The 2nd piece of jewellery at 50% off, or the 3rd free 🎁

Privacy policy

Bloom × Blaze places particular importance on the protection of personal data. This policy explains what data may be collected when you use the bloomxblaze.com website, the purposes for which it is processed, how long it is retained and what your rights are.

1. Data controller

2. Data that may be collected

Depending on how you use the website, we may process the following categories of data:

  • identification details: surname, first name, email address, telephone number
  • delivery and billing details
  • order-related data: products ordered, amount, order number, purchase history
  • data relating to exchanges with customer service
  • minimal technical browsing data, such as the IP address, browser type or session information

Payment data is not stored by Bloom × Blaze. It is processed by the payment providers used when payment is made.

3. Purposes and legal bases

Personal data may be processed for the following purposes:

  • processing orders, dispatch, delivery and after-sales service
  • managing refunds, returns and requests relating to performance of the contract
  • complying with legal, accounting and tax obligations
  • preventing fraud and securing the website
  • responding to requests sent through the contact methods made available
  • measuring website traffic, analysing browsing activity and improving the website
  • measuring advertising performance, personalising campaigns and carrying out marketing analysis

Depending on the circumstances, the legal bases for this processing are performance of the contract, compliance with legal obligations, or the legitimate interest in ensuring the proper functioning and security of the website. Where cookies or technologies that are not strictly necessary are used for audience measurement, advertising or behavioural analysis, the legal basis is your consent.

4. Recipients of the data

Data may be disclosed, to the extent necessary, to providers involved in the operation of the business, including:

  • technical hosting, maintenance or infrastructure providers
  • payment providers
  • logistics providers and carriers
  • audience measurement, advertising and analytics providers, such as Google Analytics, Google Ads, Meta Pixel, Pinterest Tag and Microsoft Clarity, when these tools are enabled with your consent
  • advisers or providers subject to a duty of confidentiality, where necessary

Data is neither sold nor transferred to third parties for commercial purposes.

5. Data transfers outside the EEA

Some of our providers are established in the United States. When your data is transferred to them, the transfer relies on one of the mechanisms provided for by the GDPR: the EU-US adequacy decision (Data Privacy Framework, DPF), if the provider is certified under it, or Standard Contractual Clauses (SCCs) adopted by the European Commission, as a supplementary measure.

List of the main providers outside the EEA and the applicable mechanisms:

  • Stripe (United States) — payment processing — DPF + SCCs
  • Resend (United States) — sending transactional emails (order confirmation, back-in-stock notification, newsletter) — SCCs
  • Google Analytics 4 (United States) — anonymised audience measurement, enabled after your consent — DPF
  • Meta Pixel (United States) — measuring advertising performance, enabled after your consent — DPF + SCCs
  • Pinterest Tag (United States) — measuring advertising performance, enabled after your consent — DPF + SCCs
  • Microsoft Clarity (United States) — analysing browsing behaviour, enabled after your consent — DPF + SCCs

Audience measurement, advertising and behavioural analysis tools are enabled only after your explicit consent has been obtained through our cookie management banner. You may withdraw your consent at any time.

6. Data retention

Data is retained for no longer than is necessary for the purposes pursued, subject to applicable legal obligations.

  • order and billing data: for as long as necessary to meet legal and accounting obligations
  • data relating to contact requests or customer service: for the time necessary to handle the request, followed by a reasonable period for follow-up
  • technical data and cookies: depending on their nature and purpose, for the period strictly necessary for them to function

7. Cookies and similar technologies

The website may use cookies or similar technologies necessary for its proper functioning, particularly for session management, security, the shopping basket or site navigation.

Subject to your consent where required, the website may also use the following tools: Google Analytics, Google Ads, Meta Pixel, Pinterest Tag and Microsoft Clarity.

These tools must not be enabled before your consent has been obtained when they are not strictly necessary for the website to function.

You can manage your preferences at any time using the consent management tool made available to you on the website. You can also configure your browser using the options it provides.

8. Your rights

In accordance with the GDPR, you may, depending on the circumstances, exercise the following rights:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object
  • right to withdraw your consent where processing is based on it

To exercise your rights, you can write to contact@bloomxblaze.com.

9. Complaints to a supervisory authority

If you consider that the processing of your personal data does not comply with the applicable regulations, you may lodge a complaint with the supervisory authority in your country of residence, your place of work or the place where the alleged infringement took place.

In Belgium — Data Protection Authority (APD):

In France — Commission Nationale de l'Informatique et des Libertés (CNIL):

  • Commission Nationale de l'Informatique et des Libertés
  • 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
  • https://www.cnil.fr

10. Contact

For any questions relating to this policy or the processing of your personal data, you can contact us at contact@bloomxblaze.com.