🧶 Every piece handmade to order
BloomKnots

Quick search

Find your next handmade favourite.

Your cart (0)

Your cart is empty

Have an account? Sign in to check out faster.

Privacy Policy

Last updated: 5 September 2026

This Privacy Policy explains how BloomKnots ("BloomKnots", "we", "us" or "our") collects, uses, shares and protects personal data when you visit bloomknots.com, create an account, place an order, contact us, use support chat, submit a custom request or otherwise use our services. BloomKnots is responsible for the personal data described in this policy.

1. Personal data we collect

  • Identity and contact information: your name, email address, phone number, billing or delivery address, and a gift recipient's name, phone number and address when you ask us to deliver to someone else.
  • Account and authentication information: account identifiers, password hashes, one-time verification records, saved addresses and information received from Google when you choose Google sign-in.
  • Order and transaction information: products, customisation choices, gift messages, order notes, delivery requests, discounts, payment status, refunds and transaction references. Card, UPI and banking credentials are entered with the payment provider and are not stored by BloomKnots.
  • Support and submitted content: contact requests, support-chat messages, emails, custom or bulk-order details, reviews, photographs and seller applications you choose to submit.
  • Technical and usage information: IP address, browser or device details, security and rate-limit records, pages visited and basic server logs. If you allow optional analytics, we also collect page paths without query strings, referral-site origin, campaign tags, a daily pseudonymous visitor identifier, a short-lived salted identifier unique to the visitor's IP address, and approximate city, region, country and coordinates derived from that IP. Raw IP addresses are not stored in the live-visitor analytics table.

2. How we use personal data

We use personal data only for purposes connected with operating BloomKnots, including to:

  • create and secure accounts, maintain carts and remember your preferences;
  • accept payment, confirm, make, pack, ship, track, deliver, cancel, return or refund orders;
  • prepare quotes and fulfil custom, gift, bulk or seller requests;
  • provide customer support, operate automated and human chat, handle complaints and prevent fraud or abuse;
  • send service messages about accounts, payments, orders and deliveries;
  • send newsletters or promotional messages only where you have requested them, with an unsubscribe option;
  • measure and improve the website when you have allowed optional analytics; and
  • meet accounting, tax, consumer-protection, security and other legal obligations.

We process personal data with your consent, to provide products or services you request, and for other uses permitted by applicable law. You may withdraw consent for consent-based processing, but that will not affect processing already completed or information we must keep by law.

3. Cookies and similar technologies

Essential first-party cookies keep your cart, checkout, account sign-in, security controls and support chat working. They are used to provide features you request and cannot all be disabled through our consent panel.

Optional, privacy-conscious analytics operate only after you choose Allow cookies. BloomKnots does not use personalised-advertising cookies. You can accept or reject optional analytics from the cookie notice and change your choice at any time through Cookie settings in the footer. Rejecting optional analytics does not affect shopping or account features.

4. When we share information

We do not sell or rent personal data. We share only what is reasonably necessary with service providers that help us operate the shop, such as:

  • payment and refund providers, including Razorpay when selected at checkout;
  • shipping aggregators, courier partners and delivery personnel, including the recipient details needed to deliver and contact the recipient;
  • website hosting, database, file-storage, IP-geolocation, email, SMS, security and technical-support providers;
  • the configured artificial-intelligence service provider when you use automated support chat, and BloomKnots staff when a chat is transferred to a human;
  • an identified marketplace seller where necessary to answer a product issue or meet a legal obligation; and
  • regulators, courts, law-enforcement bodies or professional advisers when disclosure is required by law or necessary to protect legal rights.

Some providers may process information outside India. Where this occurs, we use providers and safeguards permitted by applicable law.

5. Data retention

We keep information only for as long as needed for the purposes above. Retention depends on the record: an active account is kept while it is used; order, invoice, payment and refund records may be retained for tax, accounting, fraud-prevention and consumer-dispute requirements; support and custom-request records are kept while reasonably needed to provide help and maintain an appropriate history. Live-presence records are removed after 24 hours and appear as online only while recently active. We delete or de-identify other information when it is no longer required, unless the law requires or permits continued retention.

6. Security

We use reasonable administrative and technical measures designed to protect personal data, including access controls, encrypted connections, password hashing and restricted administrative access. No online transmission or storage system is completely secure, so we cannot guarantee absolute security. Please protect your password and verification codes and contact us if you suspect unauthorised account use.

7. Your choices and rights

Subject to applicable law, you may ask us to provide information about your personal data, correct inaccurate or incomplete information, erase information that is no longer required, withdraw consent, close your account, opt out of marketing, or raise a grievance. We may need to verify your identity before acting on a request. You may also nominate another person to exercise applicable data rights in the event of death or incapacity.

8. Children's privacy

BloomKnots is intended for adults. A person under 18 should use the service only through a parent or lawful guardian. We do not knowingly seek personal data directly from children or use it for behavioural monitoring or targeted advertising. A parent or guardian may contact us about information submitted by a child.

9. External links and policy changes

Our website may link to third-party sites that operate under their own privacy policies. We are not responsible for their independent practices. We may update this policy when our services or legal obligations change. The revised version will be posted here with a new last-updated date; material changes may also be communicated through the website or your registered contact details where appropriate.

Contact and grievance support

Email hello@bloomknots.com or use our contact form. Include your order number when your question concerns an order.

Our customer-care and grievance team will acknowledge a complaint within 48 hours and aims to resolve it within one month. Nothing in this policy limits rights available to you under applicable consumer law.

Microsoft Clarity analytics

With your permission, we use Microsoft Clarity heatmaps and session recordings to improve the storefront. Microsoft receives usage information such as page visits, clicks, scrolling, browser and device details. We mask page text and support-chat content and do not send customer identities to Clarity. Advertising storage consent is denied. You can withdraw analytics consent through Cookie settings in the footer. See the Microsoft Privacy Statement for Microsoft's data practices.

Bot protection

We use Cloudflare Turnstile to protect customer forms, checkout, support chat and public login forms from automated abuse. Cloudflare processes browser and network information to verify requests. After a successful check, a secure, short-lived cookie remembers verification for ten minutes. This security check works independently of optional analytics. See the Cloudflare Privacy Policy.