Privacy Policy

BluumClear (“BluumClear”, “we”, “us”) operates a same-day business-to-business marketplace for post-auction floral surplus, connecting flower growers and co-operatives (“Sellers”) with wholesale buyers (“Buyers”). This Privacy Policy explains what information we collect when you use bluumclear.com and our related services (the “Service”), how we use it, and the choices you have. We operate from Mississauga, Ontario, Canada, and handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

We collect only what we need to run the marketplace:

• Account information. When you sign in with Google we receive your name and email address. When you register with email and password, we store your email address and a securely hashed password. We never see or store your Google password.
• Mobile phone number. You provide a mobile number at checkout so we can text you your pickup ticket and order updates.
• Order and listing activity. The lots you list or claim, quantities, prices, pickup tickets, pickup status, and timestamps.
• Payment information. Card payments are processed directly by our payment provider, Stripe. We do not collect or store your full card number. We receive limited details from Stripe such as payment confirmation, the last digits/brand of the card, and payout records.
• Technical data. Basic information needed to keep you logged in and the Service secure, such as session cookies and standard server logs (e.g., IP address, browser type).

How we use your information

• To create and secure your account and keep you signed in.
• To process claims and payments, apply the marketplace fee split, and pay Sellers.
• To send you transactional messages: pickup tickets, order confirmations, receipts, and invoices by SMS and email.
• To alert Buyers when new surplus matching the marketplace is listed (you can opt out at any time — see below).
• To operate, maintain, troubleshoot, and improve the Service, and to prevent fraud and abuse.
• To receive and act on reports you submit about a listing or seller. Such reports include your account’s identity (name and email) so our team can investigate and, where appropriate, follow up with you.
• To comply with our legal and tax obligations.

Service providers we share with

We do not sell your personal information. We share it only with the providers that make the Service work, and only as needed:

• Stripe — payment processing and Seller payouts (Stripe Connect). Stripe handles your card data under its own privacy policy.
• Supabase — authentication and database hosting for your account and order records.
• Twilio — delivery of SMS pickup tickets and alerts.
• Resend — delivery of transactional email receipts and invoices.
• Vercel — application hosting and delivery.

We may also share information with the relevant Seller and pickup facility to the extent needed to fulfil your order at pickup — for example your pickup ticket and order contents. We may disclose information if required by law or to protect the rights, safety, and security of BluumClear, our users, or the public.

SMS messaging and opt-out

By providing your mobile number you consent to receive order-related text messages (such as pickup tickets and confirmations) and surplus alerts from BluumClear. Message and data rates may apply. You can stop marketing/alert texts at any time by replying STOP; we may still send essential transactional messages relating to an active order.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to keep the Service secure. We do not use third-party advertising cookies.

Data retention

We keep your account and order records for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal, accounting, and tax requirements. You may ask us to close your account and delete information we are not required to retain.

Your rights

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. To make a request, contact us using the details below. We will respond within a reasonable time.

Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, signed session tokens, and database access controls. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.

Children

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.

Contact us

Questions about this policy or your information? Email us at support@bluumclear.com.