English
Privacy Notice
Last Updated: May 21, 2024
Bloomreach, Inc. and its subsidiaries ("Bloomreach", "we" and "our") take privacy very seriously. This Privacy Notice ("Privacy Notice") explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights.
This Privacy Notice only applies to personal information we collect in the usual course of business, including through our websites (such as https://www.bloomreach.com/en) ( collectively the "Websites"), product feedback and surveys and in connection with our events, sales and marketing activities.
For personal information that we collect when you register for an account with Bloomreach, use or otherwise interact with our products and services, please see our Services Privacy Notice which can be found here;
In the event of any discrepancies between this Privacy Notice and any specific privacy notice applicable to any Bloomreach products or services, the specific privacy policy prevails.
If you have any questions about this Privacy Notice, please contact us at dpo(at)bloomreach(dot)com or contact us at the details below.
Quick links
We recommend that you read this entire Privacy Notice to ensure that you are fully informed. However, if you only want to access a particular section of this Privacy Notice, then you can click on the links below.
What information do we collect and why?
Who do we share your personal information with?
Cookies and similar tracking technology
Legal basis for processing personal information (EEA/UK residents only)
EU-U.S, Swiss-U.S., and UK Extension to the, Data Privacy Framework
Who we are
Bloomreach is a global company headquartered in the USA, with affiliates, offices and/or employees in the Netherlands, the United Kingdom, Germany, Czechia, Slovakia, India, United Arab Emirates and Russia. We provide publishers, retailers, websites, ecommerce businesses and others (our “Clients”) with tools, analytics, personalization services and marketing platform that help our Clients develop and publish content and their consumers find content they want and deliver personalized customer experiences. You can find out more about Bloomreach here.
What information do we collect and why?
The personal information that we may collect about you broadly falls into the following categories:
Information that you provide voluntarily: Certain parts of our Website may ask you to provide personal information voluntarily: for example, we may ask you to provide your contact details (like your name, email address and phone number) when you request information about our products and services, request access to a demo or any online training materials, subscribe to marketing communications (like newsletters) from us and/or otherwise submit enquiries to us.
In case you subscribe to our marketing communications you can unsubscribe at any time from such communication by clicking on the “unsubscribe” link located at the bottom of our marketing emails. There is also a possibility of opting-out from receiving emails by clicking on “opt-out from emailing” available on our Website in the section https://bloomreach.com/en/legal/control-your-data/opt-out.
We may also collect personal information from you offline, such as when you attend one of our events or during phone calls with sales representatives. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
We will collect your personal information such as your name, contact details and your resume/CV if you apply for a job with us.
We process personal information of our Clients in order to provide them with our Services. The data processed for such purpose may include full name, company email, phone number, company name and industry and others.
Bloomreach Academy. If you enrol to Bloomreach Academy basic personal information about you such as your name, email address, what company you work for, what is your job title, payment information, course attendance, results and your preferred language are processed by Bloomreach.
We will also let you know prior to collection whether the provision of personal information we are collecting is compulsory or may be provided on a voluntary basis and the consequences, if any, of not providing the information.
The personal information we collect may include contact information such as your name, address, telephone number or email address and contact preferences. It may also include professional information, such as your job title, department or job role, as well as the nature of your request or communication. We also collect information you choose to provide to us when completing any 'free text' boxes in our forms (for example, for event sign-up, product feedback or survey requests).
Examples of how we use this information include:
- To respond to your requests or provide you with information requested by you.
- To send administrative or account related information to you.
- To communicate with you about updates to the Service.
- To maintain the website and tailor the website to your needs.
- To communicate with you by post, telephone and/or email for the purposes of providing you with marketing and promotional content (in accordance with your marketing preferences). For more information about managing your marketing preferences, please see the "Your Data Protection Rights" section of this Notice below.
- To comply with and enforce applicable legal requirements, agreements and policies.
- To prevent, detect, identify, investigate, respond and protect against potential or actual claims, liabilities, prohibited behaviour, and criminal activity.
- For other business purposes such as data analysis, identifying usage trends, determining the effectiveness of our marketing and to enhance, customize and improve our Websites, products and services.
Information we automatically collect: When using our Websites or interacting with our online advertisements or marketing emails (collectively with our Websites, the "Online Properties"), we automatically collect certain information from your device. In some countries, including countries in the European Economic Area and the UK, this information may be considered personal information under applicable data protection laws. Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and similar tracking technology”.
The information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Online Properties, including the pages accessed and links clicked.
