Free shipping on orders over $100. Two day shipping.
Privacy
This Privacy Policy describes how The Gilded Bloom collects, uses, discloses, retains, and protects personal information when you browse our site, place an order, create an account, contact support, or subscribe to communications.
Privacy questions or requests can be sent to support@thegildedbloom.store.
Last updated July 30, 2026
For purposes of this Privacy Policy, “The Gilded Bloom,” “we,” “us,” and “our” refer to the operator of this storefront. This policy applies to personal information collected through the storefront, checkout, customer account features, support communications, and marketing preferences. Privacy requests may be submitted by emailing support@thegildedbloom.store.
We may collect identifiers and contact information such as name, email address, phone number, billing address, shipping address, account details, order details, customer support messages, marketing preferences and consent records, device and browser information, IP address or a privacy-protective request fingerprint derived from technical data, approximate location derived from technical data, payment status, fraud-prevention signals, and site usage information collected through cookies or similar technologies.
We collect information directly from you, automatically from your device or browser, from payment and checkout providers, from shipping and fulfillment providers, from analytics and security tools, and from service providers that help us operate the storefront.
We use information to operate the storefront, process orders, provide secure checkout, calculate shipping, send order and shipping updates, respond to support requests, maintain customer accounts, improve site performance, prevent fraud or misuse, comply with legal and accounting obligations, enforce policies, and send marketing only where permitted or requested.
Payments are handled through Stripe and related payment infrastructure. We do not store full payment card numbers, magnetic stripe data, or CVC codes on our own storefront systems. If you choose to save payment information through Stripe, we may store Stripe customer and payment-method references plus safe display details such as card brand, last four digits, and expiration month/year.
We may disclose information to service providers and processors that help with hosting, checkout, payments, fraud prevention, customer accounts, order fulfillment, shipping labels, tracking, transactional email, marketing email or SMS if you opt in, analytics, advertising measurement, customer support, accounting, security, and legal compliance. Current or planned providers may include Cloudflare, Supabase, Stripe, Resend, Omnisend, ShipStation, Meta/Facebook advertising tools, analytics tools, and shipping carriers.
We do not sell personal information for money. Some analytics, advertising, or marketing tools may be considered a “sale,” “sharing,” or targeted advertising disclosure under certain state privacy laws. If we use tools that are considered a sale, sharing, targeted advertising, or profiling under applicable privacy laws, we will provide any required opt-out method. Where required, we will also honor legally recognized browser-based opt-out preference signals. We do not knowingly sell or share personal information of children.
Cookies, pixels, and similar technologies may help the cart work, keep the site secure, remember preferences, measure storefront performance, understand visitor behavior, and measure advertising conversions. For example, Meta/Facebook advertising tools may help us understand whether ads lead to product views, cart activity, checkout starts, or purchases. You can adjust browser settings to limit some cookies, but certain checkout, account, security, or cart features may not work without them.
If you request marketing email, we may send a confirmation message before activating the subscription. We keep consent evidence such as the signup source, form and policy version, time, and confirmation state, and we share confirmed subscriber information with our marketing email processor. Every marketing email will include an unsubscribe method. Unsubscribe, complaint, and delivery-suppression records may be retained so we do not send marketing again by mistake. Placing an order, creating an account, or receiving a receipt does not by itself subscribe you to marketing. Transactional messages related to orders, account access, security, shipping, refunds, or support are separate from marketing and may still be sent when needed to serve your account or order. If you opt in to SMS or text marketing, your consent is not a condition of purchase, message and data rates may apply, and you may opt out using the instructions in the message, such as replying STOP where available.
Depending on your state of residence, you may have rights to request access, deletion, correction, portability, to opt out of certain sales, sharing, targeted advertising, or profiling, to limit certain uses of sensitive personal information, to appeal a privacy-rights decision, and to be free from unlawful discrimination for exercising privacy rights. To submit a request, email us at support@thegildedbloom.store. We may need to verify your identity and may deny or limit a request when permitted by law, including when information is needed for order records, tax and accounting records, security, fraud prevention, legal claims, or dispute resolution.
We do not intentionally request sensitive health or medical information. If you voluntarily provide information about skin concerns, sensitivities, reactions, or product experiences in a support request, we use it only to respond to your request, evaluate product safety or quality, maintain appropriate records, and comply with applicable obligations.
We keep information for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer support, business records, legal compliance, analytics, security, fraud prevention, dispute handling, consent history, and durable marketing suppression. We use reasonable administrative, technical, and operational safeguards, but no website, payment system, or transmission method can be guaranteed completely secure.
The storefront is intended for adults and is not directed to children. We do not knowingly collect personal information from children. We may update this policy as our storefront, service providers, or legal requirements change. The updated version will be posted on this page with the updated date.
