This Privacy Policy explains how Bloom Social LLC (“Bloom Social,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit bloomsocialbiz.com(the “Site”), submit a contact or signup form, or otherwise interact with us online.

By using the Site, you agree to the practices described below. If you do not agree, please do not use the Site.

1. Who We Are

Bloom Social is a boutique social media marketing agency based in Grand Rapids, Michigan, serving clients nationwide. For purposes of EU/UK data protection law, Bloom Social is the “controller” of personal information collected through the Site. For purposes of the California Consumer Privacy Act, we are the “business.”

Mailing address: PO Box 425, Rockford, MI 49341
Email: hello@bloomsocialbiz.com

2. Information We Collect

2.1 Information you give us

When you fill out a contact form, newsletter signup, landing page form, or otherwise communicate with us, we collect information you choose to provide, which may include:

Name (first and last)
Email address
Company or organization name
Phone number
Any message, comments, or other content you submit

2.2 Information collected automatically

When you visit the Site, our hosting provider and analytics tools automatically collect certain information about your device and visit, including:

IP address and approximate location (city / region level)
Browser type and version, operating system, and device type
Pages visited, referring URL, time spent, and links clicked
Date and time of access
Cookie and similar identifiers (see Section 6)

2.3 Information from third parties

We may receive limited information about you from advertising and analytics partners (such as Google and Meta) when you interact with our ads or visit our Site after seeing one, including event identifiers, click IDs, and aggregated audience data.

2.4 Sensitive information

We do not intentionally collect Social Security numbers, government IDs, financial account credentials, precise geolocation, biometric data, or other categories of “sensitive personal information” through the Site. Please do not submit such information through our forms.

3. How We Use Your Information

We use the information described above to:

Respond to inquiries, schedule strategy calls, and provide the services you request
Send transactional messages (e.g., confirmations, follow-ups)
Send marketing emails, newsletters, and updates if you have signed up or otherwise opted in (you can unsubscribe at any time)
Operate, maintain, secure, and improve the Site
Measure and analyze how visitors use the Site, including which content and pages perform best
Run, measure, and optimize advertising campaigns on Google, Meta, and other ad networks (including retargeting visitors who have previously interacted with the Site)
Detect, prevent, and address fraud, abuse, security incidents, and technical issues
Comply with legal obligations, enforce our terms, and protect our rights, property, and safety and that of others

Legal bases (EU/UK visitors)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) your consent (e.g., for non-essential cookies and marketing emails), which you can withdraw at any time; (b) the performance of a contract with you or to take steps at your request before entering into a contract; (c) our legitimate interests in operating, securing, analyzing, and growing our business, where those interests are not overridden by your rights; and (d) compliance with a legal obligation.

4. How We Share Your Information

We do not sell your personal information for money. We share personal information only in the limited circumstances described below.

4.1 Service providers (“processors”)

We share information with trusted vendors who process it on our behalf, under contracts that limit how they may use it. Our current service providers include:

Vercel Inc. — website hosting, content delivery, and server logs. Privacy policy.
Kit (formerly ConvertKit) — SendGrid Tech, Inc. — storing form submissions, email list management, and sending newsletters and follow-up emails. Privacy policy.
Google LLC — Google Tag Manager, Google Ads, and related measurement tags used to deliver and measure advertising and analytics. Privacy policy.
Meta Platforms, Inc. — the Meta Pixel and Conversions data used to deliver and measure Facebook/Instagram advertising. Privacy policy.

We may add or change service providers from time to time and will update this Policy when the change is material.

4.2 Advertising partners (“sharing” for cross-context behavioral advertising)

When Google Ads and the Meta Pixel are active on the Site, identifiers about your visit (such as cookie IDs, device identifiers, IP address, and page activity) may be transmitted to Google and Meta to deliver targeted ads to you on other sites and platforms. Under California law (CPRA), this activity is considered “sharing” personal information for cross-context behavioral advertising. See Section 7 for how to opt out.

