Privacy Policy

01Information we collect

We only collect what we need to deliver what you asked for. Depending on how you work with us, this may include:

We don't ask for sensitive personal information as defined by the Data Privacy Act (for example, health, government ID numbers or religious beliefs). Please don't share it with us unless it's needed for your project.

02Where it comes from

• From you, when you fill in a form, buy something, book a session, send a message or share materials for a project.
• Automatically, when you browse our website, through our hosting provider's standard logs.
• From service providers, such as our payment processor confirming your order or our scheduling tool confirming a booking.
• From you on social platforms, when you comment, DM or tag us, subject to that platform's own policies.

03How we use it

• To deliver what you bought: send your guide or kit, give you cohort access and Zoom links, schedule sessions and carry out client projects.
• To support you: answer questions, fix access problems, process refunds where they apply, and follow up after sessions.
• To run our business: keep accounting and tax records, prevent fraud, and keep our website secure and working.
• To improve our work: understand which products and lessons are most useful, using information in summary form where we can.
• To send updates you've agreed to: new guides, cohort dates and offers. You can unsubscribe at any time using the link in any email.
• To meet legal obligations: respond to lawful requests from authorities and protect our legal rights.

We rely on your consent, the need to perform our agreement with you, our legal obligations, and our legitimate interests in running a safe and useful business, as allowed under the Data Privacy Act.

04Notes for each service

Digital products (guides and kits)

We use your email to deliver your download and send updates to the edition you bought. Download links are for your personal or business use and shouldn't be shared.

AI Mentorship cohorts and private sessions

• Sessions run on Zoom or a similar tool. Live sessions may be recorded so participants can watch the replay. We'll tell you at the start of every recorded session.
• Cohort replays are shared only with participants of that batch, for a limited time.
• What you share in a session stays private. We will never use your business details, results or screenshots publicly without your written permission.
• If you share a win and choose to let us feature it, you can ask us to take it down at any time.

Done-for-you content services

• We use your brand materials and account access only to deliver the agreed work.
• We ask for the lowest level of access needed, such as a collaborator or partner role instead of your password, wherever the platform allows.
• Content we create may appear in our portfolio or case studies only with your approval. Results can be shared without naming you if you prefer.
• When our engagement ends, we remove our access and return or delete your materials as agreed in your contract.

Bloom Assistant (website chat)

Questions you type into Bloom Assistant are sent to our AI provider, Anthropic, to generate an answer, and then discarded by us. We don't save chat transcripts or link them to your identity. Please don't type payment details or other sensitive information into the chat.

Use of AI tools

We use AI tools, including Claude, to help plan, draft and organize work. We don't put your payment details or sensitive personal information into AI tools, and we use business accounts and settings that keep your information private where these are available.

05Who we share it with

We don't sell your personal information. We share it only with providers who help us run our business, and only what they need:

If North Bloom Collective is ever merged, sold or restructured, your information may be transferred to the new owner, who must keep protecting it under this policy.

06Cookies and browser storage

Our website keeps your cart and currency choice in your own browser's local storage, so they're still there if you leave and come back. This stays on your device and isn't sent to us. Our fonts are loaded from Google Fonts, which receives your IP address to deliver them. We don't use advertising cookies. If we add analytics or advertising tools in the future, we'll update this policy and ask for consent where required.

07How long we keep it

• Order and payment records: as long as tax and accounting laws require, generally up to 10 years.
• Mentorship notes and replays: replays for up to 30 days after a cohort; notes for up to 12 months after your last session, unless you ask us to delete them sooner.
• Client project materials: for the length of our engagement plus the period set in your contract.
• Messages and inquiries: up to 24 months after our last conversation.
• Mailing list: until you unsubscribe.

When we no longer need information, we delete it or make it anonymous.

08How we protect it

We use reasonable organizational, physical and technical measures to protect your information, including two-factor authentication on our accounts, limited access to client materials, and trusted providers that encrypt data in transit. No system is completely secure, so we can't guarantee absolute security. If a personal data breach is likely to harm you, we'll notify you and the National Privacy Commission as required by law.

09Your rights

Under the Data Privacy Act, you have the right to:

• Be informed about how your information is collected and used.
• Access the personal information we hold about you.
• Correct information that is wrong or incomplete.
• Object to processing, including withdrawing consent to marketing.
• Erasure or blocking of information that is no longer needed or was processed unlawfully.
• Data portability, getting your information in a format you can take elsewhere.
• Damages if you're harmed by inaccurate, unlawfully obtained or misused information.
• File a complaint with the National Privacy Commission (privacy.gov.ph).

If you live outside the Philippines, you may have similar rights under your local laws. Contact us using the details below and we'll respond within 15 working days. We may need to confirm your identity first.

10International transfers

We're based in the Philippines and work with clients abroad. Some of our providers store data in other countries, including the United States. When we use them, we choose reputable providers and rely on their contractual and security protections so your information stays protected wherever it's processed.

11Children

Our products and services are for adults running or building businesses. We don't knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we'll delete it.

12Other websites

Our website links to other sites and platforms, such as Instagram, Facebook, TikTok and our payment provider. Their privacy practices are governed by their own policies. Anything you post publicly, like a comment on our social pages, can be seen by others.

13Changes to this policy

We may update this policy as our services or the law change. The effective date at the top shows when it was last updated. If we make important changes, we'll let customers know by email or on our website.

14Contact us