Privacy policy

Privacy Policy

Last Updated: June 24, 2026

BoardBloom operates this online store and website, including the related content, products, features, tools, and services collectively referred to in this Privacy Policy as the “Services.”

BoardBloom is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services.

This Privacy Policy explains how BoardBloom collects, uses, discloses, stores, and otherwise processes personal information when you:

  • Visit or use our website

  • Create or use a customer account

  • Browse or purchase products

  • Add products to a cart or wishlist

  • Request a return, refund, or exchange

  • Contact customer support

  • Subscribe to marketing communications

  • Submit a review or other content

  • Otherwise interact with BoardBloom

This Privacy Policy also explains the privacy rights and choices that may be available to you.

If there is a conflict between this Privacy Policy and our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy will control with respect to that personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Nothing in this Privacy Policy limits any privacy right or protection that cannot legally be excluded under applicable law.

1. Contact Information

BoardBloom is responsible for the personal information described in this Privacy Policy, except where Shopify or another third party independently determines how and why personal information is processed.

For questions, complaints, or privacy requests, contact:

BoardBloom
Email: naoamobuaoosm@gmail.com
Website: https://boardbloom.us
Business Type: Online Retail Store
Main Category: Education, Crafts & Presentation Supplies

For privacy-related requests, use the subject line:

Privacy Rights Request

Do not send passwords, full payment-card numbers, bank-account credentials, government identification numbers, or unnecessary sensitive information through ordinary email.

2. Meaning of Personal Information

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

Depending on applicable law, personal information may also be referred to as:

  • Personal data

  • Personally identifiable information

  • Customer data

  • Consumer information

Personal information generally does not include information that has been lawfully anonymized, aggregated, or de-identified so that it cannot reasonably be linked to a particular person.

3. Personal Information We May Collect

The categories of personal information we collect depend on how you interact with BoardBloom, the products and features you use, your location, and applicable law.

We may collect the following categories of information.

Contact Information

This may include:

  • Full name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

  • Country, state, province, city, and postal code

Order and Transaction Information

This may include:

  • Products viewed

  • Products placed in a shopping cart

  • Products purchased

  • Order number

  • Purchase date

  • Product quantity

  • Product preferences

  • Discounts or promotional codes used

  • Returns

  • Refunds

  • Exchanges

  • Cancellations

  • Shipping and delivery status

  • Previous transactions

Payment Information

Payments may be processed by Shopify, Shopify Payments, card networks, banks, digital-wallet providers, or other payment processors.

Payment-related information may include:

  • Payment method

  • Billing details

  • Payment status

  • Transaction identifier

  • Payment authorization result

  • Partial payment-card details, such as card type or last digits

  • Fraud-prevention and verification information

BoardBloom does not ordinarily receive or store complete payment-card numbers when payments are processed by an independent payment provider.

Account Information

If customer-account features are available, we may collect:

  • Username

  • Account identifier

  • Login credentials in protected form

  • Account preferences

  • Saved addresses

  • Saved products

  • Order history

  • Communication settings

You are responsible for maintaining the confidentiality of your account credentials.

Customer-Support Information

When you communicate with us, we may collect:

  • The contents of your message

  • Your order number

  • Photographs or videos you provide

  • Product details

  • Shipping or delivery information

  • Complaint information

  • Return or refund documentation

  • Records of our communications

Device and Technical Information

This may include:

  • Internet Protocol address

  • Browser type

  • Device type

  • Operating system

  • Device identifiers

  • Network information

  • Language settings

  • Time zone

  • Referring website

  • Cookie identifiers

  • Approximate location inferred from an IP address

  • Technical logs and error information

Website and Usage Information

This may include information about:

  • Pages visited

  • Products viewed

  • Searches performed

  • Links clicked

  • Time spent on pages

  • Cart activity

  • Checkout activity

  • Website navigation

  • Interactions with advertisements

  • Date and time of visits

  • Referral sources

Marketing Information

This may include:

  • Email subscription status

  • Advertising preferences

  • Promotional-message interactions

  • Campaign attribution information

  • Products or categories that may interest you

  • Whether an email was opened or a link was selected

Reviews and Submitted Content

If you submit a review, photograph, comment, suggestion, survey response, or other content, we may collect:

  • The content you submit

  • Name or display name

  • Product reviewed

  • Rating

  • Submission date

  • Related order information

  • Technical information used to detect fraud or abuse

Do not include sensitive or unnecessary personal information in public reviews or comments.