4.3 Legal, safety, and business transfers

We may disclose information when we believe in good faith that disclosure is necessary to (a) comply with applicable law, legal process, or a government request; (b) protect the rights, property, or safety of Bloom Social, our clients, or others; or (c) facilitate a merger, acquisition, financing, sale of assets, bankruptcy, or similar corporate transaction, in which case personal information may be transferred to the successor entity subject to this Policy or an equivalent one.

4.4 With your direction

We may share information when you direct us to (for example, when you ask us to introduce you to a partner) or otherwise have your consent.

5. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, to comply with our legal and tax obligations, to resolve disputes, and to enforce our agreements. Inquiry and form-submission records are typically retained for the duration of our business relationship plus a reasonable period thereafter; email list records are retained until you unsubscribe (and for a short period after that for suppression and audit purposes). Aggregated or de-identified data, which cannot reasonably be associated with you, may be retained indefinitely.

6. Cookies and Similar Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Site, remember preferences, measure traffic, and deliver advertising. Categories used on the Site include:

Strictly necessary — required to load the Site and remember basic preferences. These cannot be turned off in our systems.
Analytics — help us understand how visitors use the Site so we can improve it (e.g., Google Tag Manager / Google measurement tags).
Advertising — used by Google Ads and the Meta Pixel to measure ad performance and show you relevant ads on third-party sites.

You can control cookies through your browser settings (most browsers let you block or delete cookies), and you can opt out of many advertising cookies via optout.aboutads.info and youronlinechoices.eu. Disabling cookies may affect Site functionality.

Do Not Track / Global Privacy Control:Our Site honors the Global Privacy Control (GPC) signal as a valid opt-out of “sale” and “sharing” under California law where technically supported. We do not separately respond to Do Not Track browser signals because no common industry standard for them has been finalized.

7. Your Privacy Rights

7.1 Residents of California (CCPA / CPRA)

Subject to verification and certain exceptions, California residents have the right to:

Know what categories and specific pieces of personal information we have collected about them
Request deletion of personal information we have collected from them
Request correction of inaccurate personal information
Opt out of the “sale” or “sharing” of personal information (we do not sell personal information for money; we do “share” identifiers with advertising partners as described in Section 4.2)
Limit the use of sensitive personal information (we do not use sensitive personal information for purposes that trigger this right)
Not be unlawfully discriminated against for exercising these rights

To submit a request, email hello@bloomsocialbiz.comwith the subject line “California Privacy Request.” You may also use an authorized agent; we will require written proof of the agent’s authority. To opt out of cross-context behavioral advertising, you can (a) send a request to the email above, (b) transmit the Global Privacy Control signal from your browser, and/or (c) opt out via the third-party links in Section 6. We will respond within the timeframes required by law (generally 45 days, extendable once for an additional 45 days).

7.2 Residents of the EU, UK, and other GDPR-aligned jurisdictions

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal information; to portability of certain information; and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with your local supervisory authority. To exercise your rights, email hello@bloomsocialbiz.com.

7.3 All other visitors

Regardless of where you live, you can email us at hello@bloomsocialbiz.com at any time to access, correct, or delete information you have provided through the Site, or to unsubscribe from marketing emails. You can also unsubscribe using the link at the bottom of any marketing email we send.

8. International Data Transfers

Bloom Social is located in the United States, and our service providers may process information in the United States or other countries. If you access the Site from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at hello@bloomsocialbiz.com and we will take steps to delete it.

11. Third-Party Links

The Site may contain links to third-party websites, services, or social media platforms (including LinkedIn, Instagram, and Facebook) that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their privacy policies before providing information to them.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we will provide a more prominent notice (such as a banner on the Site or, where required, an email). Your continued use of the Site after the effective date of an updated Policy constitutes your acceptance of the changes.

13. Contact Us

If you have any questions about this Policy or our privacy practices, or to exercise any of the rights described above, please contact us:

Bloom Social LLC
PO Box 425, Rockford, MI 49341
Email: hello@bloomsocialbiz.com

Questions about how we can help your brand show up better on social? Book a free strategy call.