Data Controller Identity
This Privacy Policy applies to all personal data collected and processed through the website www.bloomrakehive.com. The Data Controller responsible for the processing of personal data under this policy is bloomrakehive, accessible via email at report@bloomrakehive.com.

1. Principles of Data Processing
Data is collected and processed in accordance with the Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable European data protection legislation. Personal data is obtained fairly, processed lawfully, and used exclusively for specified, explicit, and legitimate commercial purposes related to the purchase and fulfillment of order requests.

2. Personal Data Collected and Legal Basis
When visitors browse the website, create an account, or place an order for products offered on www.bloomrakehive.com, specific categories of personal data are collected:
Contact and Delivery Details: Full name, billing address, shipping address, and email address. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
 Transaction and Payment Information: Payment card details, transaction amounts, and order reference identifiers. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and Compliance with legal obligations (Art. 6(1)(c) GDPR).
Technical Usage Data: IP address, browser preferences, operational metadata, and site navigation details collected automatically through system logs. Legal basis: Legitimate interest to maintain site stability and operational integrity (Art. 6(1)(f) GDPR).

3. Payment Processing
Payment services on www.bloomrakehive.com are executed through a external, secure infrastructure provider. Payment data provided during checkout is processed directly by Stripe, acting as an independent data controller for payment processing activities. bloomrakehive does not store or directly handle sensitive credit card or payment card authentication data on its local servers. The processing of financial details by Stripe is subject to Stripe’s independent privacy policies and technical measures.

4. Data Sharing and Third-Party Disclosures
Personal data is disclosed to third parties solely where necessary to complete contract performance or meet statutory requirements:
 Logistics and fulfillment partners responsible for delivering ordered goods to the recipient address.
IT and infrastructure hosting suppliers supporting online operational function.
 Statutory authorities, regulatory bodies, or legal enforcement entities where mandated by applicable law.

Personal data is not sold, rented, or leased to commercial third parties for external marketing purposes.

5. International Data Transfers
Where personal data is transferred or accessed outside the European Economic Area (EEA), such transfers are governed by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to maintain a level of protection equivalent to standards inside the EU.

6. Data Retention Period
Personal data is retained only for the duration necessary to fulfill the operational purpose for which it was collected, or as required by mandatory European statutory obligations:
Order and Contract Records: Stored for the duration of the operational transaction and retained for up to 10 years following completion of the purchase, in compliance with mandatory European commercial and tax recordkeeping laws.
 General Enquiries: Email communications via report@bloomrakehive.com are retained for up to 24 months from the date of the last communication, unless a longer retention period is required for ongoing legal claims or transactional disputes.
Technical Logs: Server and security operational logs are retained for a maximum period of 30 days before automated deletion or anonymisation.

Upon expiry of the applicable retention windows, stored personal data is securely deleted or rendered irreversibly anonymous.

7. Data Security Safeguards
Technical and organizational measures are implemented to protect personal data against unauthorized access, loss, alteration, or unlawful processing. Encryption protocols (including TLS/SSL standards) are deployed during electronic transmission of transactional information. While continuous administrative and technical efforts are exerted to safeguard data, standard internet transmissions cannot guarantee absolute technical immunity against all operational risks.

8. Rights of the Data Subject
Pursuant to the GDPR and applicable European privacy legislation, individuals possess the following rights regarding their personal data:
 Right of Access (Art. 15 GDPR): Right to obtain confirmation as to whether personal data concerning them is being processed, and access to that data.
Right to Rectification (Art. 16 GDPR): Right to obtain the correction of inaccurate or incomplete personal information without undue delay.
 Right to Erasure (Art. 17 GDPR): Right to request the deletion of personal data when processing is no longer necessary for original purposes or where consent is withdrawn.
Right to Restriction of Processing (Art. 18 GDPR): Right to request restricted handling of personal data under specific statutory conditions.
 Right to Data Portability (Art. 20 GDPR): Right to receive personal data provided to the controller in a structured, commonly used machine-readable format.
* Right to Object (Art. 21 GDPR): Right to object to processing based on legitimate interests on grounds relating to a particular situation.

To exercise any of these rights, requests must be submitted in writing to report@bloomrakehive.com.

Individuals also maintain the right to lodge a formal complaint with a competent European Data Protection Supervisory Authority if they consider that the processing of their personal data infringes applicable regulations.

9. Policy Amendments
This Privacy Policy may be updated periodically to align with legal developments or operational changes. Any revised version will be published on this page with an updated revision date.

10. Contact Information
For questions or formal queries regarding this Privacy Policy or data protection practices, submit inquiries directly to:
Email: report@bloomrakehive.com
Website: www.bloomrakehive.com