Privacybeleid

Last Updated: 8 november 2025

De Bloom Room manages this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a personalized shopping experience (the “Services”).
De Bloom Room is powered by Shopify, which enables us to provide these Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail regarding the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another person. Personal information does not include anonymized or de-identified data that cannot reasonably be used to identify you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information (including inferences drawn from such data):

  • Contact information – such as your name, billing address, shipping address, phone number, and email address.

  • Financial information – including credit or debit card details, payment method, transaction data, payment confirmation, and other payment-related information.

  • Account information – such as your username, password, security questions, preferences, and settings.

  • Transaction information – including items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, as well as your order history.

  • Communications with us – any information you include when contacting us, for instance when requesting customer support.

  • Device information – including details about your device, browser, network connection, IP address, and other unique identifiers.

  • Usage information – including how and when you interact with or navigate through the Services.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, when you create an account, use the Services, or otherwise communicate with us.

  • Automatically through the Services, such as from your device when you visit our site or use our products, and through cookies or similar technologies.

  • From our service providers, when they enable or support certain functionalities and collect or process data on our behalf.

  • From our partners or other third parties.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our store, analyze site traffic, and improve your shopping experience.
Some cookies are essential for the site to function (for example, keeping your cart active), while others help us understand how visitors use our site or allow us to show relevant content.
For more details about how Shopify uses cookies, please see the Shopify Cookie Policy.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

  • To deliver, customize, and improve our Services.
    We use your information to fulfill our agreement with you, process payments and orders, remember your preferences, manage your account, handle returns and exchanges, send order updates, and create a personalized shopping experience.

  • For marketing and advertising.
    We use your information to send promotional messages by email, text, or mail, and to show you relevant ads—both on our site and elsewhere—based on your preferences, purchases, or browsing activity.

  • For security and fraud prevention.
    We use your information to verify accounts, process payments securely, detect or investigate fraudulent or harmful activity, protect public safety, and safeguard our Services.

  • To communicate with you.
    We use your information to provide customer support, respond to inquiries, and maintain our business relationship with you.

  • For legal purposes.
    We use your information to comply with applicable laws, respond to lawful requests, enforce our terms and policies, and protect our rights and those of others.

Legal Basis for Processing (EU/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information under the following legal bases:

  • Contract performance – when processing your information is necessary to fulfill a contract with you (e.g., to process payments or deliver your order).
  • Legal obligations – when processing is necessary to comply with applicable laws (e.g., tax or accounting requirements).
  • Legitimate interests – when processing helps us operate, improve, and secure our Services (provided your rights do not override these interests).
  • Consent – when you have given us permission to process your data (for example, for marketing emails). You may withdraw your consent at any time.

How We Disclose Personal Information

In certain situations, we may share your personal information with third parties for legitimate purposes consistent with this Privacy Policy. These may include:

  • With Shopify, vendors, and service providers who perform services on our behalf (e.g., IT management, payment processing, analytics, customer support, fulfillment, and shipping).

  • With business and marketing partners who help us deliver marketing services or advertisements. Shopify, for instance, supports personalized advertising based on your activity across different websites. These partners will process your information according to their own privacy statements.

  • With your consent or upon your request, for example when shipping your products or using social media integrations.

  • With our affiliates or within our company group.

  • In connection with a business transaction, such as a merger, acquisition, or bankruptcy; to comply with legal obligations; to enforce our terms; or to protect our rights and those of others.

Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes personal information about your access and use of the Services to deliver and improve them.
Information you submit via our Services is shared with Shopify and may be transferred to other countries where Shopify or its third-party providers operate.

Shopify may also process certain data (such as aggregated insights) across multiple merchants to enhance its platform. In these cases, Shopify acts as the data controller for such processing.

For more details on how Shopify uses your data and your rights, please review the Shopify Privacy Policy for Customers.

Third-Party Websites and Links

Our Services may contain links to websites or online platforms operated by third parties. We are not responsible for the privacy or security practices of such sites, including the accuracy or reliability of their content.

Any information you share publicly (e.g., through social media) may be viewed and used by others without limitation. The inclusion of such links does not imply endorsement of those websites or their owners.

Children’s Data

Our Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in your jurisdiction.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us to request its deletion.
As of the date of this Privacy Policy, we are not aware of any personal data from individuals under 16 being “sold” or “shared” as defined by applicable laws.

Data Security and Retention

Please note that no security measure is completely secure, and we cannot guarantee “perfect security.” Data you send us may not be secure during transmission, so we advise avoiding unprotected channels for sensitive information.

We retain personal data for as long as necessary to maintain your account, provide Services, comply with legal obligations, resolve disputes, or enforce agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Right of access – to request a copy of your personal data.

  • Right to deletion – to request that we delete your personal data.

  • Right to correction – to request correction of inaccurate information.

  • Right to portability – to receive your data in a portable format or request its transfer to another entity.

  • Right to manage communication preferences – you may opt out of promotional emails at any time using the unsubscribe link. (We may still send you non-promotional communications, e.g., regarding orders.)

If you are located in the United Kingdom or European Economic Area (EEA), you may also have the right to:

  • Object to or restrict processing of your data for specific purposes.

  • Withdraw consent, where processing is based on consent (this will not affect prior lawful processing).

To exercise your rights, please contact us using the details below or through our website. You may also review Shopify’s Privacy Portal for additional information and rights related to Shopify’s data processing.

We will not discriminate against you for exercising your rights. We may need to verify your identity before processing certain requests, as permitted by law.

Complaints

If you have any concerns about how we process your personal information, please contact us using the details below.
Depending on your location, you may also have the right to appeal or file a complaint with your local data protection authority.
A list of EU supervisory authorities can be found here.

International Data Transfers

Your personal information may be transferred, stored, and processed outside the country where you reside.
When transferring data outside the EEA or the UK, we rely on recognized transfer mechanisms such as the EU Standard Contractual Clauses or equivalent UK-approved contracts, unless the destination country has been deemed to provide adequate data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons.
The revised version will be posted on this page with an updated “Last Updated” date, and we will notify you as required by law.

Contact

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us at:
📧 hello@debloomroom.com
📍 Rokin 132-4, 1012 LD Amsterdam, The Netherlands

For the purposes of applicable data protection law, De Bloom Room (operated by Marjolein Aartsen and Ribka Kok)is the data controller of your personal information.