Effective Date: 20th January 2025 

At Bond and Bloom, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, subscribe to our services, or otherwise interact with us. This policy is in accordance with the Privacy Act 2020 of New Zealand.

By using our website at www.bondandbloom.co (the “Website”) and subscribing to our services, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you sign up for our journaling program, subscribe to our newsletter, or interact with us in any other way. The types of personal information we may collect include but are not limited to:

• Name
• Email address
• Phone number
• Billing address
• Payment information (e.g., credit card details, processed securely via Stripe)
• Any other information you provide us through feedback, contact forms, or other communications

Additionally, we may collect non-personal information automatically when you visit our Website, such as:

• Your IP address
• Browser type
• Device information
• Date and time of your visit
• Pages viewed on the Website

 

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Our Services: To deliver the 8-week journaling program, send weekly prompts, manage your subscription, and provide the resources you have requested.
• To Process Payments: To process payments securely for our services through our third-party payment provider, Stripe.
• To Communicate with You: To send you updates, reminders, and information relevant to your journaling program or services, such as the next steps in the journaling process or tips to enhance your experience.
• To Improve Our Services: To analyze how our Website and services are being used to improve our offerings, customize content to suit user preferences, and enhance user experience.
• For Customer Support: To respond to your questions, concerns, or requests, including providing technical support for issues related to your account, payment, or accessing the services.
• Marketing and Promotional Communications: To send you marketing materials and promotional offers, newsletters, or updates that you have opted in to receive. You may unsubscribe from marketing communications at any time by following the opt-out instructions in the emails or by contacting us directly.
• To Conduct Analytics and Research: To conduct statistical and analytical research on Website usage, customer demographics, preferences, and behaviors in order to improve our Website, marketing strategies, and services.
• To Comply with Legal Obligations: To comply with legal and regulatory obligations, including responding to lawful requests by public authorities, such as in compliance with a court order or government investigation.
• For Legal Enforcement and Protection: To enforce the Terms of Service, protect the security of our Website and services, investigate potential violations, and protect our legal rights, the rights of our users, or the public in general.
• Business Operations and Development: To operate, maintain, and improve our Website, enhance business operations, perform administrative functions, and prevent fraud, misuse, or other illegal activities on our platform.
• To Carry Out Business Transactions: If Bond and Bloom undergoes a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. In such cases, we will ensure your information is protected in accordance with this Privacy Policy or notify you of any changes.
• For Direct Communications: If you provide feedback or participate in surveys, promotions, or contests, we may use the data for those specific purposes and to improve customer engagement.

We will only use your personal information in ways that are compatible with the purposes for which it was collected or in accordance with your consent. You may also withdraw your consent to use your information for specific purposes at any time, where applicable.

3. Sharing Your Information

We do not sell or rent your personal information to third parties. However, we may share your information with the following parties, as necessary:

• Service Providers: We use third-party service providers, including Stripe, to process payments and provide other services (e.g., email marketing). These service providers may have access to your personal information but are obligated to protect it in accordance with applicable privacy laws.
• Legal Compliance: We may disclose your personal information if required by law, regulation, or legal process (e.g., in response to a subpoena or court order).
• Business Transfers: If Bond and Bloom undergoes a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction, subject to the privacy terms in place at the time of transfer.
• Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. When your personal information is no longer required, we will securely delete or anonymize it.

• Security of Your Information

We take reasonable precautions to protect your personal information from unauthorized access, use, alteration, or disclosure. We use secure encryption methods (such as SSL) to protect sensitive data during transmission. However, no method of data transmission over the internet or electronic storage is 100% secure, and we cannot guarantee the absolute security of your data.

• Your Rights

As a user of the Website, you have the following rights concerning your personal information:

• Access: You have the right to request access to the personal information we hold about you. You may contact us at [email protected] to make a request.
• Correction: If your personal information is incorrect or incomplete, you have the right to request corrections. Please contact us if you believe any of the information we hold about you is inaccurate.
• Deletion: You may request the deletion of your personal information, subject to certain exceptions (e.g., legal obligations or outstanding transactions).
• Opt-Out: You have the right to opt out of receiving marketing communications at any time. You can unsubscribe from our newsletters by following the instructions in the emails or contacting us directly.
• Complaints: If you believe that we have not complied with our privacy obligations, you have the right to lodge a complaint with the Office of the Privacy Commissioner in New Zealand.

