At Bosses in Bloom, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have regarding your information when you visit our website, use our services, or interact with us.

Information We Collect

• Information you provide directly: We collect personal information you provide when you place an order, create an account, subscribe to communications, participate in promotions, or contact customer support. This may include your name, billing and shipping addresses, email address, phone number, payment information, and any messages or notes you provide.

• Information we collect automatically: When you visit our website or use our services, we automatically collect certain information about your device and usage, including IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We may use cookies and similar technologies to collect this information.

• Information from third parties: We may receive information about you from third-party services, such as payment processors, shipping carriers, analytics providers, and advertising partners.

How We Use Your Information We use the information we collect to:

• Process and fulfill orders, including managing payments, shipping, and returns.

• Provide customer service and respond to inquiries or requests.

• Send transactional communications, such as order confirmations, shipping notifications, and account-related messages.

• Send promotional communications, newsletters, and marketing offers, subject to your communication preferences and applicable law.

• Improve our website, products, and services, and personalize your experience.

• Detect, prevent, and address fraud, security risks, and technical issues.

• Comply with legal obligations and enforce our terms and policies.

Legal Bases for Processing (where required)

• Where applicable, we process personal information based on your consent, to perform a contract with you, to comply with legal obligations, or for our legitimate business interests, such as to provide and improve our services and ensure security.

Sharing and Disclosure of Information We may share your personal information with:

• Service providers and vendors who perform services on our behalf, such as payment processors, shipping carriers, hosting providers, email and marketing platforms, and customer support providers.

• Third parties for fraud prevention, credit risk reduction, and legal compliance.

• Business partners for co-branded promotions or joint offerings, with your consent where required.

• Law enforcement, regulators, or other parties when required by law, to protect our legal rights, or to respond to legal process.

• In connection with a merger, acquisition, bankruptcy, or sale of assets, where personal information may be transferred as part of the transaction.

Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, and similar technologies to collect information about your activities on our site and across the internet. These technologies help enable website functionality, remember your preferences, analyze usage, and deliver relevant advertising. You can manage cookie preferences through your browser settings and, where available, opt out tools provided on our website.

Your Choices and Rights

• Account information: You can access, update, correct, or delete your account information by logging into your account or contacting us.

• Marketing communications: You may opt out of receiving promotional emails by following the unsubscribe instructions in those emails or by contacting us. Transactional messages related to orders and account management cannot be opted out of.

• Cookies and tracking: You can control cookies through your browser settings and opt-out tools. Third-party advertising networks may offer opt-out mechanisms for targeted advertising.

• Data subject rights: Depending on your jurisdiction, you may have rights to access, correct, delete, restrict processing of, or obtain a copy of your personal information, and to object to processing or request data portability. To exercise these rights, contact us as specified below. We may need to verify your identity before responding.

Data Security

• We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. While we strive to protect your information, no security system is impenetrable and we cannot guarantee absolute security.

Data Retention

• We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes. Retention periods may vary depending on the type of information and applicable law.

International Transfers

• If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We take steps to protect personal information when transferred across borders, consistent with applicable law.

Children’s Privacy

• Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under