytics tools to understand site usage and enhance user experience.
  
• We share data about your site activity, purchases, and ad interactions with advertising partners, sometimes via cookies or similar technologies (subject to your consent where required by law).
  

You can opt out of targeted advertising by adjusting your browser settings or following instructions from relevant advertising networks.

Using Personal Information

We use your Personal Information to:

• Offer products for sale.
  
• Process payments and fulfill orders.
  
• Arrange shipping and provide order updates.
  
• Keep you informed about new products, services, or promotions (with your consent).
  
• Improve our website and customer experience.
  

Lawful Basis

Under POPIA, we process your Personal Information based on:

• Your consent (e.g., for marketing).
  
• Fulfilling our contract with you (e.g., processing orders).
  
• Compliance with legal obligations.
  
• Legitimate interests, such as improving our services, provided these do not override your rights.
  

Retention

We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this policy or as required by law. You may request deletion of your data (see “Your Rights” below).

Automatic Decision-Making

We do not engage in fully automated decision-making that significantly affects you. Our e-commerce platform may use limited automation for fraud prevention, such as:

• Temporarily blocking IP addresses linked to repeated failed transactions.
  
• Temporarily blocking credit cards associated with suspicious IPs.
  

These measures have minimal impact and last for a short duration.

Your Rights Under POPIA

As a South African resident, you have the following rights under POPIA:

• Access: Request details of the Personal Information we hold about you.
  
• Correction: Ask us to update or correct inaccurate data.
  
• Deletion: Request erasure of your Personal Information, subject to legal requirements.
  
• Objection: Object to processing based on legitimate interests or direct marketing.
  
• Restriction: Request we limit how we process your data in certain cases.
  
• 
  Portability: Request your data be transferred to another service.
  

To exercise these rights, contact us using the details below. We will respond within the timeframes required by POPIA.

Cookies

Cookies are small data files stored on your device when you visit our site. They enhance your experience by remembering preferences (e.g., login details or region) and providing usage insights. We use:

• Functional Cookies: For site operation and user preferences.
  
• Performance Cookies: To analyze site performance.
  
• Advertising Cookies: For tailored ads (with your consent).
  
• Social Media/Content Cookies: To enable sharing or content features.
  

Cookies may be “session” (lasting until you close your browser) or “persistent” (expiring between 30 minutes and two years). You can manage cookies via browser settings, but blocking them may affect site functionality. Learn more at www.allaboutcookies.org.

Do Not Track

Due to varying interpretations of “Do Not Track” signals, we do not alter our data practices based on these signals.

Data Transfers

Your Personal Information may be processed and stored outside South Africa (e.g., by our e-commerce platform in other jurisdictions). We ensure such transfers comply with POPIA’s requirements for cross-border data transfers.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operations. Updates will be posted on this page, and continued use of our site indicates your acceptance.

Contact Us

For questions, complaints, or to exercise your rights, contact us at blissbloomthebrand@gmail.com

We aim to address your concerns promptly in line with POPIA.