Privacy Policy

When you place an order or contact us, we collect the following. Ordering doesn’t require creating an account — your details are only used to fulfil that order and let you track it:

• Name, WhatsApp number, and delivery address (including city and province) — to fulfil and communicate about your order.
• Payment details — processed securely through our payment provider. We never store full card numbers on our servers.
• Order history tied to the unique tracking link generated for each order — there is no customer account or login.
• Device and browsing data (IP address, browser type, pages visited) — collected automatically via cookies to improve site performance.

We only use your data for purposes that directly benefit your experience with us:

• Processing and delivering your coffee orders.
• Sending order confirmations, shipping updates, and delivery notifications.
• Responding to your enquiries and customer support requests.
• Sending occasional offers or updates — only if you have opted in, and you can unsubscribe at any time.
• Improving our website, product range, and overall service.
• Complying with legal obligations such as tax and fraud prevention.

Our website uses cookies — small text files stored on your device — to keep your cart active between visits, remember your preferences, and understand how visitors use our site so we can improve it.

You can manage or disable cookies in your browser settings at any time. Note that disabling cookies may affect your shopping experience (e.g. your cart may not be saved between sessions).

• Essential cookies — required for the site and cart to function.
• Analytics cookies — help us understand which pages are most visited (we use anonymised data only).
• Marketing cookies — only active if you have given explicit consent.

We do not sell, rent, or trade your personal information. We share data only with trusted partners who help us operate our business:

• Delivery partners (e.g. courier services) — to ship your orders.
• Payment processors — to handle secure transactions.
• Email service providers — to send transactional and opt-in marketing emails.
• Analytics tools — using anonymised, aggregated data only.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection laws.

We keep your personal data for as long as necessary to provide our services and comply with legal obligations. Order records are retained for 7 years for accounting and tax purposes.

You have the right to:

• Access the personal data we hold about you.
• Request correction of any inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Opt out of marketing emails at any time using the unsubscribe link in any email.
• Object to or restrict certain types of processing.
• Data portability — request a copy of your data in a structured format.

To exercise any of these rights, contact us at privacy@bloomcoffee.com. We will respond within 30 days.

We take the security of your data seriously. Our website uses SSL encryption, and all payment processing is handled by PCI-DSS compliant providers. Access to customer data within our team is strictly limited on a need-to-know basis.

While we take every reasonable measure to protect your data, no method of transmission over the internet is 100% secure. If you have concerns, please contact us immediately.

We may update this Privacy Policy from time to time as our services evolve or legal requirements change. When we do, we will update the date at the top of this page. For significant changes, we will notify you by email. Continued use of our website after any changes constitutes acceptance of the updated policy.

Get in touch with us

If you have any questions about this policy or how we handle your data, we're happy to help.