How we handle your data.

We collect only what's needed to run the marketplace and fulfill your orders. There are three rough buckets:

• Information you give us: Your name, email, phone number, delivery address, and any details you include in messages or partner applications.
• Information from your device: Approximate location (so we can show whether you're in our delivery zone), browser type, language preference, and basic usage analytics.
• Information from your activity: What you browse, add to cart, and order. We use this to improve recommendations and the quality of the platform.

Your data is used for one of these purposes:

• Processing your orders and routing them to the right retailer.
• Determining whether you're inside our delivery zone.
• Communicating with you about orders, updates, or support requests you initiate.
• Improving the marketplace — figuring out which features people use, where things break, what to build next.
• Keeping the platform secure — detecting fraud, abuse, or unauthorized access.
• Meeting our legal obligations under UAE law.

We don't sell your personal data. We share it only with the parties needed to deliver the service: the retailer fulfilling your order, payment processors when we add online payments, and trusted infrastructure providers (hosting, email delivery, analytics) — all bound by confidentiality.

We may also disclose information when required by law or to protect the rights, safety, or property of Bloom, our users, or the public.

When you place an order, the retailer who's making it receives your name, phone, delivery address, and order details. They need this to prepare and deliver what you bought. They are the data controller for that information once it reaches them.

Retailers on Bloom agree to use your information only to fulfill your order and any related communication — not to add you to marketing lists without your consent.

We use cookies and browser storage for two purposes only:

• Essential: Keeping you signed in (for retailers), remembering your cart, remembering your delivery location, and basic security. The site won't work without these.
• Analytics: Aggregated, anonymous data about how the site is used. We don't use third-party advertising trackers.

You have the right to:

• Access: Ask for a copy of the personal data we hold about you.
• Correct: Update anything that's wrong or out of date — most of this you can do yourself in your account settings.
• Delete: Request that we delete your account and personal data, subject to legal retention requirements.
• Object: Tell us to stop using your data for specific purposes (like analytics or non-essential communications).
• Export: Get your data in a portable format you can take elsewhere.

To exercise any of these rights, reach us through the contact form.

We use industry-standard practices: encrypted connections (HTTPS), secure infrastructure (Google Cloud / Firebase), restricted internal access, and regular reviews. Passwords are hashed, never stored in plain text.

No system is perfectly secure, though. If we ever discover a breach that affects your data, we'll notify you and the relevant authorities promptly — within the timelines required by UAE law.

Bloom is not directed at children under 18. We don't knowingly collect personal data from minors. If you believe a child has provided us with information, please contact us and we'll delete it.

We may update this policy as the platform evolves or laws change. When we make material changes, we'll update the 'last updated' date at the top and, where appropriate, notify you by email or a banner on the site. Continued use of Bloom after changes means you accept the updated policy.

Questions about this policy or how we handle your data? Reach out — we'll get back within a few business days.