Who we are
At BlossomBows (“we”, “us”, “our”), we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, protect, and let you manage your personal data when you visit https://www.blossombows.com (the “Website”), place orders, sign up for newsletters, contact us, or interact with our services (collectively, the “Services”).
By using our Website or Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Website/Services.
Information We Collect
When you place an order or create an account on our site, we collect the data shown in the checkout or registration forms, such as your name, email address, phone number, billing/shipping address, and payment details (processed securely via third-party gateways—we do not store full card information).
We also collect your IP address and browser user agent string to help with security, fraud prevention, and analytics.
An anonymized string created from your email address (also called a hash) may be provided to services like Gravatar (if enabled for comments or profiles) to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. If you leave a comment or review, your profile picture (if using Gravatar) may be visible publicly in that context.
We may collect additional information automatically via cookies and similar technologies (see Cookies section below).
If you contact us via forms, chat, or email, we collect the details you provide for support purposes.
Media
If you upload images (e.g., custom gift notes, profile photos, or product reviews) to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
We use cookies and similar technologies for essential functions (e.g., keeping items in your cart, remembering login), analytics, and personalized advertising.
If you leave a review or comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when leaving another review/comment. These cookies will last for one year.
If you visit our login or checkout page, we will set temporary cookies to determine if your browser accepts cookies. These contain no personal data and are discarded when you close your browser.
When you log in, we set several cookies to save your login information and screen preferences. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login persists for two weeks. If you log out, login cookies are removed.
Additional cookies may be set if you edit account details or preferences; these contain no personal data and expire quickly.
We also use third-party cookies (e.g., Google Analytics for usage stats, Meta Pixel for ads, payment gateways for secure checkout). You can manage preferences via our cookie banner, browser settings, or opt-out tools.
For details, see our Cookie Policy [add link if separate].
Embedded content from other websites
Product pages, blogs, or reviews on this site may include embedded content (e.g., videos from YouTube, social media feeds, maps, payment widgets). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
Who we share your data with
We do not sell your personal data.
We share information with:
- Payment processors (e.g., Razorpay, PayU) for secure transactions (they handle card data directly).
- Shipping/logistics partners (e.g., Delhivery, India Post) — name, phone, address for delivery.
- Cloud/IT vendors (hosting, email services) under strict contracts.
- Analytics/advertising partners (Google, Meta) for aggregated insights and targeted ads (you can opt out).
- Legal authorities when required (e.g., tax compliance, fraud investigations).
If you request a password reset, your IP address will be included in the reset email.
Third parties are bound by confidentiality and security obligations.
How long we retain your data
We retain order, account, and transaction data for as long as necessary for business purposes (e.g., fulfilling orders, returns, warranties) or legal requirements (typically 5–7 years for tax/invoicing records under Indian laws).
If you leave a comment or review, the content and its metadata are retained indefinitely (or until deleted) so we can recognize and display follow-up interactions.
For registered users, we store profile information until you request deletion (subject to legal retention). You can edit or delete much of your data via your account dashboard.
After inactivity (e.g., 2–3 years), we may anonymize or delete non-essential data.
What rights you have over your data
Under applicable laws (including DPDP Act), if you have an account or have interacted with us (e.g., placed orders, left reviews), you can:
- Request access to the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data (subject to legal retention, e.g., tax records).
- Withdraw consent for marketing or certain processing.
- Restrict or object to processing in some cases.
- Request data portability (in structured format, where feasible).
To exercise these rights, email us at privacy@blossombows.com. We aim to respond within 30 days (or as prescribed by law).
You may also approach the Data Protection Board of India for unresolved issues.
Where your data is sent
Visitor interactions (e.g., reviews, comments) may be checked through automated spam detection services.
Order and usage data may be processed by third-party services in India or abroad (e.g., cloud providers), with appropriate safeguards.