Privacy policy

Privacy Policy

1. Who We Are

This Privacy Policy explains how Purebloom collects, uses and protects personal data when you visit purebloom.care, place an order, create an account, subscribe to marketing or contact us.

The data controller is:

Company name: IYC PC

Address: Ionos Dragoumi 5, 546 24 Thessaloniki, Greece

Email: support@purebloom.care

2. Personal Data We Collect

Depending on how you use our website, we may collect:

Information You Provide

your name and surname;
email address and telephone number;
billing and delivery address;
account and login details;
products ordered and order history;
customer-service communications;
return, exchange and refund information;
reviews or other content you submit;
newsletter and marketing preferences.

Payment Information

Payment providers process the information required to complete your transaction.

Purebloom may receive transaction references, payment status and limited payment details, but we do not store your complete payment card number.

Information Collected Automatically

When you browse our website, we may collect:

IP address;
browser and device type;
operating system and language;
approximate location;
referring website;
pages and products viewed;
searches, clicks and other website interactions;
cookie identifiers and similar technical data.

Information from Service Providers

We may receive information from Shopify, payment providers, courier companies, analytics providers, advertising platforms and social media services where you interact with our store or advertisements.

3. How and Why We Use Your Data

We process personal data for the following purposes and legal bases.

To Perform Our Contract with You

We use your information to:

process and fulfil orders;
process payments;
arrange delivery;
provide order confirmations and updates;
manage customer accounts;
handle cancellations, returns, exchanges and refunds;
respond to customer-service requests.

To Meet Legal Obligations

We process and retain information where necessary for:

tax and accounting records;
consumer-protection requirements;
fraud prevention;
product-safety obligations;
responding to lawful requests from public authorities;
establishing or defending legal claims.

For Our Legitimate Interests

Where your rights do not override our interests, we may use information to:

operate, secure and improve our website;
prevent fraud, misuse and unauthorised transactions;
understand the general performance of our store;
improve our products and customer service;
maintain appropriate business records.

With Your Consent

Where consent is required, we may use your data to:

send newsletters and promotional messages;
use optional analytics cookies;
personalise advertising;
measure marketing performance.

You may withdraw your consent at any time.

Some information is necessary to process an order. If you do not provide the required information, we may be unable to complete your purchase or arrange delivery.

4. Marketing Communications

We send marketing emails only where you have subscribed or where otherwise permitted by applicable law.

You can unsubscribe at any time by:

selecting the unsubscribe link in a marketing email;
updating your preferences, where available;
emailing support@purebloom.care.

You may still receive essential communications concerning existing orders, payments, deliveries, returns or account security.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate the store, remember your preferences, maintain your shopping basket, prevent fraud and understand website performance.

Essential cookies may be used because they are necessary for the website, checkout and security functions.

Optional analytics, personalisation and advertising cookies are used only after you have provided consent where required by law.

You can review or change your choices through the Cookie Preferences tool on our website. You may also manage cookies through your browser settings, although disabling essential cookies may affect website functionality.

6. How We Share Personal Data

We may share relevant personal data with:

Shopify and providers supporting our online store;
payment processors and financial institutions;
courier, delivery and logistics companies;
email, newsletter and customer-service providers;
website hosting, IT, cybersecurity and fraud-prevention providers;
analytics and advertising providers, subject to your cookie choices;
accountants, legal advisers, insurers and other professional advisers;
public authorities where disclosure is required by law;
a purchaser or successor in connection with a genuine sale or restructuring of the business.

These recipients receive only the information reasonably required for their role and may act as our processors or as independent data controllers under their own privacy policies.

We do not disclose personal data to third parties for unrelated purposes.

7. Shopify and International Transfers

Our online store is hosted and supported by Shopify.

Shopify and some of our other service providers may process information outside the European Economic Area (EEA).

Where personal data is transferred internationally, we rely on appropriate safeguards recognised by applicable data-protection law, such as:

an adequacy decision issued by the European Commission;
Standard Contractual Clauses;
another legally recognised transfer mechanism.

You may contact us for more information about the safeguards relevant to your data.

8. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected.

Retention periods depend on:

the duration of our relationship with you;
tax, accounting and other legal requirements;
the time needed to handle complaints or disputes;
fraud-prevention and security requirements;
whether you continue to receive marketing communications.

Order and invoice records may be retained for the period required by applicable tax and accounting law.

Marketing information is normally retained until you unsubscribe or withdraw consent, although we may keep limited information recording your opt-out request.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, misuse or disclosure.

These measures may include secure connections, access restrictions, trusted payment providers, account controls and internal security procedures.

No internet transmission or storage system can be guaranteed to be completely secure.

10. Your Data-Protection Rights

Subject to applicable legal conditions, you may have the right to:

request access to your personal data;
correct inaccurate or incomplete information;
request deletion of your data;
request restriction of processing;
object to processing based on legitimate interests;
object to direct marketing at any time;
receive certain data in a portable format;
withdraw consent at any time;
lodge a complaint with a supervisory authority.

To exercise your rights, email support@purebloom.care.

We may request additional information to verify your identity. We will respond within the period required by applicable law.

Certain rights may be limited where we must retain or process information to comply with a legal obligation, complete a contract or establish or defend legal claims.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority, or with the data-protection supervisory authority in your own country of residence.

11. Children’s Privacy

Our online store is intended for adults and is not designed for purchases by children under 18.

We do not knowingly collect personal data directly from children. Orders concerning minors must be placed by a parent or legal guardian.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices or legal obligations.

The latest version will be published on this page together with its updated revision date.

13. Contact Us

For questions about this Privacy Policy, your personal data or the exercise of your rights, contact: