1. Introduction

Welcome to Bloof! We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy outlines how Bloof (“we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you visit our website ([Your Website URL]), use our services, or purchase our products.

As a user (“you”, “your”, or “Data Principal”), your privacy is of utmost importance to us. This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023.

By using our website, you consent to the collection and use of your data as described in this policy.

2. Information We Collect

We collect information to provide and improve our services. The types of personal data we may collect include:

• Personal Identification and Contact Information:
  • Full Name
  • Email Address
  • Mobile Number
  • Billing and Shipping Address (including city, state, and PIN code)
• Account Information:
  • Username and Password
  • Order History and Wishlist items
  • Customer Service communication records
• Payment Information:
  • We do not store your credit card, debit card, or net banking details. This information is directly transmitted through a secure connection to our trusted payment gateway partners (e.g., Razorpay, PayU, etc.).
• Automatically Collected Information:
  • Device and Usage Data: IP address, browser type and version, operating system, pages you visit on our site, time and date of your visit, and time spent on those pages.
  • Cookies and Tracking Technologies: We use cookies to enhance your browsing experience, remember your preferences, and analyze site traffic. You can manage your cookie preferences through your browser settings.

3. How We Use Your Information

We use your personal data for the following legitimate purposes:

• To Fulfill Your Orders: To process your payments, confirm your order, and deliver products to your specified address.
• To Manage Your Account: To create and manage your Bloof account, and provide you with customer support.
• To Communicate With You: To send you order updates, service-related information, and, with your explicit consent, promotional offers and newsletters.
• To Improve Our Services: To analyze website usage and trends to enhance our website design, product offerings, and user experience.
• For Security and Legal Compliance: To prevent fraud, protect the security of our website, and comply with our legal obligations and government requests.

4. How We Share Your Information

We do not sell your personal data. We may share your information with trusted third parties only in the following circumstances:

• Logistics and Delivery Partners: To ship and deliver your orders (e.g., Shiprocket, Delhivery, Blue Dart).
• Payment Gateways: To process your payments securely.
• Marketing and Analytics Partners: To help us with marketing campaigns and website analytics (e.g., Google Analytics).
• Legal Authorities: If required by law, we may disclose your information to law enforcement agencies or other government bodies.

These third parties are obligated to protect your data and are not authorized to use it for any other purpose.

5. Data Security

We implement robust security measures, including SSL encryption and access controls, to protect your personal data from unauthorized access, alteration, or destruction. However, please be aware that no method of transmission over the internet is 100% secure.

6. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required to comply with our legal obligations (e.g., for taxation and accounting purposes).

7. Your Rights as a Data Principal (under DPDPA, 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You have the right to request a summary of the personal data we hold about you.
• Right to Correction and Erasure: You can correct, update, or request the deletion of your personal data through your account settings or by contacting us.
• Right to Withdraw Consent: You have the right to withdraw your consent for us to process your data at any time. Please note that withdrawing consent may affect your ability to use certain services.
• Right to Grievance Redressal: You have the right to have your grievances addressed. Please contact our Grievance Officer with any complaints.
• Right to Nominate: You have the right to nominate an individual who can exercise your rights on your behalf in the event of your death or incapacity.

8. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Last Updated” date. We encourage you to review this policy periodically.