Payment processor
Handles card and e-wallet transactions under its own PCI-DSS compliance. Bloom receives only a payment reference and the success/failure state.
Privacy Policy
Plain language. No dark patterns.
We explain what we collect, why we collect it, and what we never do with it. This policy is written to be read instead of satisfying a checkbox. It aligns in spirit with Republic Act 10173, the Philippines Data Privacy Act of 2012.
Data we collect
Only what's necessary to operate the platform end-to-end. Categories listed below correspond to fields in the SQLite schema; nothing is collected silently in the background.
- Account
- Email address, display name, and a bcrypt-hashed password. The plaintext password is never persisted.
- Order details
- Recipient name, delivery address, contact number, gift message, and any 3D customizer configuration you save.
- Payment
- A payment reference returned by the processor. Card numbers, CVVs, and full PAN data never touch the Bloom server.
- Session
- A signed JWT in an HttpOnly cookie and a CSRF token for mutating requests. No persistent cross-site identifiers.
- Operational logs
- Request paths, response codes, timestamps, and IP addresses for security and rate-limiting. Retained briefly, see §5.
How we use it
- Authenticating you and authorising your account actions
- Building, packaging, and routing your order to the recipient
- Sending order-status email confirmations and replies to messages you send us
- Enforcing rate limits, CSRF checks, and abuse prevention
- Diagnostic logs to debug failures and improve the platform
We do not sell your data. We do not run third-party advertising, tracking pixels, or behavioural analytics. We do not profile recipients beyond what's needed to deliver their order.
Your rights under RA 10173
The Philippines Data Privacy Act of 2012 grants you the following rights. We honour them via the channels in §7.
- Right to be informed about what we collect and why on this page
- Right of access to a copy of the data we hold on your account on request
- Right to rectification to correct any inaccurate or outdated information
- Right to erasure to delete your account and associated personal data, subject to legitimate retention obligations
- Right to object to processing for purposes you have not consented to
- Right to data portability to receive a structured export of your data
- Right to file a complaint — with the National Privacy Commission (privacy.gov.ph)
Retention
- Account data
- Retained while your account is active. Deleted within 30 days of account deletion.
- Order history
- Retained for 24 months for audit and dispute purposes, then archived in anonymised form.
- Operational logs
- Rolled and deleted after 14 days.
- Support correspondence
- Retained for 12 months after the last reply.
Security at a glance
- TLS 1.2+ for all traffic between you and the server
- HttpOnly, Secure, SameSite cookies for session JWTs
- CSRF tokens on every mutating route
- Parameterised SQL queries against better-sqlite3 instead of string-concatenated SQL
- Bcrypt password hashing with cost factor 12
- Helmet for security-relevant response headers
- Rate limiting on authentication and order-create endpoints
07
Talk to the data privacy team
For any data subject request including access, rectification, erasure, portability, or objection, please email the team. We will acknowledge within 48 hours and respond fully within 15 calendar days, in line with RA 10173 §16.
- Privacy contact
- privacy@bloom.ph
- General contact
- hello@bloom.ph
- Postal
- STI College Lipa, Lipa City, Batangas, Philippines
Academic context
Bloom is an academic capstone. The platform stores data in a demonstration database that may be reset for evaluation. Where this policy describes ongoing operations, treat it as the policy a production deployment would inherit.