Privacy policy
Privacy Policy
This policy explains how Arc Media Enterprise LLC, trading as Bluum, handles personal information in connection with wearbluum.com. Our business address is 412 W 7TH, Clovis, New Mexico 88101, United States. For processing for which we determine the purposes and means, we are the responsible business or data controller.
Information involved in using our store
Depending on your interaction with us, we process your name, email address, telephone number, billing and delivery addresses, order details, payment confirmations, returns and customer service correspondence. Account information is involved if you choose to create an account.
Our ecommerce platform also processes technical information necessary to operate the store, such as IP address, browser and device information, shopping cart contents, session identifiers and security logs. Browsing or interaction information may be involved in optional analytics or advertising where those services are enabled and the required permissions have been obtained.
Information comes from you, your use of the store, and providers involved in your transaction, such as payment and delivery services. Payment details are handled by payment providers; do not send your full card details or passwords by email.
Purposes and legal bases
We use information to process and deliver orders, administer payments and returns, respond to requests, maintain records, operate and secure the website, and prevent fraud.
Where the UK GDPR or EU GDPR applies, processing necessary for your purchase is based on performing our contract or taking requested steps before a contract. Accounting and regulatory records may be processed to comply with legal obligations. Proportionate security, fraud prevention and service administration may be based on legitimate interests, subject to your rights. Consent is used where required, including for optional marketing technologies. We do not treat your visit to the website as blanket consent.
Providing the information needed to complete an order is necessary for us to supply it. Optional marketing consent is not a condition of purchase. You can withdraw consent without affecting the lawfulness of earlier processing.
Providers and disclosures
We use Shopify to host and operate our ecommerce store, together with payment services and store functionality such as Upcart. Order information needed for fulfilment is shared with fulfilment partners and delivery providers. Customer support, technology and professional service providers may process information where needed to perform their services. Such access must be appropriate to the service and subject to applicable legal requirements.
Information may also be disclosed to comply with law, respond to a lawful request, protect legal rights, or as part of a business transaction subject to appropriate confidentiality and privacy protections.
Shopify may process information on our behalf and, for some of its own services, under its own responsibility. See the Shopify Consumer Privacy Policy and Shopify Privacy Portal for its practices and controls.
Cookies, preferences and marketing
Cookies and similar technologies support functions such as the shopping cart, checkout, security and saved preferences. Optional technologies used for analytics, personalised advertising or other non-essential purposes require the choices and consent prescribed by applicable law.
Where a cookie preference or privacy-choice control is provided, you can use it to review your choices. You may also contact us about consent, objections or opt-out requests. Browser controls can remove or block cookies, although blocking essential cookies can affect checkout functionality. These controls do not replace any consent mechanism we are legally required to provide.
Marketing emails must follow applicable consent and direct marketing rules. You can unsubscribe using the link in a marketing email or contact us. Necessary service messages about a purchase may still be sent.
International processing
Information may be processed outside your country, including in the United States, where our business is based, and in countries where our service providers operate. Laws in those countries may differ from those in your country.
Where a transfer is restricted by applicable law, a valid transfer mechanism and required safeguards must be in place. These may include an applicable adequacy decision or approved contractual safeguards. Contact us for information about the destinations and safeguards relevant to your information. Merely accepting this policy does not waive transfer protections.
Retention and security
Retention depends on the purpose of processing, order and return administration, applicable accounting and legal requirements, dispute periods, security needs and valid deletion requests. Information should not be retained longer than necessary for those purposes. We use appropriate organisational and technical measures; no storage or transmission system is completely risk-free.
Your rights and complaints
Depending on the law that applies to you, you may have rights to access, correct, delete or receive a copy of your information, restrict processing, object to certain uses, withdraw consent, and challenge certain automated decisions. Where applicable, you may opt out of the sale or sharing of personal information or its use for targeted advertising, use an authorised agent, and appeal a decision about a privacy request.
Send requests to contact@wearbluum.com. We may ask for proportionate information to verify your identity and protect your information. Requests will be handled within the applicable legal deadline, subject to permitted exceptions. Exercising a privacy right will not result in unlawful discrimination.
You may complain to the relevant authority. Depending on your location, this may include the United Kingdom's Information Commissioner's Office, Ireland's Data Protection Commission, the Office of the Privacy Commissioner of Canada or a provincial regulator, Australia's Office of the Australian Information Commissioner, New Zealand's Office of the Privacy Commissioner, or the relevant United States regulator.
Children and updates
Our store is intended for a general adult shopping audience. If you believe a child has provided information without legally required authorisation, contact us so we can review and address it.
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated as required by law. An updated notice alone does not authorise a new use that requires consent.
Contact
For privacy questions or requests, email contact@wearbluum.com, or write to Arc Media Enterprise LLC, 412 W 7TH, Clovis, New Mexico 88101, United States.