Privacy Policy

1. Who is responsible for your data

myBloom is a registered operating name of Aleksi Consulting Corp, based at 375 University Ave Ste 3312, Toronto, ON M5G 2J5 in Ontario, Canada. For personal information we collect about our own visitors and clients, we act as the business responsible for that information (the controller). For personal information a client entrusts to us to process on their behalf (for example their customers' leads and bookings), the client is responsible for that information and we act as their service provider (processor); our Data Processing Agreement governs that relationship.

Questions or requests about privacy can be sent to legal@mybloomhq.com.

2. What we collect

We aim to collect only what we need. Depending on how you interact with us, this may include:

• Contact and enquiry details you submit through our forms or popups: name, business name, email, phone, and what you tell us about your goals.
• Account and billing details for clients: business information, plan, and payment references held by our payment processor (we do not store full card numbers).
• Data from connected accounts you authorize, such as Google Business Profile, Search Console, Google Ads, Google Calendar, Gmail, Meta Business, and Meta Ads, limited to what is needed to deliver the Services.
• Client Data that clients or their customers provide through the Services, such as leads, bookings, and contact records.
• Usage and device information collected automatically when you visit our site, such as IP address, browser type, pages viewed, and referring source, some of which comes from cookies (see our Cookie Policy).

3. How we use it

We use personal information to respond to your enquiries; provide, operate, and improve the Services; set up and manage accounts and billing; send service and transactional messages; send marketing messages where you have opted in and you can opt out at any time; keep the Services secure and prevent abuse; and meet our legal and tax obligations.

We do not sell your personal information. Our lawful bases include your consent, performing our contract with you, our legitimate business interests in running and improving the Services, and compliance with law.

4. Cookies and analytics

We use essential cookies to run the site and remember your consent choices. With your consent, we use analytics and functional cookies to understand aggregate usage and improve the site. We ask for consent before setting non-essential cookies, and you can change your choice at any time. See our Cookie Policy for details and controls.

5. When we share information

We share personal information only as needed to run the business, with service providers acting on our behalf under agreements that protect it, and with the platforms needed to deliver the Services. Current categories of providers include:

• Hosting and infrastructure (for example Vercel, Cloudflare).
• Database and authentication (for example Supabase).
• Payments (for example Stripe), which handles card data directly; we do not store full card numbers.
• Email and messaging delivery (for example Resend, and Meta's WhatsApp for messaging you authorize).
• Advertising and marketing platforms you authorize (for example Google and Meta).
• AI providers used to draft content under human review (for example Anthropic).

We may also disclose information where required by law, to protect rights and safety, or in connection with a reorganization or sale of the business. A current list of our sub-processors is available on request.

6. International transfers

Some of our service providers process data outside Canada, including in the United States. Where personal information is transferred outside your region, we rely on appropriate safeguards and contractual protections. Because data may be stored or processed in another country, it can be subject to that country's laws. Contact us for more detail on the safeguards that apply.

7. How long we keep it

We keep personal information for as long as needed to provide the Services and for a reasonable period afterward to meet legal, tax, accounting, and dispute-resolution needs, then delete or anonymize it. For data we process on a client's behalf, we return or delete it on the client's instruction after the engagement ends, except where the law requires us to keep it; backups age out on their normal cycle.

8. How we protect it

We use technical and organizational measures appropriate to the risk, including access controls, tenant isolation, least-privilege credentials, and encryption of sensitive secrets such as access tokens at rest. No system is perfectly secure, but we work to protect your information and to notify affected parties as required if a breach occurs.

9. Your privacy rights

Subject to applicable law, you may ask us to access, correct, update, or delete your personal information, to port it, to withdraw consent, or to stop sending you marketing. To exercise a right, email legal@mybloomhq.com and we will respond within the time the law requires. You also have the right to contact the Office of the Privacy Commissioner of Canada. Where a client is responsible for the data (we act as processor), we will direct your request to that client or assist them in responding.

You can opt out of marketing emails using the unsubscribe link, and of SMS by replying STOP. These choices do not affect service and transactional messages needed to run the Services.

10. Children

Our Services are for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes and contact

We may update this Policy from time to time and will post the updated version here with a new effective date. For questions, requests, or complaints, contact Aleksi Consulting Corp, operating as myBloom at legal@mybloomhq.com, or by mail at 375 University Ave Ste 3312, Toronto, ON M5G 2J5.