How we use this information: Collecting this information enables us to better understand the individuals who use and interact with our Online Properties, where they come from, and what content on our Online Properties is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Online Properties.
Information that we obtain from third party sources: From time to time, we may receive personal information about you from third party sources (such as our marketing providers), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. The types of information we collect from third parties include contact information and job titles and we use the information we receive from these third parties to maintain and improve the accuracy of the records we hold about you.
Social Media Widgets: Our Website includes plugins of social media platforms, such as Facebook and Instagram of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; Twitter of Twitter Inc., 795 Folsom St., Suite 600, San Francisco CA 94107, USA; YouTube of YouTube Inc., 1000 Cherry Ave, San Bruno, CA 940666, USA; LinkedIn of LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA. Social Media Features and Widgets are either hosted by a third party or hosted directly on our websites. You can generally identify the plugins by the respective network’s logo, for instance in combination with a pictogram of a clenched hand with a raised thumb or the addition of a “recommendation”, “like” or “comment.” Details about purpose and extent of data collection as well as processing and usage of the data by the social media networks can be obtained by reading the privacy policies of Facebook, Twitter and Google.
a) Facebook: https://www.facebook.com/legal/FB_Work_Privacy
b) Twitter: https://twitter.com/en/privacy
c) Linkedin: https://www.linkedin.com/legal/privacy-policy
d) Instagram: https://help.instagram.com/155833707900388
e) YouTube: https://support.google.com/youtube/answer/10364219?hl=en
Who do we share your personal information with?
We may disclose your personal information to the following categories of recipients:
-
to our group companies, third party service providers and partners (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Online Properties), or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information.
-
to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
-
to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice;
-
to our marketing partners to send emails on our behalf, and/or for co-branded and/or co-sponsored marketing and promotional events (such as conference events) offered in conjunction with another company or companies. If you register for or participate in such marketing and promotional events, we and the relevant partner companies may receive information collected in conjunction with the co-branded and/or co-sponsored marketing and promotional events. Our Privacy Notice will apply to our use of your personal information. We have no control over any other companies’ privacy practices, so please read their applicable privacy.
- to our data processors, whereas we use the following categories of data processors - hosting services, marketing tools, tools for analytics and tracking, tools for running events, polls or surveys, business operations/management tools, task management and communication tools.
- to our advisors such as legal advisors, tax advisors etc.
-
to any other person with your consent to the disclosure.
Cookies and similar tracking technology
We use cookies and similar tracking technology (collectively "Cookies") to collect and use personal information about you, including to do interest-based advertising. For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice here.
How do we keep your personal information secure?
We use appropriate administrative, organizational, technical and physical safeguards to protect the personal information we collect and process about you. The measure we use are designed to provide a level of security appropriate to the risk of processing your personal information and to help ensure that your data is safe, secure, and only available to you and to those you provided authorized access (e.g., your users).
However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so you should take care in deciding what information you send us in this way.
Links to Other Sites
Our Website may contain links to other sites that are not owned or controlled by Bloomreach. Please be aware that Bloomreach is not responsible for the privacy practices of these other sites. We encourage you to review the privacy policies and statements of other sites to understand their information practices. This Privacy Notice applies only to information collected by our Websites.
Legal basis for processing personal information (EEA/UK residents only)
If you are resident in or a visitor from European Economic Area or the UK, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. In most cases we use personal information where we have your consent to do so, where it is necessary for performance of contract or where the processing is in our legitimate business interests. Typically, our legitimate interests include: (i) improving our Online Properties, products and services; (ii) for our marketing activities; (iii) measuring the effectiveness of our marketing and promotional campaigns; (iv) exercising or defending legal claims; and (v) handling the requests from our customers.
In some cases, we have a legal obligation to collect personal information from you. If we ask you to provide personal Information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time and advise you whether the provision information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
International data transfers
We are a growing corporation with operations in multiple countries, including the United States, United Kingdom, India, Germany, the Netherlands, Czechia and Slovakia. While our primary data centers are in the United States, Ireland, the Netherlands and Belgium, we may transfer personal information or other information to Bloomreach offices outside of the United States, the European Economic Area, or the United Kingdom. In addition, we may employ other companies and individuals to perform functions on our behalf.
These countries may have data protection laws that are different to the laws of your country. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These safeguards include implementing the European Commission's Standard Contractual Clauses (including as amended by the UK Data Transfer Addendum to the Standard Contractual Clauses), as well as our certification to (and adherence to the Principles under) the Data Privacy Framework (defined below) in connection with transfers to Bloomreach Inc. in the US.
