Privacy Policy.

About this policy

This policy explains what personal information Bloom Marketing collects through scalewithbloom.co, how we use it, and the choices you have.

Bloom Marketing is a trading name of Bloom Group Limited, a business registered in Nairobi, Kenya. In this policy, "Bloom", "we", "us" and "our" mean that business. We are the data controller for the personal information described here.

This policy applies to visitors to our website and to people who contact us, subscribe to our updates or enquire about our services. It follows the Data Protection Act, 2019 of Kenya and its regulations. Personal information we handle on behalf of clients during a project is covered by our client agreements, not this policy.

Information we collect

We collect only what we need to respond to you and run our website.

Information you give us

• Contact details, such as your name, email address, phone or WhatsApp number, company name and job title, when you fill in a contact form, book a call or email us.
• Details about your business and what you need help with, when you describe a project or enquiry.
• Your email address and preferences, if you subscribe to our newsletter or updates.

Information collected automatically

• Technical details, such as your IP address, browser type, device type and approximate location (city or country).
• How you use the site, such as pages visited, time spent, and how you arrived (for example, from a search engine or social media link).

We do not knowingly collect sensitive personal data, such as health information, religious beliefs or financial account details, through our website. Please do not send us this kind of information.

How we use your information

We use your information for the purposes below, and only where the law allows it.

We will not use your information for direct marketing without your consent. Every marketing email includes an unsubscribe link, and you can also ask us to stop by emailing info@scalewithbloom.co.

We do not sell your personal information, and we do not use it to make automated decisions that have legal or similar effects on you.

Cookies and analytics

Cookies are small files stored on your device when you visit a website. We use them to make our site work and to understand how it is used.

• Essential cookies keep the website running, for example remembering your cookie choices. These are always on.
• Analytics cookies help us see which pages are visited and how people find us. We use Google Analytics for this. These are only set with your consent.
• Marketing cookies, if we use them, help us measure our advertising on platforms such as LinkedIn. These are only set with your consent.

When you first visit, our cookie banner lets you accept or decline non-essential cookies. You can change your choice at any time through your browser settings. Blocking some cookies may affect how the site works.

Who we share it with

We share personal information only with service providers who help us run our business, and only what they need to do their job. These include:

• Our website host and website builder
• Email, newsletter and scheduling tools
• Analytics providers
• Professional advisers, such as accountants and lawyers, under a duty of confidentiality

These providers must protect your information and may only use it on our instructions. We may also disclose information where the law requires it, or to protect our rights, property or safety.

International transfers. Some of our providers store data outside Kenya, for example in the European Union or the United States. When this happens, we take steps to make sure your information is protected to the standard required by Kenyan law, such as using providers with appropriate data protection safeguards.

How long we keep it and how we protect it

We keep personal information only as long as we need it for the purpose we collected it.

• Enquiries that don't lead to work: up to 24 months after our last contact.
• Client records, including contracts and invoices: for as long as the law requires for tax and accounting purposes.
• Newsletter subscribers: until you unsubscribe.
• Analytics data: according to the retention settings of our analytics tool, currently 14 months.

After that, we delete or anonymise it.

We use reasonable technical and organisational measures to protect your information, including secure (HTTPS) connections, password-protected accounts with two-step verification, and limiting access to people who need it. No website or online service is completely secure, so we cannot guarantee absolute security. If a data breach puts your rights at risk, we will notify you and the Office of the Data Protection Commissioner as the law requires.

Your rights

Under Kenya's Data Protection Act, 2019, you have the right to:

• Be informed about how your personal information is used
• Access the personal information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete information that is no longer needed or was collected unlawfully
• Object to our use of your information, including for direct marketing
• Withdraw your consent at any time, where we rely on consent
• Receive your information in a portable format, where applicable

To use any of these rights, email us at info@scalewithbloom.co. We may need to confirm your identity first. We will respond within the time the law requires.

If you are unhappy with how we have handled your information, please contact us first so we can try to fix it. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya. If you are in another country, you may also be able to complain to your local data protection authority.

Other things you should know

Children. Our website and services are for businesses and are not aimed at anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us, and we will delete it.

Links to other websites. Our site may link to other websites and social media pages, such as LinkedIn or Instagram. We are not responsible for their privacy practices, so please read their policies.

Changes to this policy. We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.