Last Updated: February 12, 2026
BloomBook LLC ("BloomBook," "we," "us," "our") values the trust you place in us when you share your personal information. This Privacy Policy describes how we collect, use, disclose, and protect Personal Data obtained from users of our website, mobile applications (iOS and Android), and any related services (collectively, the "Service").
The Service operates as a global marketplace that connects buyers ("Customers" or "Buyers") with independent florists and gift sellers ("Sellers" or "Vendors"). BloomBook acts solely as an intermediary platform; we do not control, manage, or operate delivery logistics, which remain the exclusive responsibility of each Seller.
The Service also provides features that allow users to digitize and preserve flowers they receive through unique claim codes, build digital memories of gifted bouquets, and share these memories with others through the BloomBook app.
This Privacy Policy applies to all users of the Service, including registered account holders, guest users who make purchases without creating an account, Sellers, and Recipients. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree, please do not use the Service.
This Privacy Policy is incorporated by reference into our Terms of Use. For users in specific jurisdictions, additional rights and obligations may apply, including under the General Data Protection Regulation (GDPR) for users in the European Economic Area, UK, and Switzerland; the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA) for California residents; and the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) for users in Mexico. Please refer to Section 8 for jurisdiction-specific provisions. If you have any questions, please contact us at .
We collect information that you voluntarily provide when using the Service. The specific information depends on how you interact with us:
Recipients' Personal Data is initially provided to us by the Buyer in connection with placing an order. BloomBook processes this data on the basis of legitimate interests (for order fulfillment) and, where applicable, contract performance. Buyers represent and warrant that they have obtained any necessary authorization from the Recipient before providing the Recipient's Personal Data to BloomBook.
Payment processing is handled entirely by our third-party payment service providers. We do not collect or store full credit card numbers, debit card numbers, or bank account details. We may receive transaction confirmations, partial card information (e.g., last four digits), and billing addresses for record-keeping and fraud prevention.
When you access or use the Service, we automatically collect certain information, including:
We may receive information about you from third-party sources, including:
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR):
As part of the transaction process, we share necessary information between Buyers and Sellers to facilitate order fulfillment. This includes the Buyer's name, delivery address, Recipient details, and any special instructions. Sellers receive only the information strictly necessary to prepare and deliver the order.
When a Buyer places an order that includes a Claim Code, the Buyer may write a personal dedication or message for the Recipient. Upon redemption of the Claim Code, the Recipient receives: (a) a Digital Collectible representing the flowers received; (b) a Digital Memory that includes the Buyer's personal dedication or message; and (c) any photos or content the Recipient subsequently uploads.
We engage third-party service providers to perform functions on our behalf, including payment processing, cloud hosting and data storage, communications services, analytics and advertising platforms, fraud prevention and identity verification, and customer support tools.
We may disclose your information when we believe in good faith that disclosure is necessary to comply with applicable law, respond to a subpoena or court order, protect our rights or property, prevent fraud or abuse, or protect the safety of our users or the public.
In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information.
BloomBook operates globally. Your information may be transferred to and processed in the United States, where our servers and principal offices are located, as well as in other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.
For transfers of personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as our primary transfer mechanism.
Regardless of your location, you have the following options:
If you reside in the European Economic Area, United Kingdom, or Switzerland, you additionally have the right to request access to and a copy of your personal data, request rectification of inaccurate or incomplete data, request erasure, request restriction of processing, request data portability, object to processing based on legitimate interests, withdraw consent at any time, and lodge a complaint with your local data protection authority.
If you are a California resident, the CCPA and CPRA provide you with the Right to Know, Right to Correct, Right to Delete, Right to Opt-Out of Sale/Sharing, and Right to Non-Discrimination. BloomBook does not sell your personal information as defined by the CCPA.
If you reside in Mexico, the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) grants you specific ARCO rights (Acceso, Rectificación, Cancelación y Oposición).
We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion or inactivity, we retain data according to our retention schedule (generally 36 months for Customers, Guest Users, and Recipients; 60 months for Sellers). We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver relevant advertising:
The Service is not directed to children. We apply age restrictions based on applicable law: under 13 in the United States (COPPA), under 16 in the EEA/UK/Switzerland (GDPR), and under 18 in Mexico (LFPDPPP). If we become aware that we have collected personal information from a child below the applicable threshold without appropriate consent, we will take steps to delete such information promptly.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL) and at rest, regular security assessments, role-based access controls, and secure password storage using industry-standard hashing algorithms.
The Service may contain links to third-party websites, services, social media platforms, or payment providers. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.
We do not use automated decision-making, including profiling, that produces legal effects or similarly significant effects on you without human intervention.
By creating an account, making a purchase, or redeeming a Claim Code, you may receive transactional and service-related messages, marketing communications (email, with your opt-in consent), marketing SMS messages (with your separate express consent), transactional SMS messages, and push notifications (which you may disable in your device settings).
BloomBook operates exclusively as an intermediary platform connecting Buyers with independent Sellers. BloomBook does not produce, store, handle, or deliver any physical products. The preparation, quality, and delivery of orders are the sole responsibility of the respective Seller.
We reserve the right to modify this Privacy Policy at any time. When we make material changes, we will notify you by posting a notice on the Service, sending an email to the address associated with your account, displaying an in-app notification, or through other appropriate channels.
The Service is provided "AS-IS" and "AS-AVAILABLE" without warranties of any kind, express or implied. This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to its conflict of law principles.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Company: BloomBook LLC
Address: 8 The Green, Ste B, Dover, DE 19904, USA
Email:
Thank you for trusting BloomBook with your information.
