SECTION I — PRIVACY POLICY

  1. Introduction

[Brand Name] (“we”, “us”, “our” or “the Brand”) respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, create an account, communicate with us, purchase our products, subscribe to communications, or otherwise interact with our services.

We operate from the State of Kuwait and seek to process personal information in accordance with the laws and regulations applicable to our activities in Kuwait, including, where applicable, the Kuwaiti Electronic Transactions Law No. 20 of 2014, as amended by Decree-Law No. 148 of 2025, applicable consumer-protection legislation, applicable cybersecurity requirements, and the CITRA Data Privacy Protection Regulation No. 26/2024, to the extent that that Regulation applies to us or to any relevant service provider. 

 

Where another mandatory Kuwaiti law or regulatory requirement provides a higher level of protection or imposes a different obligation, that mandatory requirement will prevail.

 

  1. Information We Collect

Depending on how you use our website and services, we may collect:

2.1 Information you provide directly

This may include:

  • Full name;
  • Mobile telephone number;
  • Email address;
  • Delivery address;
  • Billing information;
  • Order details and order history;
  • Special delivery instructions;
  • Gift-recipient information supplied by you;
  • Messages, enquiries, complaints or other communications;
  • Information supplied when requesting a return, refund or replacement;
  • Preferences relating to products or communications.

 

Where you provide information about another person, such as a gift recipient, you are responsible for ensuring that you are entitled to provide that information and that it may lawfully be used for the purpose for which you provide it.

2.2 Payment information

Payments may be processed through third-party payment service providers.

Where payment is processed through an external payment gateway, we generally do not receive or store the customer’s complete payment-card number or security code on our own systems. The payment provider may independently process payment information in accordance with its own terms, privacy practices and applicable regulatory requirements.

We use payment service providers that are authorised or otherwise permitted to provide the relevant payment services, as required by applicable Kuwaiti law.

 

2.3 Technical information

When you visit our website, technical information may be collected automatically, including:

IP address, Browser and device information, Operating system, Website pages viewed, Approximate location information derived from technical data, Date and time of access, Referring website, Cookies and similar technologies, Website performance and security information.

 

  1. How We Use Personal Information

We may use personal information for legitimate business and contractual purposes, including to:

Process and fulfil orders, Confirm payment, Prepare products, Arrange delivery;

Provide delivery instructions to our delivery partner, Contact customers regarding orders, Respond to enquiries and complaints, Process returns, refunds and replacements, Issue invoices and maintain transaction records, Prevent fraud, misuse and unlawful activity, Protect the security of our website and systems, Improve our products, website and customer experience, Maintain appropriate commercial, accounting and legal records, Comply with applicable laws, regulations, court orders and requests from competent authorities, Send marketing communications where legally permitted and, where required, with the customer’s consent.

 

We will not use personal information for purposes materially incompatible with the purpose for which it was collected unless permitted or required by applicable law.

 

  1. Orders and Delivery Partners

4.1 Third-party delivery services

We use independent third-party delivery companies and/or delivery platforms to fulfil deliveries.

In order to complete an order, we may provide the delivery provider with information reasonably necessary to perform the delivery, such as:

Customer name, Recipient name, where different, Telephone number, Delivery address, Delivery instructions, Order reference, Relevant information concerning the nature of the delivery where necessary.

The delivery provider may process this information independently as necessary to perform its services and comply with applicable law.

We do not authorise delivery partners to use customer information for unrelated purposes except where permitted or required by law or separately authorised by the customer.

 

4.2 Responsibility for delivery information

Customers are responsible for providing accurate delivery information and ensuring that the recipient can reasonably receive the order.

Incorrect addresses, unavailable recipients, refusal to accept the order, or unreasonable delays in receiving a perishable product may affect product condition and may affect the availability of remedies where the deterioration was caused after the product was made available for delivery.

Nothing in this section removes any mandatory liability imposed on us by Kuwaiti law.

 

  1. Fresh and Artisanal Production

Our chocolates are artisanal products made fresh in our chocolate kitchen.

Once payment has been successfully received and the order has been accepted, production may begin immediately. This is necessary because our products are prepared specifically for orders and are intended to be delivered fresh.

Because production begins promptly and because the products are food products, we may be unable to stop, reverse or cancel production once preparation has commenced.

