Privacy Policy

Our commitment to your privacy.

Privacy Policy — BloomDesignz.com

Effective date: 29.07.2026

1. Who we are

Controller: Kona-Motors Oy
Business ID: 3228470-6
Registered in: Finland
Address: Taulumäentie 51 B 31, 40200 Jyväskylä, Finland
Trade name: BloomDesignz is a trade name of Kona-Motors Oy
Email: info@bloomdesignz.com

This policy covers the online store at bloomdesignz.com and our order chat.

2. What data we process

Only data needed to take and fulfill orders, provide support, and comply with law.

Identification and contact: name, postal address, phone number, email.
Order and delivery: order contents, proof approvals, delivery method and tracking references.
Technical logs: IP address, device and browser metadata, timestamps, security events.
Cookies: functional/necessary cookies only. No analytics or advertising cookies.
Design files: proofs and production assets linked to your order.
Product reviews: content of your review and your rating. Reviews are published anonymously, but only verified buyers can leave a review.
BloomDesigner data:
- Email address (for one-time login, if used).
- Inputs you provide (e.g., chosen number) and any reference images/materials you upload.
- Generated draft previews and session identifiers/logs (for service delivery, security, and troubleshooting).
- If used in an event/shared-screen environment, your preview may be displayed publicly on a screen.

We do not intentionally collect special categories of personal data. Do not upload sensitive personal data in chat or design materials.

3. Sources

You, when placing an order or contacting us.
Our payment provider (limited payment status data; we do not see full card details).
Our delivery partner (delivery and tracking data).

Order intake and fulfillment (Art. 6(1)(b)): proofs, delivery details, production and shipping, support.
Legal obligations (Art. 6(1)(c)): accounting, consumer law, tax.
Legitimate interests (Art. 6(1)(f)): service security and logs, abuse prevention, handling claims and disputes, archiving design files for re-orders and quality documentation.
Consent (Art. 6(1)(a)) where required, e.g., if showcasing a design that contains personal data.
Product reviews (Art. 6(1)(a) Consent & 6(1)(f) Legitimate interests): publishing authentic feedback to help other customers. We send a post-purchase review invitation to your email based on legitimate interest, and you optionally submit the review with consent.
BloomDesigner data: to provide the requested preview/session and related pre-order steps, to operate the service securely and prevent abuse, and (if you place an order) to produce and deliver your purchase.

5. Chat and AI use

We use automation in chat to assist with gathering preferences and reference images. Texts you write in chat may be processed by AI systems.
We do not automatically send order or account data fields (such as name, address, phone, email) to AI systems. Do not write personal data in chat.
All orders are ultimately handled and completed by a human. Chat content is not used to train AI models. If any AI processing involves a processor, it operates under contract and does not use your chat to train its models.

6. Disclosures and processors

We share data only with necessary processors under data-processing agreements:

Payments: Stripe Payments Europe (see Stripe’s privacy notice).
Shipping: Posti and other carriers depending on the destination.
Translations: DeepL — automatic translation of chat messages between the customer's and our languages.
Design generation: Google (Gemini AI API) — processes images you upload and inputs you provide to generate designs and draft previews (including BloomDesigner and the product page designer). Your content is not used to train AI models. Processing may occur outside the EU/EEA; we apply GDPR safeguards such as the EU Standard Contractual Clauses.
Hosting and IT: EU/EEA infrastructure supporting our website and chat.

We do not sell personal data.

7. International transfers

Primary storage is in the EU/EEA. If an exceptional transfer outside the EEA occurs, we apply GDPR safeguards such as the EU Standard Contractual Clauses.

8. Retention

Order and accounting records: at least six (6) years after the end of the financial year, per Finnish law.
Customer support communications: up to 24 months after last interaction, unless needed for a complaint or legal claim.
Design files linked to orders: up to 5 years after the last order for re-orders and quality documentation, then deleted or anonymized unless law requires longer storage.
Uploaded images and generated designs: kept on our servers for as long as needed to provide the service, up to a maximum of 5 years, then deleted or anonymized.
Security logs: up to 12 months, longer if investigating incidents.
Retention may extend as needed to establish, exercise, or defend legal claims.
BloomDesigner sessions without an order: retained only for a limited period and then deleted or anonymized unless retention is needed for security investigations or legal claims.
Product reviews: kept for as long as the reviewed product is sold, or until you request deletion.

9. Your rights

You can request: access, rectification, erasure, restriction, objection (legitimate interests), and portability (data you provided under contract or consent).
Contact info@bloomdesignz.com. We respond within one month. You may complain to the Office of the Data Protection Ombudsman (Finland) or to the data protection authority of your country of residence.

Privacy Policy

Privacy Policy — BloomDesignz.com

1. Who we are

2. What data we process

3. Sources

5. Chat and AI use

6. Disclosures and processors

7. International transfers

8. Retention

9. Your rights

10. Children

11. Cookies

12. Security

13. Public showcasing of designs

14. Changes

15. Contact