Privacy Policy

1. Information We Collect

Information You Provide

When you contact us, request a proposal, or engage us for a project, you may provide:

• Name, email address, and phone number
• Business name, industry, and website
• Project briefs, brand assets, and content you share for us to work with
• Feedback, revision requests, and communications during a project

Information Collected Automatically

When you visit bloomspark.agency, we automatically collect:

• IP address and approximate location (country/city level)
• Browser type, device type, and operating system
• Pages visited, time on site, and referring source
• Interaction events (clicks, scrolls) via Google Analytics 4

2. Cookies and Analytics

We use the following technologies to understand how visitors use our site:

• Google Analytics 4 (GA4): tracks pageviews, session data, and user behaviour. Data is processed by Google LLC in the US. Google's privacy policy applies: policies.google.com/privacy.
• Google Fonts — fonts are loaded from Google's servers. Google may log your IP when fonts are requested.
• Essential cookies — small files required for basic site functionality. No personal data is stored in these.

You can disable cookies in your browser settings at any time. Disabling analytics cookies will not affect your ability to use the site.

3. How We Use Your Information

• To respond to enquiries and provide project proposals
• To deliver and manage the services you've engaged us for
• To communicate project updates, feedback requests, and deliverables
• To improve our website and understand how visitors engage with it
• To send service-related emails (e.g. invoice, project milestones)
• To comply with legal and regulatory obligations

We will only send marketing communications with your explicit consent. You can opt out at any time.

4. Use of AI Tools in Our Work

BloomSpark Agency uses AI-powered tools as part of our design, development, and delivery process. When working on client projects, we may use tools such as large language models, AI design assistants, and automation platforms. We observe the following practices:

• Client-provided assets, brand content, and confidential business information are not used to train third-party AI models
• We use AI tools subject to those tools' own data handling and privacy terms
• Where a project involves sensitive information, we discuss AI tool usage with the client before commencing

5. Client Project Data

When you engage BloomSpark Agency for a project, you may share assets, content, credentials, or business data with us. We handle this information as follows:

• Project files are stored in secure, access-controlled cloud environments
• Access is restricted to team members working on your project
• We do not share your business data or project details with third parties outside of those needed to complete your project
• Upon project completion, we can return or securely delete client data on request

6. Information Sharing

We do not sell your personal data. We may share information with:

• Service providers — tools and platforms we use to operate (e.g. Google Analytics, project management tools, cloud storage). These are bound by their own privacy terms.
• Subcontractors — specialist freelancers or partners brought in to fulfil specific project needs, under confidentiality obligations.
• Legal authorities — when required by law, court order, or to protect our rights and the safety of others.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Enquiry and contact data: up to 2 years after last contact
• Client project data: up to 3 years after project completion, unless otherwise agreed
• Analytics data: per Google Analytics default retention settings (up to 14 months)
• Financial and invoicing records: 7 years, as required by applicable tax law

8. International Data Transfers

BloomSpark Agency is based in India. If you are located in the European Economic Area (EEA), UK, or another jurisdiction with data transfer restrictions, please note that your data may be processed in India or in other countries where our service providers operate. We take reasonable steps to ensure adequate protection is in place for any such transfers.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention obligations)
• Restriction — ask us to restrict processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on our legitimate interests
• Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us at hello@bloomspark.agency. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including encrypted storage, access controls, and secure communication channels. No method of internet transmission is 100% secure; we cannot guarantee absolute security but take reasonable steps to protect your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "Last updated" date at the top of this page. For significant changes, we will notify active clients directly. We encourage you to review this page periodically.

12. Contact Us

For questions, concerns, or to exercise your data rights, please contact:

BloomSpark Agency
Email: hello@bloomspark.agency
Phone: +91 92844 57782
Country: India