Privacy policy

PRIVACY POLICY

Last updated: August 30, 2026

Bloom 28 (operated by Vyvio, obrt za trgovinu i usluge) (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit or make a purchase from our website.

1. DATA CONTROLLER

The data controller responsible for your personal data is:

Vyvio, obrt za trgovinu i usluge
Graberje 27, 42000 Varaždin, Croatia
Email: info@bloom28shop.com
VAT (OIB): 43221997342

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

  • Identity & Contact Data: name, billing/shipping address, email address, phone number

  • Order & Transaction Data: purchase details, payment status, order history

  • Payment Data: processed securely via third-party payment providers (we do not store full card details)

  • Technical Data: IP address, browser type, device information

  • Usage Data: how you interact with our website

  • Communication Data: messages or inquiries sent to us

3. HOW WE COLLECT YOUR DATA

We collect data:

  • Directly from you (when placing orders or contacting us)

  • Automatically (via cookies and similar technologies)

  • From service providers (e.g. Shopify, payment processors, shipping providers)

4. LEGAL BASIS FOR PROCESSING

Under GDPR, we process your personal data based on:

  • Contractual necessity – to process and deliver your order

  • Legal obligation – for accounting and tax purposes

  • Legitimate interests – to improve our services and prevent fraud

  • Consent – for marketing communications (you can withdraw at any time)

5. HOW WE USE YOUR DATA

We use your personal data to:

  • Process and fulfill your orders

  • Provide customer support

  • Send order confirmations and updates

  • Improve our website and services

  • Prevent fraud and ensure security

  • Send marketing communications (only if you opt in)

6. SHARING YOUR DATA

We only share your data when necessary, including with:

  • Shopify (our e-commerce platform)

  • Payment providers (e.g. Stripe, PayPal)

  • Shipping providers (to deliver your order)

  • IT and service providers (hosting, analytics)

All third parties process your data in compliance with GDPR.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers (such as Shopify) may process data outside the European Economic Area (EEA).

In such cases, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission

8. DATA RETENTION

We retain your personal data only as long as necessary:

  • Order data: retained for legal and tax obligations (typically 10 years)

  • Customer communications: retained as needed for support

  • Marketing data: until you withdraw consent

9. YOUR RIGHTS UNDER GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent at any time

To exercise your rights, contact us at: info@bloom28shop.com

You also have the right to lodge a complaint with your local data protection authority (in Croatia: AZOP).

10. COOKIES & TRACKING

We use cookies and similar technologies to:

  • Ensure website functionality

  • Improve user experience

  • Analyze traffic and performance

  • Provide marketing (if consent is given)

You can manage or disable cookies through your browser settings.

11. THIRD-PARTY SERVICES

Our website is hosted by Shopify, which may collect and process personal data as part of providing its services.

We are not responsible for the privacy practices of third-party websites linked on our site.

12. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data.

However, no system is completely secure, and we cannot guarantee absolute security.

13. CHILDREN’S PRIVACY

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

15. CONTACT

If you have any questions about this Privacy Policy or your data, you can contact us via email: info@bloom28shop.com

By using our website, you acknowledge that you have read and understood this Privacy Policy.