• Third-Party Links

Our Website may contain links to third-party websites that are not operated by Bond and Bloom. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any personal information.

• State-Specific Privacy Disclosure

If you’re a resident of the United States, this additional state-specific privacy disclosure supplements the Bond and Bloom Privacy Policy and applies to you. The Bond and Bloom Privacy Policy describes the personal information we collect, the sources from which we collect it, the purposes for which we use it, and the limited circumstances under which we share personal information, and with whom we share it.

These additional disclosures are required by the following laws:

• California Consumer Privacy Act (CCPA)
• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Utah Consumer Privacy Act (UCPA)
• Virginia Consumer Data Protection Act (VCDPA)

This Disclosure also serves as a Notice at Collection under the California Consumer Privacy Rights Act.

Categories of Personal Information Collected:

The personal information that Bond and Bloom collects, or has collected from consumers in the twelve months prior to the effective date of this Disclosure, falls into the following categories depending on which Bond and Bloom service is used:

• Identifiers: Your name, email address, postal address, phone numbers, and IP address.
• Personal Information: Payment details, including credit card information, billing address, and other details you provide when subscribing to our journaling program.
• Commercial Information: Subscription details, including records of journal program subscriptions, payments, cancellations, or refunds.
• Internet or Other Electronic Network Activity Information: Including content interaction information, such as the pages you view on the Website, your session duration, and your activity while using our services.
• Geolocation Data: The location of your device or computer (if permitted by you).
• Inferences: Information about your preferences or behaviors, such as which types of journaling prompts or content you engage with, based on your interaction with our Website.

Categories of Personal Information Disclosed for a Business Purpose:

The personal information that Bond and Bloom disclosed to third parties for a business purpose in the twelve months prior to the effective date of this Disclosure falls into the categories listed above, depending on which service is used. This may include:

• Third-Party Service Providers: Payment processors (such as Stripe), email services, customer support platforms, and analytics providers.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring party.

Advertising:

As explained in our Privacy Policy, Bond and Bloom may share limited information with third-party advertising partners for the purpose of providing relevant advertisements about our services and measuring the effectiveness of our ads. This information is not used for direct marketing outside of our platform unless you explicitly opt in to receive such marketing communications.

Your Data Rights:

Depending on your location, you may have certain data rights under state privacy laws, including the following:

• Right to Access: You may request to know what personal information we have collected about you in the past 12 months.
• Right to Correct: You may request to correct or update your personal information.
• Right to Delete: You may request the deletion of your personal information, subject to exceptions under applicable laws.
• Right to Portability: You may request a copy of your personal information in a portable format.
• Right to Opt-Out of Sales or Sharing: While we do not sell personal information, if you reside in a state with relevant laws, you have the right to request that we do not share your information for marketing purposes.

For more details on your specific rights, please refer to the relevant state privacy law:

• California Consumer Privacy Act (CCPA)
• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Utah Consumer Privacy Act (UCPA)
• Virginia Consumer Data Protection Act (VCDPA)

No Sale of Personal Information:

In the twelve months prior to the effective date of this Disclosure, Bond and Bloom has not sold any personal information of consumers, as those terms are defined under the California Privacy Rights Act.

Sensitive Personal Information Disclosure:

Bond and Bloom does not use or disclose sensitive personal information (e.g., racial or ethnic origin, religious beliefs, health data) for any purpose not expressly permitted by applicable privacy laws.

Retention Disclosure:

We retain your personal information as long as it is necessary to fulfill the purposes outlined in our Privacy Policy and for as long as required by law. If you request deletion, we will make reasonable efforts to remove your data, but some information may be retained for legal, auditing, or contractual reasons.

Non-Discrimination Statement:

Bond and Bloom will not discriminate against any user for exercising their rights under applicable state privacy laws. This includes denial of services or a reduction in the quality of services offered to those who choose to exercise their data rights.

De-identified Data Disclosure:

Bond and Bloom may use de-identified data in some instances. De-identified data is not linked to any individual and is not considered personal data under applicable laws. We may use such data for analysis, research, and business purposes.

