Privacy notice

Who is responsible

BloomOps (Sophia Francis), in Bahía de Banderas, Nayarit, Mexico, is responsible for Bloom Bookings and for this notice. Write to sophia@bloomops.io about anything on this page.

If you book with a business

Each business on Bloom Bookings decides what it asks its clients and what it does with their appointments. For your information as its client, the business is responsible, and we store and process it on its behalf. Each business is responsible for the information it asks its own clients for, and you can also contact that business directly.

What is kept:

• Your name, phone number and email
• Your appointments: what, when, with whom, the price, and whether it’s paid, plus your answers to the business’s booking questions and, when you give one, the address where the appointment happens
• Your reservations for gatherings: which event, how many seats, the names of people you bring, your answers to the host’s questions (like menu choice or allergies), the price, and whether it’s paid
• Notes the business keeps about you, like preferences, and care alerts such as an allergy or a health detail you tell them about
• The language you prefer

Some businesses ask a health question when you book. Those answers are kept apart from your other answers and seen only by that business: they’re not on its calendar, in its downloads or in your confirmation.

Some gatherings (a sound bath, a retreat) ask health questions. You only answer them after ticking a consent box; the answers are kept apart from the rest, shown only to that host, and left out of their guest lists and downloads unless they choose to see them.

Care alerts can include health information, which the law treats as sensitive. Only share it if you want the business to know. It’s shown to that business, never to other businesses. BloomOps (Sophia) also has support access to each business’s dashboard, so she can see what the business sees there, including care alerts, and she gets the new-booking emails (client name, service and time). She uses this only to set up the page, help the business and fix problems.

If you run a business on Bloom Bookings

• Your login email
• Your business details: name, address, services, prices, hours, team names, photos, and the payment details you want clients to see (like a CLABE or Zelle)
• Your Google Calendar connection, if you set one up

If you write to us

When you fill in the questionnaire at book.bloomops.io/start or the “What’s eating your week?” form on bloomops.io, we keep what you write and the email or WhatsApp number you give us, so we can reply and set things up with you.

What it’s used for

Only to run the service:

• Show free times and take bookings
• Send confirmations and reminders, and let clients confirm, change or cancel
• Show each business its schedule, client list, payments and revenue
• Keep the business’s Google Calendar in sync
• Set up your page, give support, and answer your messages

There are no secondary purposes. We don’t use your information for marketing, advertising or profiling, and we never sell it.

Who helps us run it

A few service providers store or move information for us, only to provide their service:

• Supabase: the database (servers in the United States)
• Vercel: hosting for the website
• Google Calendar: syncing appointments, only for businesses that connect it
• Resend: sending emails

We don’t share your information with anyone else, unless the law requires it. When a business sends you a reminder by WhatsApp, it goes from the business’s own WhatsApp.

Payments

When you pay ahead by bank transfer or Zelle, the money goes straight to the business. We only keep a note that you said you sent it. We never see or store card details.

Cookies

Only two small things: a login cookie so business owners stay signed in, and remembering your language. No tracking or advertising cookies.

Your choices and rights

You can ask us to show you the information we have about you (access), correct it (rectification), delete it (cancellation), or stop using it for a specific purpose (opposition). In Mexico these are your ARCO rights. Anyone can ask, wherever you live.

To ask, email sophia@bloomops.io with your name, what you’d like us to do, and something that helps us find you (like the phone number you booked with and the business’s name). We may ask you to confirm it’s really you. We answer within 20 days, and if the request applies, we do it within 15 days after that.

If you booked with a business, you can also ask the business directly, and we’ll help them answer.

Taking back your consent

You can withdraw your consent for us to use your information at any time by writing to sophia@bloomops.io. We’ll stop, except for anything the law requires us to keep. Without it, we may not be able to keep your bookings or your account.

How long we keep it

While the business uses Bloom Bookings, or until you ask us to delete it. When a business leaves, it can take a copy of its client list first, and then we delete it. Copies already in our nightly backups disappear on their own within 30 days.

Changes to this notice

If this notice changes, we update this page and the date at the top. If a change matters, we also tell business owners directly by email or WhatsApp.