Privacy Policy

This Privacy Policy (“Policy”) is issued by BloomX Business Solutions LLP (“BloomX”, “Company”, “we”, “our”, or “us”) and governs the manner in which we collect, process, store, use, disclose, transfer, and protect information obtained through our website, digital platforms, campaigns, applications, communication channels, client engagements, and related services (collectively, the “Services”).

BloomX is committed to maintaining commercially reasonable standards of privacy, confidentiality, and data protection in accordance with applicable laws of India, including but not limited to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and applicable rules framed thereunder, along with internationally recognized privacy and security practices where commercially appropriate.

By accessing, browsing, using, submitting information to, or engaging with our Services, you expressly acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree with this Policy, you must discontinue use of the Services immediately.

Services

Definitions

For the purposes of this Policy:

“Personal Data”

means any data about an individual who is identifiable by or in relation to such data.

“Processing”

includes collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transfer, sharing, analysis, or deletion of data.

“User”

“you”, or “your” means any individual, representative, visitor, customer, vendor, employee, applicant, contractor, or entity interacting with BloomX.

“Services”

means all business, marketing, advertising, branding, consulting, automation, analytics, technology, content, and related services offered by BloomX.

Scope of this Policy

This Policy applies to all information collected by BloomX through:

  • Official websites and landing pages;
  • Social media platforms and campaigns;
  • Client onboarding processes;
  • Advertising and analytics integrations;
  • Communication via email, telephone, messaging applications, or forms;
  • Third-party integrations and software platforms;
  • Vendor, contractor, and recruitment interactions; and
  • Any other lawful business interaction with BloomX.

This Policy does not apply to third-party websites, applications, or services that are not owned or controlled by BloomX, even where links or integrations are provided.

Information we collect

BloomX may collect, receive, generate, process, or store the following categories of information:

A. Personal and Business Information

  • Full name;
  • Business name and designation;
  • Contact information including email address and phone number;
  • Billing address and business address;
  • Payment and invoicing details;
  • Government-issued identifiers where legally required;
  • Client correspondence and support communications;
  • Contractual and transactional information.

B. Technical and Device Information

  • IP address;
  • Browser type and version;
  • Device identifiers;
  • Operating system;
  • Internet service provider details;
  • Geographic location data;
  • Website interaction logs;
  • Referral URLs;
  • Clickstream and browsing behavior.

C. Marketing and Campaign Information

In connection with service delivery, BloomX may process:

  • Advertising account credentials and permissions;
  • Social media account access permissions;
  • Campaign performance metrics;
  • CRM and lead management information;’
  • Brand assets, creative materials, and marketing content;
  • Audience targeting and behavioral analytics data.

D. Automatically Collected Information

We may automatically collect information through:

  • Cookies;
  • Tracking pixels;
  • Web beacons;
  • Analytics tools;
  • Server logs;
  • SDKs and similar technologies.

Legal Basis for Processing

BloomX processes information only where legally permissible, including where processing is:

  • Necessary for performance of a contract;
  • Based on consent provided by the User;
  • Necessary for compliance with legal obligations;
  • Necessary for legitimate business interests pursued by BloomX;
  • Required for fraud prevention, security, risk management, or dispute resolution.

Where consent is required by law, such consent may be withdrawn at any time, subject to legal or contractual limitations.

Purpose of collection and use of information

BloomX may collect and process information for purposes including:

  • Providing, managing, and improving Services;
  • Executing advertising, branding, consulting, and marketing engagements;
  • Managing client relationships and communications;
  • Verifying identity and account access;
  • Conducting analytics, research, and performance monitoring;
  • Enhancing website functionality and user experience;
  • Sending newsletters, updates, marketing communications, and promotional material;
  • Detecting, investigating, preventing, or mitigating fraud, abuse, security threats, or unlawful activity;
  • Maintaining internal records and operational administration;
  • Enforcing contractual rights and legal claims;
  • Complying with applicable laws, regulations, judicial orders, or governmental requests.

BloomX reserves the right to anonymize, aggregate, compile, or de-identify data for lawful business intelligence, analytics, research, benchmarking, and operational improvement purposes.

Cookies and Tracking Technologies

BloomX uses cookies and similar technologies to improve functionality, optimize performance, analyze user behavior, and support advertising initiatives.

These technologies may be used to:

  • Recognize returning users;
  • Store user preferences;
  • Measure website traffic and engagement;
  • Improve content delivery;
  • Facilitate remarketing and advertising campaigns;
  • Analyze conversion metrics and campaign effectiveness.

Users may disable or manage cookies through browser settings. However, certain functionalities of the Services may become unavailable or impaired as a result.

Third-Party Platforms and Integrations

BloomX may utilize or integrate with third-party service providers, platforms, software, and infrastructure providers including, without limitation:

  • Google;
  • Meta Platforms;
  • LinkedIn;
  • Shopify;
  • WordPress;
  • CRM systems;
  • Analytics providers;
  • Cloud hosting providers;
  • Automation and communication tools;
  • Payment gateways;
  • Marketing and advertising platforms.