Profiling Disclosure:

Bond and Bloom does not engage in automated decision-making or profiling that significantly affects users, such as rejecting access to services based solely on automated processing. Our platform does not make decisions that result in legal consequences for you based solely on algorithmic profiling.

1. Privacy Rights for UK Residents

As a UK resident, your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018). This section provides additional information about how we, Bond and Bloom, process your personal data, your rights as a data subject, and how to exercise those rights.

Data Controller

Bond and Bloom is the Data Controller for the personal data that we collect from you. This means we are responsible for deciding how your personal data is processed and for ensuring that your privacy rights are respected. For any inquiries about your personal data, please contact us using the details provided below:

Contact Details:

• Jade Williams – Owner
• Email: [email protected] 
• Phone: 027 360 4456

Information We Collect

We collect various types of personal data to provide our services to you, including:

• Identification Information: Name, email address, phone number, and payment details.
• Transactional Data: Information related to the journaling service you sign up for, payments you make, and any communication with our customer service team.
• Technical Data: IP address, browser type, operating system, and device information that helps us improve our service and user experience.
• Geolocation Data: We may collect the location of your device or computer (if permitted by you) to serve region-specific content.
• Usage Data: Information on how you interact with our journaling prompts, your preferences, and session duration on our platform.

We collect this information when you interact with our platform, sign up for our journaling service, make payments, or communicate with our customer support.

Purposes of Processing

We process your personal data for the following purposes:

1. To provide the services you request: We need your personal data to facilitate your sign-up, payment processing, and access to the journaling service.
2. To communicate with you: We use your data to send important updates about your journal, upcoming prompts, or account-related information.
3. To send transactional messages: We send confirmation emails, payment receipts, and other necessary updates.
4. For customer support and service improvement: Your data helps us resolve issues, provide assistance, and improve our offerings.
5. To comply with legal obligations: We may need to process your data for legal and tax-related purposes, such as providing transaction history for reporting.
6. To send promotional materials (with your consent): We may send you marketing communications regarding new journaling offerings, blog posts, or other services if you have opted in.

Your Rights

Under the GDPR and DPA 2018, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, subject to certain legal exemptions.
• Right to Restriction of Processing: You can request that we limit how we process your data in specific situations.
• Right to Data Portability: You can request that we transfer your personal data to another service provider where technically feasible.
• Right to Object: You can object to our processing of your personal data, including for marketing purposes.
• Right to Withdraw Consent: You can withdraw your consent at any time if we process your personal data based on your consent (such as for marketing communications).

If you wish to exercise any of these rights, please contact us using the details provided above.

Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Contractual Necessity: To perform our contract with you (e.g., to provide the journaling service and process payments).
• Consent: Where you have given us your explicit consent for processing, such as for marketing communications or cookies.
• Legal Obligation: To comply with legal requirements, including tax reporting and fraud prevention.
• Legitimate Interests: For activities such as improving our platform, conducting analytics, and enhancing customer relationships, where we have a legitimate interest and where your rights are not overridden.

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice and as required by law (e.g., for legal or accounting purposes). You may request the deletion of your data, but please note that some data may be retained for legal, auditing, or contractual reasons.

Sharing of Personal Data

We do not sell your personal data. However, we may share your personal data with third parties in the following situations:

• Service Providers: We may share data with third-party service providers who assist with operating our platform, processing payments, or providing customer service.
• Legal Authorities: We may share your data with law enforcement or regulatory bodies if required by law or to protect our rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website and improve our services. For more information on how we use cookies and how to control them, please refer to our Cookie Policy.

International Transfers

Your personal data may be transferred to and stored in countries outside the United Kingdom, including the United States, where we or our service providers operate. If your data is transferred internationally, we will ensure appropriate safeguards are in place to protect your personal data, such as entering into standard contractual clauses or other lawful mechanisms.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority. You can contact the ICO via their website: www.ico.org.uk.

Changes to This Privacy Policy

Bond and Bloom reserves the right to update or change this Privacy Policy at any time. Any changes will be posted on this page, with the updated date at the top of the page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

Bond and Bloom
Email: [email protected]
Website: www.bondandbloom.co