Inferences

Where permitted by law, we may draw limited inferences from information described above, such as probable product interests or shopping preferences.

4. Sensitive Personal Information

BoardBloom does not seek to collect sensitive personal information unless it is reasonably necessary for a legitimate business or legal purpose.

Sensitive personal information may include, depending on applicable law:

  • Government identification numbers

  • Precise geolocation

  • Account login credentials

  • Financial account credentials

  • Racial or ethnic origin

  • Religious beliefs

  • Health information

  • Biometric information

  • Information about children

Do not send sensitive personal information through email unless we specifically request it and provide an appropriate method.

If sensitive personal information is provided unnecessarily, we may delete, restrict, or decline to process it.

5. Sources of Personal Information

We may collect personal information from the following sources.

Directly From You

For example, when you:

  • Submit an order

  • Create an account

  • Contact us

  • Subscribe to emails

  • Request a return or refund

  • Submit a review

  • Complete a form

  • Otherwise provide information

Automatically Through the Services

We may collect information automatically through:

  • Cookies

  • Pixels

  • Tags

  • Local storage

  • Analytics tools

  • Server logs

  • Advertising technologies

  • Similar tracking technologies

From Shopify

Shopify may provide information needed to:

  • Operate the online store

  • Process orders

  • Manage customer accounts

  • Detect fraud

  • Provide analytics

  • Support marketing

  • Manage privacy requests

  • Improve ecommerce services

From Payment Providers

Payment processors may provide information such as:

  • Payment confirmation

  • Payment failure

  • Transaction reference

  • Fraud-risk information

  • Chargeback or dispute information

From Shipping and Fulfillment Providers

This may include:

  • Tracking information

  • Delivery status

  • Address verification

  • Delivery exceptions

  • Returned-package information

  • Proof of delivery

  • Carrier claim information

From Marketing and Analytics Partners

Where permitted, we may receive information concerning:

  • Advertising interactions

  • Campaign performance

  • Referral activity

  • Audience or device information

  • Website engagement

From Other Third Parties

We may receive information from:

  • Fraud-prevention providers

  • Security providers

  • Customer-support platforms

  • Review platforms

  • Social-media platforms

  • Business partners

  • Publicly available sources

  • Authorized representatives

6. How We Use Personal Information

We may use personal information for the purposes described below.

Providing and Fulfilling the Services

We may use information to:

  • Receive and review orders

  • Process payments

  • Confirm transactions

  • Arrange fulfillment

  • Ship products

  • Provide tracking information

  • Deliver products

  • Process returns, exchanges, cancellations, and refunds

  • Maintain customer accounts

  • Provide order history

  • Respond to customer questions

  • Provide requested products and services

Customer Support and Communications

We may use information to:

  • Respond to inquiries

  • Investigate order issues

  • Handle complaints

  • Verify damaged or incorrect products

  • Communicate about delays

  • Provide policy information

  • Send transactional notices

  • Maintain records of customer communications

Personalizing and Improving the Services

We may use information to:

  • Remember customer preferences

  • Recommend related products

  • Improve navigation

  • Understand product interest

  • Develop new features

  • Improve website design

  • Evaluate store performance

  • Diagnose technical issues

Marketing and Advertising

Where permitted by law, we may use information to:

  • Send promotional emails

  • Show advertisements

  • Measure campaign performance

  • Create advertising audiences

  • Recommend products

  • Provide interest-based or targeted advertising

  • Understand whether advertisements lead to purchases

You may unsubscribe from promotional emails using the unsubscribe link included in those communications.

Even after opting out of promotional communications, you may still receive non-promotional communications concerning orders, accounts, security, policies, or customer support.

