Bloom Safe Privacy Policy

Effective Date: [May 19, 2025]

Last updated: [May 19, 2025]

Bloom Safe (“we,” “our,” “us”) is a group of people committed to ending child sexual abuse (CSA) in the United States. Protecting your privacy is important to us. This Privacy Policy explains how we collect, use, store, and share information when you visit bloomsafe.org or bloom-safe.odoo.com (the “Site”), interact with our social media pages, make a donation, sign up for e-mail updates, volunteer, or otherwise engage with Bloom Safe (collectively, the “Services”).

1. Scope

This Policy applies to information we process in connection with the Services. It does not cover third-party websites or services linked from our Site (see Section 11).

2. Information We Collect

We do not knowingly collect personal data from children under 13. If you believe a child has provided us information, please contact us (Section 12) so we can delete it.

3. How We Use Your Information

We process information to:

1. Provide and improve the Services (create accounts, fulfill resource requests, personalise content).
2. Process donations and send gift acknowledgments, tax receipts, and donor-care messages.
3. Communicate with you about campaigns, events, research updates, volunteer opportunities, or organisational news you opt in to receive.
4. Measure and analyse Site use to understand impact and enhance user experience.
5. Comply with legal obligations and protect our rights, property, and safety.

4. Legal Bases (EEA/UK visitors)

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on:

• Consent (e.g., for marketing e-mails, non-essential cookies);
• Contractual necessity (to process a donation you initiate);
• Legitimate interests (to maintain and improve the Site, prevent fraud, advocate for policy change);
• Legal obligation (record-keeping, tax, reporting).

You may withdraw consent at any time (Section 8).

5. How We Share Information

We share information only as needed and with appropriate safeguards:

We never sell or rent your personal information to third-party marketers.

6. Cookies & Similar Technologies

We use first- and third-party cookies and pixels to operate the Site, remember preferences, and compile aggregate analytics (e.g., Google Analytics). You can manage cookies through your browser settings; disabling them may limit certain features.

Some browsers offer “Do Not Track” signals; we currently do not respond to these.

7. Data Security

• Odoo’s cloud infrastructure employs TLS encryption in transit and AES-256 at rest.
• Payment data is handled by a PCI-DSS Level 1 compliant processor.
• Access to personal data is role-based and restricted to staff and contractors who need it to perform their duties.

Despite safeguards, no Internet transmission or storage system is 100 % secure. Please contact us immediately (Section 12) if you believe your interaction with Bloom Safe is no longer secure.

8. Your Choices & Rights

We will verify your identity before fulfilling certain requests.

9. Donor Privacy Commitment

Bloom Safe values our donors’ trust. We:

• Store donation history in a PCI-compliant donor-management system.
• Publish names publicly only with your explicit consent (e.g., in an annual report).
• Honor “opt out” preferences for mail, e-mail, phone, or text solicitations.
• Do not share donor addresses, e-mail, or phone numbers outside Bloom Safe unless required by law or with your written permission.

10. Data Retention

We keep personal data only as long as necessary for the purposes described above, including legal, accounting, or reporting requirements. Donation records are retained for at least seven (7) years per IRS guidelines.

11. Third-Party Links

Our Site contains links to external sites (e.g., social-media platforms, research articles). We do not control—and are not responsible for—the privacy practices of those sites. Review their policies before providing information.

12. Children’s Privacy

Bloom Safe’s online content is intended for adults who advocate for children’s safety. We do not knowingly collect personal data from children under 13. If you learn a child has provided us information without parental consent, please contact us at privacy@bloomsafe.org or +1 202-555-0123.

13. International Data Transfers

Your information may be processed in the United States or other countries where our vendors operate. We use appropriate safeguards, such as standard contractual clauses, for cross-border transfers.

14. Changes to This Privacy Policy

We may update this Policy periodically. The “Effective Date” reflects the latest revision. Material changes will be announced on the Site or via e-mail. Continued use of the Services after an update signifies acceptance of the revised Policy.

15. Contact Us

Questions or concerns?

E-mail: privacy@bloomsafe.org

Phone: +1 

Mail: TBD, Washington, DC 20024, USA

By using our Services, you acknowledge you have read and understood this Privacy Policy.