Privacy Policy

Introduction

Welcome to the Privacy Policy of Bloom 360 LLC ("Bloom 360," "we," "us," or "our"). Bloom 360 is a full-service 360 digital marketing agency providing professional services including but not limited to Search Engine Optimization (SEO), Search Engine Marketing (SEM), Social Media Management, Web Design & Development, Meta Ads Management, AI & Automation Solutions, Email Marketing, WhatsApp Marketing, Customer Relationship Management (CRM) setup and integration, Market Research, and Virtual Secretariat services.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website bloom-360.com, engage with our marketing services, communicate with us via email, phone, chat, or social media, or otherwise interact with our business. It applies to all personal data collected through our website, service agreements, client portals, and any other channels operated by Bloom 360 LLC.

By accessing our website or using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services immediately.

Information We Collect

We may collect and process the following categories of personal information depending on how you interact with us:

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, job title, and mailing address when you fill out contact forms, request a consultation, or subscribe to our communications.
• Account and Client Data: Login credentials, billing information, payment details, and project-related data when you engage our services under a formal agreement.
• Communication Records: Messages, feedback, inquiries, and any other content you submit through email, live chat, WhatsApp, contact forms, or social media platforms.
• Marketing Preferences: Your communication preferences, interests in specific services, and opt-in/opt-out status for our marketing communications.

2.2 Information Collected Automatically

• Device and Browser Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, navigation paths, and search queries used to find our website.
• Location Data: General geographic location derived from your IP address (city/region level; we do not track precise GPS coordinates).
• Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies as further described in Section 10.

2.3 Information From Third Parties

• Analytics Providers: We may receive aggregated or anonymized data from analytics platforms (e.g., Google Analytics) about how users interact with our website.
• Advertising Platforms: When running digital ad campaigns on your behalf, we may receive data from platforms such as Meta (Facebook/Instagram), Google Ads, and LinkedIn regarding ad performance and audience engagement.
• Publicly Available Sources: We may collect business information from publicly available directories, social media profiles, and industry databases for lead generation and market research purposes.

How We Use Your Information

Bloom 360 LLC uses the collected information for the following purposes:

• Service Delivery: To provide, manage, and improve our digital marketing services including SEO audits, SEM campaign management, social media strategies, web design projects, Meta ad campaigns, AI automation solutions, email marketing campaigns, WhatsApp marketing, CRM implementation, market research reports, and virtual secretariat services.
• Client Communication: To respond to your inquiries, send project updates, deliver proposals and reports, and provide customer support through your preferred communication channel.
• Marketing and Promotion: To send you newsletters, promotional materials, service announcements, and personalized offers, where you have provided consent or where permitted by applicable law.
• Analytics and Improvement: To analyze website traffic, understand user behavior, measure the effectiveness of our marketing efforts, and improve the functionality and user experience of our website.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests, including tax and accounting obligations.
• Security and Fraud Prevention: To protect our website, services, and users from unauthorized access, fraud, abuse, and security threats.
• Contractual Obligations: To fulfill our contractual commitments under client agreements, including billing, invoicing, and service-level reporting.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases as set forth under the General Data Protection Regulation (GDPR):

• Consent: Where you have given us clear, informed, and affirmative consent to process your data for specific purposes, such as subscribing to our email newsletter or accepting cookies on our website.
• Contractual Necessity: Where processing is necessary to fulfill a contract with you or to take pre-contractual steps at your request, such as providing the digital marketing services you have engaged us to deliver.
• Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., improving our services, marketing, fraud prevention), provided these interests do not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is required to comply with a legal obligation to which Bloom 360 LLC is subject, including tax reporting, regulatory compliance, and responding to lawful requests from authorities.

