Privacy Policy 🌸

Baby & Bloom is an online baby and mommy essentials store based in South Africa, operating at babyandbloom.co.za. We are the data controller responsible for your personal information collected through this website.

If you have any questions about this privacy policy or how we handle your data, please contact us at info@babyandbloom.co.za.

We collect information you provide directly to us, including:

• Account information — name, email address, password when you create an account
• Order information — name, billing address, shipping address, email, phone number and payment details when you place an order
• Contact information — name, email and message when you contact us
• Marketing preferences — whether you'd like to receive marketing emails from us

We also automatically collect certain information when you visit our website:

• IP address and browser type
• Pages viewed and time spent on site
• Referring website or source
• Device type (mobile, desktop, tablet)

We use the information we collect to:

• Process and fulfil your orders
• Send you order confirmations and shipping updates
• Respond to your enquiries and provide customer support
• Send marketing emails if you have opted in (you can unsubscribe at any time)
• Improve our website and shopping experience
• Comply with legal obligations
• Prevent fraud and protect our website

We do not sell, rent or trade your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and fulfilling orders, including:

• Shopify — our e-commerce platform (processes orders and stores data securely)
• The Courier Guy — our delivery partner (receives your name and delivery address only)
• Payment processors — to securely process your payment (we never store your card details)
• Email marketing platforms — to send you newsletters if you have opted in

All third parties are required to keep your information confidential and use it only for the purpose of providing their services to us.

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. We use cookies to:

• Remember items in your shopping cart
• Keep you logged into your account
• Understand how visitors use our website (analytics)
• Show you relevant advertising (if applicable)

You can disable cookies in your browser settings, however this may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies.

We take the security of your personal information seriously. Our website is powered by Shopify, which uses industry-standard SSL encryption to protect data transmitted between your browser and our website.

We never store your full credit card details — all payments are handled by our secure payment processors.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

Under South African data protection law (POPIA), you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information (subject to legal requirements)
• Objection — object to how we use your personal information
• Opt out — unsubscribe from marketing emails at any time using the unsubscribe link in any email

To exercise any of these rights, please contact us at info@babyandbloom.co.za. We will respond within 30 days.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including for legal and accounting requirements.

Order information is typically retained for 5 years for accounting purposes. If you close your account, we will delete your personal information within 30 days, unless we are required to retain it by law.

Our website is intended for use by adults purchasing products for their children. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on this page with an updated date.

We encourage you to review this policy periodically to stay informed about how we protect your information.