Privacy Policy

Effective November 9, 2026

Bloom handles Client information on behalf of the businesses that use it, to run that business's bookings, messages and payments. We don't sell it, and we don't use it to advertise Bloom. Questions about your own information go to the business you booked with.

1. Our role

Businesses use Bloom to take bookings, keep client records, send messages and take payments. For Client information, the Business decides what is collected and why, and Bloom acts as its service provider, processing the information on the Business's instructions. The Business's own privacy policy also applies. For Business account and staff information, and for visitors to these Bloom pages, Bloom decides how information is used, as described here.

2. Information we process

Client details: name, phone number, email, booking history, upcoming visits, services, notes the Business adds, and the policies and consents the Client agreed to.
Messages: texts and emails sent to Clients and the replies they send back.
Payments: processed by Stripe. Bloom keeps a card's brand, last four digits and expiry date and Stripe's reference numbers, never the full card number or security code.
Staff and Business accounts: staff names, roles, schedules and sign-in records, and a record of the changes each person makes.
Technical information: IP address, browser and device type, and logs, used for security, fraud prevention and fixing problems.

3. How we use it

to show open times, book, change and cancel appointments, and prevent double bookings;
to send confirmations, reminders and replies the Business or Client asked for;
to save cards and process charges and refunds under the Business's policy;
to give the Business staff tools, reports and records of its own activity;
to keep Bloom secure, prevent abuse and meet legal obligations.

We don't sell personal information, and we don't use it to advertise Bloom. We don't use one Business's Client information for another Business.

4. Text messaging

Text messaging opt-in records and consent are not shared with third parties or affiliates for their own marketing or promotional purposes. Clients can reply STOP to stop texts and HELP for help. Message and data rates may apply.

5. Who we share it with

We share information only with the services that run Bloom, under agreements that limit their use of it:

hosting providers that run Bloom's servers and database;
Cloudflare, for network security and email delivery;
Stripe, for card payments;
text messaging carriers and providers, for texts;
Square, only for Businesses that connect it, to show and protect their existing Square bookings.

Advertising measurement, at a Business's request. A Business can ask Bloom to send each new booking to its own website so it can measure its advertising, for example with Google Ads conversion tracking. That message can include booking details and the Client's email address and phone number in the normalized form Google uses for matching. What the Business does with it is covered by the Business's own privacy policy.

We may also disclose information when the law requires it, or to protect people, Bloom or the Business from harm or fraud.

6. This website

This website doesn't use advertising or analytics cookies, and it doesn't ask for or store personal information.

7. How long we keep it

We keep Client information for as long as the Business uses Bloom and needs it, or as the law requires. When a Business leaves Bloom, we provide an export on request and then delete its data, except where we must keep it.

8. Security

Information travels over encrypted connections. Access is limited to people who need it, staff actions are recorded, and payments stay with Stripe. No system is perfectly secure, and we work to fix problems quickly when we find them.

9. Your choices and rights

Depending on where you live, including California, you may have the right to know what information is held about you, to get a copy, and to ask for it to be corrected or deleted. Clients should make these requests to the business they booked with, which can act on them in Bloom or ask us to help. We won't treat you differently for making a request.

10. Children

Bloom isn't directed to children under 13, and we don't knowingly collect their information.

11. Changes

We may update this policy. The date at the top shows the latest version.

Contact

Bloom works by introduction and doesn't run a public help desk. If you found Bloom through a business, contact that business and they'll reach us for you. Businesses that use Bloom can contact us through the channel named in their agreement. Clients with a question about a booking or their information should contact the business they booked with.