Privacy policy
SECTION 1 — WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us — such as your name, address, and email address.
When you browse our store, we automatically receive your computer's internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates.
Text marketing (if applicable): With your permission, we may send text messages about our store, new products, and other updates. Updates include Checkout Reminders. Webhooks will be used to trigger the Checkout Reminders messaging system.
SECTION 2 — CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in you change your mind, you may withdraw your consent for us to contact you — for the continued collection, use, or disclosure of your information — at any time, by contacting us at support@tryblossom.com or by mail:
Blossom Essentials
701 Tillery St. Suite 12
Austin, TX 78702
SECTION 3 — DISCLOSURE
We may disclose your personal information if we are required by law to do so, or if you violate our Terms of Service.
SECTION 4 — SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.
Payment
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council — a joint effort of brands like Visa, Mastercard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
SECTION 5 — THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers — such as payment gateways and other payment transaction processors — have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled.
Please note that certain providers may be located in or have facilities in a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Service.
Links
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Google Analytics
Our store uses Google Analytics to help us learn about store visits and the pages being viewed.
SECTION 6 — SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.
If you provide us with your credit card information, the information is encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 — COOKIES
A cookie is a small amount of information that's downloaded to your computer or device when you visit our Site. We use a number of different cookies — including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don't have to re-enter this information each time you return to the Site or browse from one page to another.
Here is a list of cookies we use, so you can choose to opt out if you wish.
Cookies Needed for Site Functioning
• _ab — Access to admin
• _secure_session_id — Navigation through storefront
• cart — Shopping cart contents
• cart_sig, cart_ts — Checkout processes
• checkout_token, secret — Checkout security
• secure_customer_sig, storefront_digest — Customer login
• _shopify_u — Customer account updates
Reporting & Analytics Cookies
• _tracking_consent — Tracking preferences
• _landing_page, _orig_referrer — Landing page tracking
• _s, _shopify_s — Shopify analytics
• _shopify_sa_p, _shopify_sa_t — Marketing & referrals
• _shopify_y, _y — Shopify analytics
The length of time a cookie remains on your device depends on whether it is a 'persistent' or 'session' cookie. Session cookies last until you stop browsing; persistent cookies last until they expire or are deleted. Most cookies we use are persistent and will expire between 30 minutes and two years from the date they were downloaded.
You can control and manage cookies through your browser controls, often found in your browser's 'Tools' or 'Preferences' menu. Please note that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
SECTION 8 — COLLECTING PERSONAL INFORMATION
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. Any information that can uniquely identify an individual is referred to as 'Personal Information.'
Device Information
• Examples collected: web browser version, IP address, time zone, cookie information, pages and products viewed, search terms, and how you interact with the Site.
• Purpose: To load the Site accurately and perform analytics on Site usage to optimize the Site.
• Source: Collected automatically via cookies, log files, web beacons, tags, or pixels.
• Disclosed to: Shopify, Stripe, Klarna, Afterpay, or PayPal.
Order Information
• Examples collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
• Purpose: To fulfill our contract with you; process payment; arrange shipping; send invoices and order confirmations; communicate changes, cancellations, refunds, or exchanges; screen for fraud; and provide relevant information or advertising.
• Source: Provided directly by you.
• Disclosed to: Shopify, Stripe, Afterpay, or PayPal.
Customer Support Information
• Examples collected: name, billing address, shipping address, payment information, email address, and phone number.
• Purpose: To provide support, resolve issues, and fulfill our contractual obligations to you.
• Source: Provided directly by you.
• Disclosed to: Shopify, Stripe, Afterpay, or PayPal.
SECTION 9 — MINORS
The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at support@tryblossom.com to request deletion.
SECTION 10 — SHARING PERSONAL INFORMATION
We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:
• We use Shopify and its integrated apps to power our online store. Learn more: shopify.com/legal/privacy.
• We may share your Personal Information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful requests for information, or to otherwise protect our rights.
• We do not — and will never — sell your personal information to outside organizations.
SECTION 11 — BEHAVIORAL ADVERTISING
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
• Google Analytics — helps us understand how customers use the Site. Learn more: policies.google.com/privacy. Opt out: tools.google.com/dlpage/gaoptout.
• Facebook Ads — for marketing and advertising our products. Opt out: facebook.com/settings/?tab=ads.
• Google Ads — for marketing and advertising our products. Opt out: google.com/settings/ads/anonymous.
• Pinterest Ads — for marketing and advertising our products. Opt out: help.pinterest.com/en/article/personalization-and-data.
For more information on targeted advertising, visit the Network Advertising Initiative's educational page at networkadvertising.org.
SECTION 12 — ARTIFICIAL INTELLIGENCE (AI) TOOLS
New — Added May 2026
We may use artificial intelligence (AI) tools and services to support our business operations. This section explains how AI may interact with your data.
How We Use AI
AI tools may be used in the following ways:
• Customer support: We may use AI-assisted tools to help respond to customer inquiries, including chatbots or automated response systems. Where this occurs, we will endeavor to make it clear that you are interacting with an automated system.
• Personalization: We may use AI to analyze browsing behavior and purchase history to personalize product recommendations and marketing communications shown to you.
• Fraud detection: AI models may be used to screen orders or account activity for potential fraud or security risks.
• Business analytics: We use AI to help analyze aggregate, de-identified data to improve our products, website, and customer experience.
• Content creation: AI tools may assist in drafting website copy, email content, or other marketing materials. AI-generated content is always reviewed by our team before publication.
Data Used by AI Systems
AI tools we employ may process Personal Information such as purchase history, browsing behavior, device information, and customer support interactions. We take the following steps to protect your information in AI contexts:
• We only use reputable AI service providers that maintain appropriate data security standards.
• We do not share your sensitive personal or health information with AI systems beyond what is necessary for the stated purpose.
• Where possible, data is anonymized or aggregated before being processed by AI tools.
• We do not use AI systems to make fully automated decisions that have significant legal or similarly significant effects on you without human review.
AI Service Providers
AI tools we may use are provided by third parties, including but not limited to providers of large language models, recommendation engines, or customer support automation. These providers have their own privacy policies and data handling practices, and we encourage you to review them. We will update this section as our use of AI tools evolves.
Your Choices Regarding AI
If you would prefer not to have your data used in AI-assisted personalization or marketing, you may opt out by contacting us at support@tryblossom.com. Please note that some AI-assisted functions (such as fraud detection or site security) are necessary for safe operation of our store and cannot be opted out of individually.
AI & Data Retention
Personal Information processed by AI systems is subject to the same data retention practices described in this Privacy Policy. We do not retain Personal Information in AI systems beyond what is needed for the stated purpose.
SECTION 13 — DATA RETENTION
New — Added May 2026
We retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
• Order information is retained for a minimum of 7 years to comply with tax and accounting obligations.
• Marketing data (email and SMS) is retained until you unsubscribe or request deletion.
• Customer support records are retained for up to 3 years after resolution.
• You may request deletion of your Personal Information at any time (subject to legal retention requirements) by contacting support@tryblossom.com.
SECTION 14 — YOUR RIGHTS
California Residents (CCPA)
If you are a resident of California, you have the following rights regarding your Personal Information:
• Right to Know: You may request a copy of the Personal Information we hold about you and learn how it is used and shared.
• Right to Delete: You may request that we delete your Personal Information, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate Personal Information.
• Right to Opt Out of Sale: We do not sell your Personal Information. However, you may contact us if you have questions.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, contact us at support@tryblossom.com.
Other Jurisdictions
Depending on where you are located, you may have additional rights under applicable law (such as GDPR rights for residents of the European Economic Area, or PIPEDA rights for Canadian residents). These may include the right to access, rectify, erase, restrict, or object to the processing of your Personal Information, or the right to data portability. To exercise any such rights, please contact us at support@tryblossom.com.
DO NOT TRACK
Because there is no consistent industry understanding of how to respond to 'Do Not Track' signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
SMS MARKETING
By opting into SMS marketing, you agree to our Messaging Terms and Messaging Privacy Policy. You can find these at terms.pscr.pt/legal/shop/my-skin-routine/terms_of_service and terms.pscr.pt/legal/shop/my-skin-routine/privacy_policy respectively.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons — including changes in how we use AI tools and third-party services. We encourage you to review this page periodically. Continued use of the Site after updates constitutes your acceptance of the revised policy.
CONTACT
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:
Email: support@tryblossom.com
Mail:
Blossom Essentials
701 Tillery St. Suite 12
Austin, TX 78702