Last updated: October 7, 2026 · Bloom Box SA (Pty) Ltd · Gqeberha, Eastern Cape, South Africa

Bloom Box SA (Pty) Ltd. operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Bloom Box SA (Pty) Ltd. is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal information we collect.

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect or process the following categories of personal information depending on how you interact with the Services:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Payment information — we do not collect or store any card, bank or other financial details. Payments are processed entirely by our payment providers, Payfast and Payflex. We only receive confirmation that you have paid, the amount, and which provider you used.
• Account information if you create a customer account, including your email address, preferences and settings. Sign-in uses a one-time code sent to your email; we do not hold a password for you.
• Personalisation details — if you choose free name personalisation, the first name you provide for the recipient of your Bloom Box.
• Transaction information including items you view, add to your cart, purchase, return or cancel and your past transactions.
• Communications with us including information you include when sending a customer support inquiry.
• Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information including information regarding your interaction with the Services.

Personal information sources.

• Directly from you when you create an account, visit or use the Services, or communicate with us.
• Automatically through the Services from your device, and through the use of cookies and similar technologies.
• From our service providers when we engage them to enable certain technology.
• From our partners or other third parties.

How we use your information.

• Provide & improve the Services — to process payments, fulfil orders, arrange shipping, manage your account and create a customised shopping experience.
• Marketing & advertising — to send marketing communications by email and WhatsApp, and to show you relevant online advertisements.
• Security & fraud prevention — to authenticate your account, provide secure payment and detect fraudulent or malicious activity.
• Communicating with you — to provide customer support and maintain our business relationship with you.
• Legal reasons — to comply with applicable law or respond to valid legal process.

How we disclose your information.

• With Shopify, vendors and third parties who perform services on our behalf (e.g. payment processing, cloud storage, fulfilment and shipping).
• With business and marketing partners to provide marketing services and advertise to you.
• When you direct or consent to our disclosure of certain information to third parties.
• In connection with a business transaction, to comply with legal obligations, or to enforce applicable terms of service.

Advertising & analytics partners.

We use advertising tools from Meta (Facebook and Instagram) and Google on our website, including the Meta Pixel, Meta Conversions API and the Google tag. These record actions such as pages viewed, items added to cart and purchases. They may also share contact details, such as your email address or phone number, in an encrypted (hashed) form with Meta and Google so they can measure our ads and show you relevant advertising. You can limit this through your browser's cookie settings, your Facebook "Off-Facebook Activity" settings, and Google's Ad Settings (adssettings.google.com).

Relationship with Shopify.

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside. To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Consumer Privacy Policy.

Third party websites & links.

The Services may provide links to websites or platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. You should review their privacy and security policies before providing any personal information.

Children's data.

Our products are made for girls, but they are bought by parents, guardians and other adults — purchases must be made by an adult. If you choose free name personalisation, we collect only the recipient's first name. We use it only to personalise that order, it is stored only in that order's record in Shopify, and we do not use it for marketing. We do not knowingly collect any other personal information about children. A parent or guardian can ask us to delete it at any time.

Security & retention of your information.

Please be aware that no security measures are perfect or impenetrable. How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide you with Services, comply with legal obligations, resolve disputes or enforce applicable contracts and policies.

Your rights & choices.

• Right to Access / Know — You may request access to personal information that we hold about you.
• Right to Delete — You may request that we delete personal information we maintain about you.
• Right to Correct — You may request that we correct inaccurate personal information.
• Right of Portability — You may request a copy of your personal information and request transfer to a third party.
• Right to Object — You may object to us using your personal information for direct marketing.
• Managing Communication Preferences — You may opt out of promotional emails at any time using the unsubscribe link in our emails, and out of WhatsApp marketing by asking us on WhatsApp to stop marketing messages.

These rights are provided under South Africa's Protection of Personal Information Act (POPIA). You may exercise any of these rights by contacting us using the details below. We will not discriminate against you for exercising any of these rights. To learn more about rights related to data processed by Shopify, visit privacy.shopify.com.

Complaints.

If you have complaints about how we process your personal information, please contact us using the details below. You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

International transfers.

Some of our service providers, including Shopify, Meta and Google, store and process information outside South Africa. We only use providers that are bound by data-protection laws or agreements offering protection similar to POPIA.

Changes to this policy.

We may update this Privacy Policy from time to time. We will post the revised Privacy Policy on this website and update the "Last updated" date accordingly.

Contact us.

Email: info@bloomboxsa.co.za
WhatsApp: +27 68 576 6420
We aim to respond within 24 hours on business days (Mon–Fri). 💜