Security and Fraud Prevention

We may use information to:

  • Verify transactions

  • Authenticate accounts

  • Detect suspicious activity

  • Prevent payment fraud

  • Investigate chargebacks

  • Protect customers

  • Protect the website

  • Enforce our policies

  • Prevent abuse of returns, refunds, reviews, promotions, or accounts

Legal and Compliance Purposes

We may use information to:

  • Comply with applicable laws

  • Maintain tax and accounting records

  • Respond to valid legal requests

  • Cooperate with regulators or law enforcement

  • Resolve disputes

  • Establish, exercise, or defend legal claims

  • Enforce agreements and policies

  • Investigate potential violations

Business Operations

We may use information to:

  • Conduct internal reporting

  • Manage suppliers and fulfillment providers

  • Evaluate business performance

  • Conduct audits

  • Maintain records

  • Complete corporate transactions

  • Protect business assets

7. Legal Grounds for Processing

Where privacy law requires a legal basis for processing personal information, we may rely on one or more of the following:

  • Performance of a contract with you

  • Taking steps at your request before entering a contract

  • Compliance with a legal obligation

  • Our legitimate business interests

  • Your consent

  • Protection of legal rights

  • Prevention of fraud or security threats

  • Another lawful basis permitted by applicable law

Our legitimate interests may include:

  • Operating the online store

  • Fulfilling orders

  • Providing customer support

  • Improving the Services

  • Preventing fraud

  • Securing our systems

  • Marketing our products

  • Managing legal claims

Where we rely on consent, you may withdraw that consent, subject to applicable law. Withdrawal does not affect processing lawfully completed before consent was withdrawn.

8. Cookies and Similar Technologies

BoardBloom, Shopify, and our service providers may use cookies and similar technologies.

These technologies may help us:

  • Operate essential website functions

  • Maintain shopping carts

  • Remember preferences

  • Keep users signed in

  • Prevent fraud

  • Analyze website traffic

  • Measure advertising

  • Improve the Services

  • Provide personalized content or advertising

Cookies may include:

Essential Cookies

These are used for functions such as:

  • Checkout

  • Security

  • Account access

  • Shopping-cart operation

  • Fraud prevention

  • Network management

Disabling essential cookies may prevent parts of the website from functioning.

Functional Cookies

These may remember:

  • Language

  • Region

  • Display preferences

  • Previously selected settings

Analytics Cookies

These may help us understand:

  • Visitor numbers

  • Popular pages

  • Website performance

  • Navigation patterns

  • Technical errors

Advertising Cookies

These may be used to:

  • Measure advertisements

  • Limit repeated advertisements

  • Understand campaign performance

  • Provide more relevant advertising

  • Recognize activity across websites or services

Depending on your location, consent may be required before certain non-essential cookies are used.

You may be able to manage your choices using:

  • Our cookie banner or privacy preference tool

  • Browser settings

  • Device settings

  • Advertising-industry opt-out tools

  • Global Privacy Control

Blocking cookies may affect website performance or functionality.

9. Sale, Sharing, and Targeted Advertising

BoardBloom does not sell personal information for money in the ordinary meaning of “sell.”

However, disclosures of device identifiers, cookie information, browsing activity, or advertising data to certain advertising, analytics, or social-media partners may be considered a:

  • Sale

  • Sharing

  • Disclosure for cross-context behavioral advertising

  • Processing for targeted advertising

under certain U.S. state privacy laws.

Depending on your residence and applicable law, you may have the right to opt out of these activities.

You may submit an opt-out request by:

  • Using an available privacy preference or cookie tool on our website

  • Using a supported Global Privacy Control signal

  • Contacting naoamobuaoosm@gmail.com with the subject line “Privacy Choices Request”

Additional information is available on our Your Privacy Choices page.

10. Global Privacy Control and Do Not Track

Where required by applicable law, BoardBloom will treat a valid Global Privacy Control signal as an opt-out request for applicable sale, sharing, or targeted-advertising activity for the browser or device transmitting the signal.

A signal may not automatically apply to:

  • Other browsers

  • Other devices

  • Logged-in accounts

  • Offline records

  • Information that cannot reasonably be connected to the signal

You may need to submit an additional request if you want the choice applied more broadly.