Depending on your location, our Standard Contractual Clauses can be provided to you upon request. We have implemented similar appropriate safeguards with our third-party service providers and partners, and further details can be provided to you upon request. Generally personal data shall be kept for as long as necessary for the purpose for which it was processed. The length of time that Bloomreach will hold your personal data will also depend on the legal basis on which your data is processed. Shall the processing be based on legitimate interest, your data will be processed for as long as the given legitimate interest of Bloomreach is in place. For data kept based on legal obligations, the data-retention period is prescribed by applicable legal regulations. For data processed based on performance of a contract, the data is processed for the duration of the contractual relationship and for an applicable limitation period. Shall the processing be based on your consent, your personal data shall be erased after you withdraw your consent. Please bear in mind that the same data may as well be processed based on other legal basis in which case your withdrawal of consent might not mean a full erasure of your data. The personal data of successful applicants is processed and retained in line with our employee Privacy Policy.The personal data of unsuccessful applicants that provided us with their consent for considering them for future positions at Bloomreach is processed for the period for which the consent was given, whereas you may withdraw your consent at any time. The personal data of unsuccessful applicants that have not provided us their consent for retaining their personal data are retained for as long as the given legitimate interest of Bloomreach to protect itself from legal claims and effectuate the hiring process. You have the following data protection rights: You can access, review, change, update or delete your personal information at any time by contacting us dpo(at)bloomreach(dot)com or via our Website in the section https://www.bloomreach.com/en/legal/control-your-data. Please note that we may impose a small fee for access and disclosure of your personal information where permitted under applicable law, which will be communicated to you. We do not charge you to update or remove your personal information. To remove your personal information from a Website testimonial or request removal of your personal information from our blog or community forum, contact us at dpo(at)bloomreach(dot)com or via our Website in the section https://www.bloomreach.com/en/legal/control-your-data. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why. You can opt out of receiving promotional emails or text messages from us by clicking the “unsubscribe” link in the email or by going to https://www.bloomreach.com/en/legal/control-your-data/opt-out. If you choose to no longer receive marketing information, we may still communicate with you regarding such things as your security updates, product functionality, responses to service requests, or other transactional, non-marketing/administrative related purposes. If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. If you wish to withdraw your consent, contact us at dpo(at)bloomreach(dot)com, you can also withdraw your consent anytime by contacting us via our Website in the section https://www.bloomreach.com/en/legal/control-your-data. You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the European Economic Area ("EEA") are available here, if you are resident of the UK, please contact Information Commissioner’s Office at https://ico.org.uk/make-a-complaint. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. To protect your privacy and security, we take reasonable steps to verify your identity before granting you account access or making corrections to your personal information. Bloomreach, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have certified to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Bloomreach commits to refer unresolved complaints concerning our handling of Non-HR personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to our US based third-party dispute resolution provider (JAMS). If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit at https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. This service is provided at no cost to you. Under certain conditions, more fully described on the Data Privacy Framework website, https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2 you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act), as we do not collect any information from anyone under 13 years of age. The Website and its content are directed to people who are at least 18 years of age or older. We do not collect any information from anyone under 18 years of age. If you are under the age of 18, you may not use this Website unless you have the consent of, and are supervised by, a parent or guardian. We may revise this Privacy Notice from time to time in response to changing legal, technical or business developments. The most current version of this Privacy Notice will govern your use of your personal information. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice. If you have any questions, comments, or concerns about Bloomreach or this Privacy Notice, please contact our Data Protection Officer by email at dpo(at)bloomreach(dot)com or using the contact details provided below. Attn: Data Protection Officer Postal Mail Address: Bloomreach, Inc. 700 E. El Camino Real, Suite 130 Mountain View, CA 94041 If you are an EEA/UK resident: Bloomreach, B.V. Fred. Roeskestraat 109, 1076 EE Amsterdam, Netherlands Attn: Data Protection Officer We can be reached via e-mail at dpo(at)bloomreach(dot)com or you can reach us by telephone at +1 (888) 263-3917. If you are resident in the EEA/UK, the data controller of your personal information is Bloomreach B.V. jointly with Bloomreach, Inc. If you are a Consumer, the data controller of your personal information is our Client whose Digital Properties you use.Data Retention
Your data protection rights
EU-U.S, Swiss-U.S., and UK Extension to the, Data Privacy Framework
Children
Changes to our Privacy Notice
Contact Us