Privacy policy.

Who we are

Bloom Brands, LLC, doing business as Pippi and Bloom, of South Jordan, Utah 84095, runs pippiandbloom.com. This policy explains what we collect when you visit the site, join the email list, or place an order, what we do with it, and the choices you have. Questions go to [email protected] or the contact page.

What we collect

What you give us. When you order, we collect your name, email address, shipping and billing addresses, phone number, and what you bought. When you join the email list, your email address. When you write to us or leave a review, whatever you put in the message or the review.

Payment details. Card numbers go straight from your browser to our payment processor, WooPayments, which runs on Stripe. We never see or store your full card number; we keep only the last four digits and the card type so we can match a payment to an order.

What your browser sends. Like most sites, we receive your IP address, browser and device type, the pages you view, and the site that sent you here. We use Microsoft Clarity, which records how visitors move around a page (clicks, scrolls, and mouse movement) so we can see where the site is confusing. Anything you type into a field is masked before it reaches Clarity. We may also use Google Analytics to count visits and see which pages people read.

How we use it

• To take, ship, and support your order: charging your card, printing the label, sending order and shipping emails, handling a return.
• To send the emails you asked for. Every marketing email carries an unsubscribe link. Order emails are sent regardless, because you need them.
• To answer your messages.
• To keep the store safe: spotting fraudulent orders and abuse.
• To understand how the site is used and make it better.
• To meet legal, tax, and accounting obligations.

We do not sell your personal information, and we do not share it with anyone for their own advertising.

Cookies & analytics

The store uses cookies to remember what is in your cart, keep you signed in to your account, and tell one visitor from the next. Cloudflare, which sits in front of the site, sets a cookie for security. Microsoft Clarity and Google Analytics set cookies to measure visits. You can block or delete cookies in your browser settings; the cart and account features need them to work. To opt out of Google Analytics across the web, install Google’s browser add-on; Microsoft publishes its own opt-out for Clarity.

Who we share it with

Only the companies that help us run the store, and only what they need to do their job: our payment processor (WooPayments and Stripe), the carrier that delivers your order, the service that sends our emails, the company that hosts the site and the network that protects it (Cloudflare), and the analytics tools above. Each is bound to use your information only to provide its service to us.

We will also share information when the law requires it, to protect our rights or someone’s safety, or as part of a sale or merger of the business, in which case this policy continues to apply to it.

How long we keep it

Order records stay as long as we need them for tax, accounting, and guarantee purposes. Your email stays on the list until you unsubscribe. Analytics data is kept for the period set by each tool. Messages are kept as long as we need them to help you.

Wholesale accounts

When a business applies for a wholesale account, we also collect the business name, the business address and phone number, and, if you choose to upload one, a resale certificate. We use them to review the application, run the account, and apply a sales tax exemption. We keep them while the account is open, and after that for as long as tax and accounting rules require. The sharing rules above apply to them too.

Your choices

• Email. Unsubscribe with the link at the bottom of any marketing email, or write to us.
• Your account. Sign in to see and update your addresses and order history.
• Access, correction, deletion. Write to us and we will send you what we hold about you, fix it, or delete it. We keep what the law requires us to keep, such as records of a completed sale.
• State privacy rights. If your state gives you rights over your personal information (California, Colorado, Connecticut, Utah, Virginia, and others), you can use them by writing to us. We will not treat you differently for doing so.

Children

The site is for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

Security

The site runs over HTTPS, payments are handled by a PCI-compliant processor, and access to order data is limited to the people who need it to fill your order. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

Changes

When this policy changes, the new version goes here with a new date at the top. A change that matters to you will also be announced by email if you are on the list.

Contact

Questions about this policy? Write to [email protected] or use the contact page.