Other browser “Do Not Track” signals may not be recognized where no applicable legal or technical standard requires recognition.

11. How We Disclose Personal Information

We may disclose personal information to third parties for the purposes described in this Privacy Policy.

Shopify

We disclose information to Shopify to host and operate the store, process transactions, maintain accounts, provide analytics, prevent fraud, support advertising, and provide related ecommerce functionality.

Payment Processors and Financial Institutions

We may disclose information to:

  • Payment processors

  • Banks

  • Credit-card networks

  • Digital-wallet providers

  • Fraud-prevention services

These parties may independently process information under their own privacy policies.

Suppliers, Warehouses, and Fulfillment Providers

We may disclose information needed to:

  • Confirm inventory

  • Fulfill orders

  • Package products

  • Arrange shipment

  • Process returns

  • Resolve order issues

This information may include the customer’s name, delivery address, contact information, products ordered, and order number.

Shipping Carriers

We may disclose information to postal services, couriers, freight providers, and local delivery partners to deliver orders and provide tracking.

Technology and Service Providers

We may use providers for:

  • Website hosting

  • Cloud storage

  • Email delivery

  • Customer support

  • Analytics

  • Cybersecurity

  • Fraud detection

  • Accounting

  • Data management

  • Review collection

Advertising and Marketing Partners

Where permitted, we may disclose information to advertising, analytics, search, or social-media partners to:

  • Measure advertising

  • Display relevant promotions

  • Evaluate marketing campaigns

  • Understand customer activity

Professional Advisers

We may disclose information to:

  • Lawyers

  • Accountants

  • Auditors

  • Insurers

  • Consultants

where reasonably necessary for professional services.

Legal and Government Authorities

We may disclose information when reasonably necessary to:

  • Comply with law

  • Respond to lawful requests

  • Enforce our policies

  • Protect rights or safety

  • Investigate fraud

  • Defend legal claims

Corporate Transactions

Information may be disclosed in connection with:

  • A merger

  • Acquisition

  • Financing

  • Reorganization

  • Sale of assets

  • Bankruptcy

  • Transfer of business ownership

Where appropriate, the recipient will be required to handle information consistently with applicable law.

At Your Direction or With Your Consent

We may disclose information when you:

  • Request a shipment

  • Use a third-party integration

  • Authorize an agent

  • Consent to a disclosure

  • Direct us to provide information to another party

12. Relationship With Shopify

The BoardBloom store is hosted by Shopify.

Shopify collects and processes personal information to provide, secure, support, and improve its ecommerce platform and related services.

Information submitted through BoardBloom may be transmitted to Shopify and its service providers, including providers located outside your country.

In some circumstances:

  • Shopify processes personal information on BoardBloom’s behalf

  • Shopify independently determines certain processing purposes

  • Shopify may combine information from interactions with multiple Shopify merchants or services

  • Shopify may provide enhanced fraud, analytics, advertising, or customer features

Shopify’s independent collection and use of information are governed by its own privacy notices.

For information about Shopify’s privacy practices and privacy controls, visit Shopify’s Consumer Privacy Policy and Shopify Privacy Portal.

A request involving information controlled independently by Shopify may need to be submitted directly to Shopify.

13. Third-Party Websites and Services

The Services may link to websites, applications, social-media pages, payment services, or other platforms operated by third parties.

BoardBloom does not control the independent privacy, security, content, or data practices of those third parties.

Before providing information to a third-party service, you should review its:

  • Privacy policy

  • Cookie policy

  • Terms of use

  • Security practices

The presence of a link does not necessarily mean that BoardBloom endorses the third party.

Information posted in public or semi-public areas, such as public reviews or social-media pages, may be visible and reused by others.

14. International Data Transfers

BoardBloom, Shopify, and our service providers may process personal information in countries other than the country in which you reside.

Those countries may have privacy laws that differ from the laws in your jurisdiction.

Where required by applicable law, international transfers may rely on safeguards such as:

  • Standard contractual clauses

  • Data protection agreements

  • Adequacy decisions

  • Contractual commitments

  • Other legally recognized transfer mechanisms

No international transfer method can eliminate every privacy or security risk.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.

