Privacy Policy
General Information
This privacy policy explains how bloomLab d.o.o., Čadram 39a, 2317 Oplotnica, Slovenia (hereinafter referred to as “we”, “us”, or “our”) collects, uses, and protects your personal data when you use our website.
2. Contact Details
- Company name: bloomLab d.o.o.
- Registered address: Čadram 39a, 2317 Oplotnica, Slovenia
- Phone: +386 31 453 723
- Email: info@bloomlsd.com
We are the controller of your personal data as defined under the General Data Protection Regulation (GDPR).
3. Personal Data We Collect
We collect the following types of data:
- Contact Information (name, email, phone number, address)
- Account Data (username, encrypted password)
- Purchase and Payment Information (billing and shipping address, payment method, order details)
- Newsletter Subscription Data (email address and IP address)
- Technical Data (IP address, browser type, device type, operating system, referral URL, time and date of access)
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
- To fulfill your orders and manage transactions
- To manage your account and provide customer support
- To send newsletters and promotional emails based on your consent
- To comply with legal obligations
- To analyze usage patterns and improve our website
5. Newsletter Subscription
When you subscribe to our newsletter, we process your email address to send you marketing content. You can unsubscribe at any time by clicking the unsubscribe link in the email or contacting us directly.
6. E-Commerce and Payments
Our webshop allows purchases via bank transfer and credit card payments using Stripe.
- Stripe is a PCI-DSS certified provider. Payment data is processed directly by Stripe and is not stored on our servers.
- Stripe’s privacy policy: https://stripe.com/privacy
- Legal basis: GDPR
We only collect and retain the minimum personal data necessary to process and fulfill your orders.
7. Cookies and Tracking Technologies
Our website uses cookies to:
- Ensure technical functionality
- Store your preferences
- Analyze traffic (via tools like Google Analytics)
Essential cookies are stored on the basis of our legitimate interest. Non-essential cookies (e.g., for analytics or marketing) are used only with your consent, which you can manage via the cookie banner.
8. Third-Party Services
We may use external service providers (data processors), including:
- Web hosting providers
- Newsletter delivery platforms
- Analytics tools (e.g., Google Analytics)
- Payment processors (e.g., Stripe)
All third parties are bound by contractual obligations under GDPR to safeguard your data.
9. Your Rights Under GDPR
You have the right to:
- Request access to your data
- Request rectification or erasure
- Withdraw your consent at any time
- Object to processing
- Request restriction of processing
- Request data portability
- Lodge a complaint with your supervisory authority
To exercise any of these rights, contact us at info@bloomlsd.com.
10. Data Retention
We retain your personal data:
- As long as necessary to fulfill the purposes it was collected for
- According to legal, accounting, or reporting requirements
- As long as you have an account or subscription with us
When no longer needed, your data will be securely deleted or anonymized.
11. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
12. Data Transfers
Some of our third-party service providers (e.g., Stripe) may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards (e.g., Standard Contractual Clauses or adequacy decisions) are in place.
13. Legal Notice (Impressum)
- Website Owner: bloomLab d.o.o.
- Address: Čadram 39a, 2317 Oplotnica, Slovenia
- Phone: +386 31 453 723
- Email: info@bloomlsd.com
- Company Registration Number: 9976086000
- VAT ID: 58649999
14. Changes to This Privacy Policy
We reserve the right to update this policy to reflect changes in our practices or legal requirements. Changes will be published on this page with the date of the last revision.