This operational practice does not remove or limit any non-waivable consumer rights available under applicable Kuwaiti law, including rights relating to defective, spoiled, expired, unsafe, incorrect or non-conforming products.

 

  1. Cookies and Similar Technologies

We may use cookies and similar technologies to:

 

Operate the website, Maintain shopping-cart functionality, Remember preferences, Improve security, Understand website performance, Analyse usage, Improve our services, Support marketing activities where legally permitted.

You may be able to control cookies through your browser or device settings. Disabling certain cookies may affect website functionality.

 

  1. Sharing Personal Information

We may disclose personal information to carefully selected service providers where reasonably necessary to operate our business, including:

Payment processors, Delivery and logistics providers, Website hosting providers, E-commerce technology providers, IT and cybersecurity providers, Customer-support providers, Analytics providers, Email, SMS or messaging providers, Professional advisers, auditors and insurers, Government authorities, regulators, courts or law-enforcement bodies where legally required or authorised.

We do not sell customers’ personal information as a commercial product.

Where applicable privacy regulations require contractual, technical or organisational safeguards for third-party processing, we seek to implement such safeguards.

 

  1. International Transfers

Some service providers may process or store information outside Kuwait.

Where applicable Kuwaiti privacy requirements require notice, consent, safeguards or other procedures for an international transfer, we will take the measures required by those rules.

The current CITRA Data Privacy Protection Regulation No. 26/2024 requires applicable regulated service providers to address, among other matters, data-processing purposes, security measures and transfers outside Kuwait, and to inform the relevant data subject where required. 

 

  1. Data Security

We use reasonable technical, organisational and administrative safeguards intended to protect personal information against:

Unauthorised access, Unauthorised disclosure, Accidental loss, Destruction, Alteration, Misuse, Unauthorised processing.

 

Where applicable to us or our regulated service providers, we comply with relevant cybersecurity and data-security requirements under Kuwaiti law and applicable CITRA requirements.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Accordingly, while we take reasonable precautions, we cannot guarantee absolute security.

 

  1. Data Breaches

If a personal-data breach occurs, we will assess it and take the notifications, mitigation and remedial steps required by applicable Kuwaiti law and regulations.

Where the CITRA Data Privacy Protection Regulation applies, its requirements concerning security and breach notification will be followed. 

 

  1. Data Retention

We retain personal information only for as long as reasonably necessary for:

Fulfilling orders, Customer service, Returns and refunds, Accounting and financial records, Legal and regulatory compliance, Fraud prevention, Resolving disputes, Enforcing contractual rights, Maintaining appropriate business records.

Different categories of information may therefore be retained for different periods.

Where applicable law requires a particular retention period, the legally required period will apply.

 

  1. Customer Privacy Rights

Subject to applicable law and any lawful exceptions, customers may contact us to request:

 

  • Access to personal information we hold about them;
  • Correction of inaccurate information;
  • Deletion of information where deletion is legally available;
  • Restriction of certain processing where legally available;
  • Withdrawal of consent where processing depends on consent;
  • Information concerning how their personal information is used.
  • Withdrawal of consent does not affect processing that was lawfully carried out before consent was withdrawn, nor does it prevent processing that is required for the performance of an order or by law.

 

A request may require reasonable verification of identity.

 

  1. Marketing Communications

Customers may receive promotional communications where legally permitted.

Where consent is required, marketing communications will be sent only after obtaining the required consent.

Customers may unsubscribe from marketing communications at any time using the available unsubscribe mechanism or by contacting us.

Transactional communications, such as order confirmations, payment confirmations, delivery notifications and important service messages, are not necessarily marketing communications and may continue where reasonably necessary to fulfil an order or provide the service.

 

  1. Children

Our online store is intended for general adult consumers and is not directed specifically at children.

We do not knowingly seek to collect personal information from children in circumstances where applicable law requires parental or guardian involvement.

Contact us at info@bloomskw.com to request any data deletion

 

  1. Third-Party Websites

Our website may contain links to third-party websites, social-media services or other platforms.

We are not responsible for the privacy practices, security or content of third-party websites. Customers should review the applicable third party’s privacy policy before submitting information to it.

 

  1. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The updated version will be published on our website with a revised “Last Updated” date.

Where applicable law requires additional notice or consent, we will provide it.

 

  1. Contact

Privacy enquiries may be sent to:

Email: info@bloomskw.com