Retention periods may depend on:

  • Whether you maintain an account

  • Whether an order remains active

  • Return or refund periods

  • Warranty or product-claim periods

  • Tax and accounting obligations

  • Fraud-prevention requirements

  • Chargeback periods

  • Dispute-resolution requirements

  • Legal claims

  • Consent status

  • Technical backup schedules

Examples of information we may need to retain include:

  • Order records

  • Payment confirmation records

  • Shipping records

  • Customer-support communications

  • Tax records

  • Fraud-prevention records

  • Policy acceptance records

When information is no longer reasonably necessary, we may:

  • Delete it

  • Anonymize it

  • Aggregate it

  • Restrict its use

  • Retain it only where legally required

Backup copies may remain temporarily until they are overwritten or securely deleted according to ordinary system processes.

16. Data Security

BoardBloom and its service providers use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards may include:

  • Access controls

  • Authentication

  • Encryption during transmission where supported

  • Fraud monitoring

  • Secure payment processing

  • Software and system maintenance

  • Limited employee or contractor access

  • Security monitoring

  • Record-retention controls

However, no internet transmission, website, email system, database, or storage method can be guaranteed to be completely secure.

You are responsible for:

  • Protecting your account password

  • Using a secure device and network

  • Avoiding suspicious links

  • Keeping your contact information current

  • Not sharing access credentials

Notify us promptly if you believe your account or personal information has been compromised.

17. Data Breaches and Security Incidents

If we become aware of a security incident involving personal information, we may:

  • Investigate the incident

  • Take steps to contain or remediate it

  • Cooperate with Shopify and relevant providers

  • Preserve evidence

  • Notify affected individuals

  • Notify government or regulatory authorities

Notifications will be provided where and when required by applicable law.

18. Children’s Privacy

The BoardBloom online store is intended for use by adults and is not directed toward children.

Although we sell educational, classroom, school, art, and craft products that may be used by children, purchases and account activity should be completed by an adult or with appropriate adult authorization.

We do not knowingly collect personal information directly from children below the age at which parental consent is legally required.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising as those terms are defined under applicable law.

If you are a parent or legal guardian and believe that a child provided personal information without appropriate consent, contact:

naoamobuaoosm@gmail.com

Use the subject line:

Child Privacy Request

We may request information reasonably necessary to verify the request and your authority to act for the child.

19. Your Privacy Rights

Depending on where you reside and the privacy laws applicable to BoardBloom, you may have some or all of the rights described below.

These rights are not absolute and may be subject to exceptions.

Right to Know or Access

You may have the right to request information about:

  • Whether we process your personal information

  • Categories of information collected

  • Sources of information

  • Purposes for processing

  • Categories of recipients

  • Specific information maintained about you

Right to Correction

You may have the right to request correction of inaccurate personal information.

Right to Deletion

You may have the right to request deletion of eligible personal information.

We may retain information where permitted or required for purposes such as:

  • Completing transactions

  • Maintaining tax records

  • Preventing fraud

  • Resolving disputes

  • Enforcing agreements

  • Complying with law

  • Protecting security

Right to Data Portability

You may have the right to receive certain personal information in a portable and usable format.

Right to Opt Out

You may have the right to opt out of:

  • Sale of personal information

  • Sharing for cross-context behavioral advertising

  • Targeted advertising

  • Certain profiling activities

Right to Restrict or Limit Processing

You may have the right to restrict certain processing or limit certain uses of sensitive personal information.

Right to Withdraw Consent

Where processing is based on consent, you may have the right to withdraw that consent.

Right to Object

In certain jurisdictions, you may object to processing based on legitimate interests or direct marketing.

Right to Appeal

You may have the right to appeal a decision concerning a privacy request.

Right to Non-Discrimination

BoardBloom will not unlawfully discriminate or retaliate against you because you exercise an applicable privacy right.

