Privacy Policy

• Order details , name, email, shipping address, province or territory, items ordered, totals, promotion used and order status. This applies to guest checkout and signed-in orders.
• Account details , if you create an account: your email, password (stored by our sign-in service in protected form, never visible to us), and any name and shipping address you save. Signing in with Google shares your name and email from Google.
• Support correspondence , messages and photographs you send to us.
• Promotion checks , to limit one-time offers to one use, we store protected (hashed) versions of your email and address alongside the order.

We do not collect billing card details. Payment is by Interac e-Transfer through your own bank; we never collect online-banking passwords or credentials.

• Your cart, kept in your browser's local storage so it survives page reloads.
• Your 18+ confirmation , a single timestamp, remembered for 30 days. No birth date is collected.
• If you sign in, a session token that keeps you signed in.
• Your optional-analytics choice and, only if you accepted, a random visit code (see "Optional shopping analytics" below).

These are essential for the site to work. We do not use advertising cookies or third-party tracking pixels.

We count page visits and traffic sources without analytics cookies. A random tab-session code in session storage changes each day in America/Edmonton. The server hashes it with a daily salt and keeps only daily pseudonyms until the daily rollup, then erases those pseudonyms and the salt. Reports are session estimates, not unique people. Browser information is processed transiently for a device category and bot exclusion; we do not store raw IP addresses, browser strings, full referring URLs or query strings. Do Not Track and Global Privacy Control are respected.

Our hosting platform keeps technical logs (such as request times and error reports) to operate and secure the site, and provides us with aggregate visit statistics such as page views, referring sites and device types. We do not use these to identify individual customers. Our own error reporting is designed to exclude names, addresses and payment details.

Only if you choose Accept, we count anonymous shopping steps on our own systems to understand where the shop is hard to use: featured-product and cart-to-product links clicked, which product pages are viewed, when an item is added to the cart, when checkout is reached, which checkout field (by type, such as "postal code") needed correcting, when Place order is pressed, and whether the order was saved or refused (by general reason only).

Each record holds only the step, the page address, the product's catalogue name, a coarse device type (phone, tablet or computer), the time, and a random visit code that changes each visit. We do not record your name, email, address, IP address, browser details, the site you came from, order numbers, cart contents or anything you type. It is not used for advertising and is not shared with advertisers.

Records are deleted automatically after 90 days. Nothing is collected before you accept or after you turn it off. Your choice is remembered in your browser; you can change it here at any time.

We are preparing optional cart reminder emails. They are not active, and we do not send them. Giving your email at checkout, or leaving items in your cart, is not permission to send them.

If we offer them, the optional discount pop-up would let you enter your email and submit a clearly labeled code-request button. A readable disclosure directly beneath the button would explain that requesting the code also signs you up for Bloom Labs offers and cart reminders. Submitting that form would be your affirmative request; typing an email, confirming your age or accepting analytics is not permission, and the 18+ screen never asks for an email. You can decline the pop-up and shop normally. If enabled, we would record your email, the exact disclosure and button wording, their version, the time, source and submission action, plus a random code linking consent to your cart on that device. No such proof is stored yet. Reminders would only start if that cart reaches checkout without an order, would stop as soon as you place the order, and every email would include an unsubscribe link and our mailing address. Existing checkout or order email addresses would never be signed up automatically. You could also withdraw at any time by writing to .

• To process, prepare, ship and support your order
• To send order confirmations and payment instructions
• To manage your account and order history
• To apply promotions fairly and prevent fraud or misuse
• To meet tax, accounting and legal obligations

We share only what is needed with service providers that help us operate: website hosting and database services, sign-in services, email delivery, packaging and fulfillment, shipping carriers, fraud prevention and related operational support. The information needed to fulfill your order , such as your name, shipping address and order contents , is shared with Canadian service providers that perform packaging, fulfillment and shipping.

Some technology providers may process information in other countries where they operate, including the United States, where it may be subject to local law. We do not sell personal information. We may disclose information where required by law.

We keep order and tax records for as long as needed for fulfillment, support and legal and tax record-keeping. Account details are kept while your account is open. You can ask us to delete your account; records we must keep for legal or tax reasons will be retained for the required period.

We use access controls, encrypted connections, server-side validation and restricted administrator access to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

You can ask to access or correct your personal information, withdraw consent where applicable, or ask questions about this policy by writing to . Signed-in customers can update saved details on their account page.

We will update this page when our practices change and revise the date above.