You have the right to withdraw your consent at any time where consent is the legal basis. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Sharing of Information

We do not sell, rent, or trade your personal information to third parties for their direct marketing purposes. We may share your personal data in the following limited circumstances:

• Service Providers and Vendors: We engage trusted third-party service providers to assist us in operating our business, including cloud hosting providers, payment processors, email delivery services, analytics tools, CRM platforms, and marketing automation software. These providers are contractually bound to process your data only on our behalf and in accordance with our instructions.
• Advertising and Marketing Platforms: When managing digital advertising campaigns (e.g., Meta Ads, Google Ads), limited data may be shared with the respective platforms to run and optimize campaigns on your behalf or our own.
• Legal and Regulatory Requirements: We may disclose your information if required by law, court order, subpoena, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Bloom 360 LLC, our clients, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity as part of the transaction, subject to confidentiality obligations consistent with this policy.
• With Your Consent: We may share your information with third parties when you have given us explicit, informed consent to do so.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Our general retention guidelines are as follows:

• Client Data: We retain data related to active client engagements for the duration of our service agreement and for a period of up to five (5) years following the termination of the agreement to satisfy legal, accounting, and audit requirements.
• Marketing Data: Contact information used for marketing communications is retained until you unsubscribe or request deletion, after which it is removed within thirty (30) days.
• Website Analytics: Anonymized and aggregated analytics data may be retained indefinitely for trend analysis and service improvement purposes.
• Communication Records: Emails, chat logs, and other communication records are retained for up to three (3) years for quality assurance and dispute resolution.

When personal data is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures.

Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we maintain about you.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data based on our legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing conducted before the withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us at privacy@bloom-360.com. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may need to verify your identity before fulfilling your request.

California Privacy Rights (CCPA)

If you are a resident of the State of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we shared it.
• Right to Delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions permitted under the CCPA.
• Right to Correct: You have the right to request correction of any inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information. Bloom 360 LLC does not sell personal information as defined under the CCPA/CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, including by denying services, charging different prices, or providing a different quality of service.

To submit a verifiable consumer request under the CCPA, please contact us at privacy@bloom-360.com or write to us at the address provided in the Contact section. You may also designate an authorized agent to submit a request on your behalf with proper written authorization.

Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, loss, or destruction. Our security practices include:

• Encryption: All data transmitted between your browser and our website is encrypted using industry-standard TLS/SSL encryption protocols.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. Staff with access to sensitive data receive regular training on data protection obligations.
• Secure Infrastructure: Our website and data systems are hosted on reputable cloud platforms with enterprise-grade security certifications, firewalls, intrusion detection, and regular vulnerability assessments.
• Data Minimization: We collect only the minimum amount of personal data necessary to fulfill the stated purposes and do not retain it longer than necessary.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities in accordance with applicable data protection laws in the event of a qualifying data breach.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to continuously improving our security measures.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and support our marketing efforts. A cookie is a small text file stored on your device by your web browser.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the basic operation of our website, such as session management and security features. These cookies cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics). This data helps us improve site functionality and content.
• Marketing Cookies: Used to deliver relevant advertisements and measure the effectiveness of our advertising campaigns (e.g., Meta Pixel, Google Ads conversion tracking).
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your language or region preferences.

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about the specific cookies we use and your options for managing them, please refer to our cookie consent tool displayed on the website.

Children's Privacy

Our website and services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under the age of 16 without verifiable parental consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at privacy@bloom-360.com so that we can take appropriate action.

International Data Transfers

Bloom 360 LLC is based in the United States. If you access our website or use our services from outside the United States, please be aware that your personal data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal data internationally, we implement appropriate safeguards to ensure that your data is protected in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data Processing Agreements (DPAs) with all third-party service providers.
• Binding Corporate Rules where applicable.
• Certifications and compliance frameworks recognized by relevant authorities.

By using our services or providing us with your information, you consent to the transfer of your data to the United States and other jurisdictions as described herein.

Changes to This Policy

Bloom 360 LLC reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please do not hesitate to contact us using the information below:

We aim to respond to all legitimate inquiries within thirty (30) days. If you feel that your concern has not been adequately addressed, you may have the right to lodge a complaint with your local data protection supervisory authority.