Last updated: July 22, 2026
This policy explains what information Bloom Crate collects and what we do with it.
## What we collect
When you place an order:
- Your name and email address
- Your billing address (required by card networks for fraud prevention)
- Your Roblox username (so we can deliver your items)
- Order details and history
We never see your full card number. Payment details are handled directly by Shopify and its payment processors.
Automatically:
- Basic analytics about how the site is used — pages viewed, device type, approximate location
- Cookies necessary for the cart and checkout to function
## Why we collect it
- To deliver your order (we can't do this without your Roblox username)
- To send order confirmations and delivery updates
- To respond to support requests
- To detect and prevent fraud
- To meet legal and tax obligations
We do not sell your personal information.
## Who we share it with
Only with the services we need to run the store:
- Shopify — hosts our store and processes payments
- Payment processors — to complete transactions
- Email providers — to send order confirmations
Each of these has its own privacy policy governing how they handle data.
We may also disclose information where legally required.
## Age and children's privacy
Our store is not directed at children under 13, and we do not knowingly collect personal information from them.
If you are under 18, please use this site only with a parent or guardian's involvement.
If you are a parent or guardian and believe your child has provided us with personal information, contact us at bloomcratesupport@gmail.com, and we will delete it promptly.
## How long we keep it
Order records are retained as long as necessary for accounting, tax, and dispute purposes — typically 7 years. You can ask us to delete other information at any time.
## Your rights
Depending on where you live, you may have the right to:
- Request a copy of the information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your information
- Object to certain processing
- Withdraw consent for marketing emails
To exercise any of these, email bloomcratesupport@gmail. We'll respond within 24 hours.
## Security
We use Shopify's infrastructure, which encrypts data in transit and is PCI-DSS compliant for payment handling. No system is perfectly secure, but we take reasonable steps to protect your information.
## Changes
We may update this policy. The current version is always on this page with the date it was last changed.
## Contact
bloomcratesupport@gmail.com · Discord: https://discord.gg/4uV3mbyRF