Such third parties may independently process data pursuant to their own terms and privacy policies. BloomX does not own, operate, or control third-party platforms and shall not be liable for the acts, omissions, policies, breaches, or practices of such third parties.

Users acknowledge that integration with third-party systems may involve cross-platform data sharing and processing.

Sharing and Disclosure of Information

BloomX does not sell personal data in the ordinary course of business.

However, information may be shared, disclosed, transferred, or made accessible in the following circumstances:

  • With employees, consultants, affiliates, contractors, or authorized personnel on a need-to-know basis;
  • With vendors, technology providers, hosting providers, payment processors, and operational partners assisting in service delivery;
  • With advertising, analytics, and integration platforms as required for campaign execution;
  • During mergers, acquisitions, restructuring, financing transactions, or asset transfers;
  • To comply with applicable laws, legal processes, governmental requests, subpoenas, or regulatory obligations;
  • To establish, exercise, or defend legal rights or claims;
  • To prevent fraud, misuse, cybersecurity threats, or unlawful conduct;
  • To protect the rights, property, reputation, operations, personnel, users, or business interests of BloomX.

BloomX reserves the unrestricted right to disclose anonymized, aggregated, statistical, or de-identified information that does not reasonably identify an individual.

International Data Transfers

Users acknowledge and consent that information may be transferred to, processed in, or stored in jurisdictions outside their state or country of residence where BloomX, its affiliates, or service providers maintain operations or infrastructure.

BloomX shall take commercially reasonable measures to ensure that such transfers are undertaken in accordance with applicable legal requirements and reasonable security standards.

Data Retention

BloomX retains information for as long as necessary to:

  • Fulfill the purposes described in this Policy;
  • Provide Services;
  • Comply with legal, tax, accounting, or regulatory obligations;
  • Resolve disputes;
  • Enforce agreements;
  • Protect legal and commercial interests.

Retention periods may vary depending upon the nature of the data, legal requirements, contractual obligations, litigation holds, and operational necessity.

Upon expiration of applicable retention periods, BloomX may delete, anonymize, archive, or securely destroy data at its discretion.

Data Security

BloomX implements commercially reasonable technical, administrative, operational, and organizational safeguards designed to protect information against unauthorized access, misuse, alteration, disclosure, destruction, or loss.

Such measures may include:

  • Access controls;
  • Encryption protocols;
  • Secure cloud infrastructure;
  • Internal confidentiality obligations;
  • Monitoring and risk management systems;
  • Role-based access restrictions.

Notwithstanding the foregoing, no digital transmission, storage system, network, or security mechanism is completely secure. BloomX does not warrant or guarantee absolute security and disclaims liability arising from cyberattacks, unauthorized access, force majeure events, or circumstances beyond its reasonable control.

User Rights

Subject to applicable law, Users may have rights including:

  • The right to access personal data;
  • The right to request correction or updating of inaccurate data;
  • The right to request deletion or erasure of data;
  • The right to withdraw consent;
  • The right to object to certain forms of processing;
  • The right to seek grievance redressal in accordance with applicable law.

BloomX reserves the right to verify identity prior to processing any request and may refuse requests where legally permissible, frivolous, excessive, technically impractical, or prejudicial to the rights or operations of BloomX or third parties.

Marketing Communications

BloomX may send newsletters, marketing communications, promotional materials, event updates, and service-related announcements.

Users may opt out of non-essential marketing communications through unsubscribe mechanisms or by contacting BloomX directly. However, BloomX reserves the right to send essential operational, transactional, legal, administrative, or security-related communications where necessary.

Children’s Privacy

The Services are not directed toward individuals below the age legally permitted under applicable law to provide valid consent for data processing.

BloomX does not knowingly collect personal data from minors without lawful authorization. If BloomX becomes aware that information has been collected in violation of applicable law, such information may be deleted without notice.

Confidentiality of Client Materials

Any business materials, strategies, data, credentials, campaign assets, intellectual property, proprietary information, or confidential documentation shared with BloomX in connection with service delivery shall remain subject to applicable contractual confidentiality obligations, non-disclosure obligations, and intellectual property protections.

Nothing contained in this Policy shall be construed as transferring ownership rights in favor of any User unless expressly agreed in writing.

Limitation of Liability

To the maximum extent permissible under applicable law, BloomX shall not be liable for:

  • Indirect, incidental, consequential, punitive, or special damages;
  • Loss of profits, business, goodwill, reputation, or opportunity;
  • Data breaches or unauthorized access caused by third parties;
  • Failures attributable to internet infrastructure, software providers, hosting providers, telecommunications failures, cyberattacks, or force majeure events;
  • User negligence, credential misuse, or unauthorized sharing of access permissions.

Users acknowledge that use of digital platforms inherently involves certain cybersecurity and operational risks.

Confidentiality of Client Materials

BloomX reserves the unilateral and absolute right to amend, revise, modify, replace, or update this Policy at any time without prior notice.

Updated versions shall become effective immediately upon publication unless otherwise stated. Continued use of the Services following publication constitutes acceptance of the revised Policy.

Users are encouraged to periodically review this Policy.