This policy explains how Bloom Creative (“we”, “us”) collects, uses, shares and protects personal information when you visit bloomcreates.ca, book a call with us, become a client, or hear from us. Bloom Creative is a sole proprietorship operated by Noah Morris in Ontario, Canada.
1Who we are and how to reach us
Bloom Creative, operated by Noah Morris. Mailing address: 9 John Martin Cres, Millgrove, ON L8B 0Z9, Canada. Email: noah@bloomcreates.ca. Phone: +1 (289) 812-6834.
Noah Morris is accountable for our compliance with this policy and acts as our privacy officer. Send any question or request about your personal information to noah@bloomcreates.ca.
2Information we collect
When you browse the site
- Our site does not set cookies or use your browser’s local storage or session storage to track you.
- We use Cloudflare Web Analytics to count visits. It works without cookies or browser storage and does not identify you. It records information such as the page visited, the site that referred you, your browser and device type, and your country.
- Our website host (Netlify) and our network provider (Cloudflare) process technical information, such as your IP address and browser details, to deliver the site and protect it from abuse. We do not store IP addresses ourselves.
Links in our emails
- Links in emails we send may include a short reference code in the web address (for example “?r=abc123”) that identifies the business we emailed.
- When you open the site from such a link, the site records that reference together with a small set of actions: viewing the guide, downloading its PDF, viewing pricing, and clicking Book a call. Each record also holds the page, any campaign tags in the link (such as utm_source) and the time. These records are kept in our own customer relationship system.
- The reference travels only in the web address; nothing is stored on your device. If you would rather it was not recorded, remove it from the address, or ask us to delete the records.
When you book a call
- Our booking calendar is provided by Cal.com. When you book, you give us your name, business name, email address and phone number and, if you choose, your website or Google Business Profile link and the email addresses of any guests. Cal.com also records the time you chose, your time zone and, if you arrived from one of our emails, the reference code described above.
- The calendar runs inside a frame from Cal.com. Within that frame Cal.com sets its own cookies and browser storage for security, for your preferences and to hold the time you select, and it sends error reports to its error-monitoring service. These belong to Cal.com and are used to make the booking work; Cal.com’s privacy policy describes them. Our page loads the calendar only when you scroll near it.
Calls, meetings and messages
- Our calls take place on Google Meet. We record and transcribe sales calls so that we keep accurate notes. We tell you at the start of the call, and you can ask us not to record.
- When you call, text or email us, we keep your messages and the details you send.
Videos
- Videos on our site are served from our own media storage with Cloudflare. Playing them does not involve third-party tracking.
Business contact information we use for outreach
- To contact businesses that may benefit from our services, we collect business contact information from publicly available sources: open business directory data, businesses’ own websites, and their public social media profiles.
- This can include a business’s name, address, phone number, website, published email address and social media handles, and the name and role of an owner or manager where the business publishes them.
- We use this information to contact the business about our services by email, phone or social media message.
If you become a client
- We collect what we need to set up and run your services and to bill you, such as your contact and billing details, the access you grant us, the files you send, and payment records.
- Information we handle on your behalf about your own customers is governed by our service agreement with you, not by this policy.
3How we use it
- To show you the site and keep it secure and working.
- To understand, in aggregate, how the site is used.
- To see which businesses we have contacted have looked at our guide or pricing, so that our follow-up is relevant.
- To arrange and hold calls, to prepare the free first draft of a website for your business from your public website and Google Business Profile, and to send reminders.
- To contact businesses about our services.
- To provide our services to clients, to bill them, and to meet our legal, tax and accounting obligations.
We do not sell personal information. We do not use it for targeted advertising, and we do not share it with anyone for their own marketing. We do not make decisions about anyone by automated means alone.
4Consent and legal bases
Canada. By booking a call, contacting us or becoming a client, you consent to our use of your information for the purposes above. When we email a business at an address it has published, where the business has not said it does not want unsolicited messages and our message relates to its business, we rely on implied consent under Canada’s Anti-Spam Legislation. You can withdraw consent at any time, subject to legal or contractual limits, and we will tell you what that means for any service.
United Kingdom and European Union. We rely on our legitimate interests to run and secure the site, to measure it in aggregate, to keep records of interest from businesses we have contacted, to contact businesses about our services and to record sales calls for our notes; you can object to any of these. We rely on contract (or steps before one) to arrange calls and provide services, on legal obligation to keep tax and accounting records, and on consent where we ask for it.
6Storage outside Canada
Some of our service providers store or process information outside Canada, mainly in the United States. While it is there, it is subject to the laws of that country and may be accessible to its courts and authorities.
For people in the United Kingdom and the European Union: Canada is recognised as providing adequate protection for commercial organisations, and transfers to providers in other countries rely on the providers’ contractual safeguards, such as standard contractual clauses.
7How long we keep it
- Prospects and bookings: 2 years after our last contact, unless you become a client.
- Call recordings and transcripts: 12 months.
- Free first drafts of a website that are not taken up: deleted after 90 days.
- Clients: 7 years after the account ends, to meet tax and accounting requirements.
- Requests not to be contacted: kept for as long as needed to honour them, with only the details needed to do so.
- Analytics: kept in aggregate form, which does not identify you.
When information is no longer needed, we delete it or make it anonymous.
8How we protect it
Access to personal information is limited to the people who need it for the purposes above. Our accounts are protected with strong, unique passwords and two-factor authentication, information travels over encrypted connections, and we use established providers with their own security programmes. No method of storage or transmission is completely secure.
If a breach of security involving your personal information creates a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada, and any other authority as the law requires.
9Your rights and choices
- You can ask to see the personal information we hold about you, to correct it, or to have it deleted where we are not required to keep it.
- You can withdraw your consent, and you can tell us to stop contacting you at any time.
- Email your request to noah@bloomcreates.ca. We may need to confirm your identity, and we respond within 30 days.
Canada. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.
United States. Depending on your state, you may have rights to know what we hold, to access, correct or delete it, and to opt out of its sale or its use for targeted advertising. We do not sell personal information or use it for targeted advertising. Our site does not track you across other sites, so browser signals such as Global Privacy Control do not change what our site records; Cal.com’s calendar honours them.
United Kingdom and European Union. You also have rights to restrict or object to how we use your information, including for direct marketing, and to receive it in a portable form. You can complain to the Information Commissioner’s Office in the UK or to your local data protection authority.
10Emails and messages from us
Every email we send identifies Bloom Creative and our mailing address and tells you how to stop further emails. Replying “stop” works. We act on requests to stop within 10 business days.
11Children
Our site and services are for businesses. They are not directed at children, and we do not knowingly collect personal information from anyone under 16.
12Other websites
Our site links to and embeds services run by others, such as Cal.com, Google and Instagram. Their own privacy policies apply to what they collect.
13Changes to this policy
We will post any changes on this page with a new date. If a change is significant, we will take reasonable steps to let affected people know.
14Contact
Bloom Creative, 9 John Martin Cres, Millgrove, ON L8B 0Z9, Canada. Email: noah@bloomcreates.ca. Phone: +1 (289) 812-6834.