20. How to Exercise Your Rights

To submit a privacy request, email:

naoamobuaoosm@gmail.com

Use the subject line:

Privacy Rights Request

Include:

  • Your full name

  • Email address associated with your account or order

  • State or country of residence

  • The right you wish to exercise

  • Relevant order or account information, where needed

Do not include passwords, full payment-card information, or unnecessary sensitive information.

We will review your request and respond within the timeframe required by applicable law.

A request may be denied or limited where:

  • The requested right does not apply

  • An exemption applies

  • The request cannot be verified

  • Compliance would adversely affect another person’s rights

  • Information must be retained by law

  • The request is fraudulent, excessive, or manifestly unfounded

  • Another legally permitted reason applies

Where required, we will explain the reason for a denial and any available appeal process.

21. Identity Verification

Before fulfilling certain privacy requests, we may verify your identity.

Verification may require information that reasonably matches records maintained by BoardBloom, such as:

  • Name

  • Email address

  • Order number

  • Shipping address

  • Transaction details

The level of verification may depend on:

  • The sensitivity of the information

  • The type of request

  • The risk of unauthorized disclosure or deletion

  • Applicable law

If we cannot verify the request with sufficient confidence, we may be unable to complete it.

22. Authorized Agents

Where permitted, an authorized agent may submit a request on your behalf.

We may require:

  • Proof of written authorization

  • Verification of your identity

  • Confirmation that you authorized the request

  • Evidence of the agent’s legal authority

We may decline an agent’s request if sufficient authority cannot be verified.

23. Appeals and Complaints

To appeal a privacy-request decision, email:

naoamobuaoosm@gmail.com

Use the subject line:

Privacy Request Appeal

Include:

  • Your name

  • Email used for the original request

  • Approximate date of the request

  • Reason for the appeal

Depending on your residence, you may also have the right to submit a complaint to:

  • A state attorney general

  • A data protection authority

  • A privacy regulator

  • Another competent government authority

Contacting us first may allow us to investigate and resolve the issue more efficiently, but it does not limit your legal rights.

24. Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe link contained in the email.

You may also contact us to update your marketing preferences.

Opting out of marketing does not prevent us from sending transactional or service-related messages, including:

  • Order confirmations

  • Shipping updates

  • Return or refund notices

  • Security notices

  • Policy updates

  • Customer-support responses

It may take a reasonable period for marketing preferences to be applied to all systems.

25. Automated Decision-Making and Profiling

BoardBloom and its service providers may use automated tools for limited purposes such as:

  • Fraud-risk scoring

  • Payment verification

  • Website personalization

  • Product recommendations

  • Advertising measurement

  • Security monitoring

BoardBloom does not ordinarily make decisions producing legal or similarly significant effects solely through automated processing unless disclosed and permitted by law.

Where applicable law provides rights concerning automated decision-making or profiling, you may contact us to exercise those rights.

26. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • Legal requirements

  • Business practices

  • Products or services

  • Technology

  • Shopify features

  • Service providers

  • Security practices

  • Data-processing activities

The revised version will be posted on this page with a new “Last Updated” date.

Where required, we may provide additional notice or request consent.

Changes generally apply from the date of publication unless applicable law requires otherwise.

27. Relationship to Other Policies

This Privacy Policy should be read together with:

  • Terms of Service

  • Your Privacy Choices

  • Shipping & Delivery Policy

  • Return & Refund Policy

  • Contact and Business Information

  • Legal Notice

  • Cookie or consent notices displayed on the website

Product, payment, shipping, and return policies may describe additional information collected for those processes.

28. Contact BoardBloom

For questions about this Privacy Policy, our privacy practices, or your privacy rights, contact:

BoardBloom
Email: naoamobuaoosm@gmail.com
Website: https://boardbloom.us
Business Type: Online Retail Store
Main Category: Education, Crafts & Presentation Supplies

Recommended email subject lines:

  • Privacy Rights Request

  • Privacy Choices Request

  • Privacy Request Appeal

  • Child Privacy Request

We generally respond to ordinary support messages within 1–2 business days, Monday through Friday.

Privacy-right requests may require additional time for identity verification, legal review, and processing, and will be handled within the timeframe required by applicable law.