Privacy Policy

Nordic Bloom (Pty) Ltd ("Nordic Bloom", "we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and all other applicable South African privacy legislation.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Nordic Bloom Platform. By using our Platform, you consent to the practices described herein.

The responsible party for your personal information as defined under POPIA is:

Nordic Bloom (Pty) Ltd
Email: info@nordicbloom.co.za
Republic of South Africa

We may collect the following categories of personal information:

• Identity Information: Full name, date of birth, South African ID number or passport number.
• Contact Information: Email address, phone number, residential and postal address.
• Verification Documents: ID document (front and back), proof of address, and verification selfie, collected solely for membership verification and FICA/age compliance purposes.
• Account Information: Login credentials, membership tier, and account preferences.
• Transaction Information: Order history, purchased products, and payment references.
• Technical Information: IP address, browser type, device identifiers, and usage data collected automatically via cookies and analytics tools.

We process your personal information for the following lawful purposes:

• To verify your identity and age for membership approval;
• To process and fulfil your orders;
• To manage your account and provide customer support;
• To comply with applicable legal obligations, including POPIA and relevant regulatory requirements;
• To communicate with you regarding your account, orders, or membership status;
• To improve and maintain the Platform and our services;
• To send you marketing communications where you have provided your explicit consent (you may opt out at any time).

We process your personal information on the following grounds under POPIA:

• Consent: Where you have provided express consent;
• Contractual necessity: Where processing is necessary to fulfil our obligations to you;
• Legal obligation: Where we are required to process information by law;
• Legitimate interest: Where processing is necessary for our legitimate business interests, provided these do not override your rights.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction, in accordance with POPIA. Identity documents and verification materials are stored in encrypted private storage and are accessible only to authorised personnel.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Once no longer required, personal information is securely deleted or anonymised.

We do not sell your personal information. We may share your information with:

• Service providers: Third-party vendors who assist us in operating the Platform (e.g. hosting, payment processing, courier services), all bound by confidentiality and data processing agreements;
• Legal authorities: Where required by law, court order, or regulatory authority;
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred subject to equivalent privacy protections.

Where personal information is transferred outside South Africa, Nordic Bloom will ensure that adequate protections are in place in accordance with Section 72 of POPIA, including obtaining consent or ensuring the recipient country provides an equivalent level of protection.

As a data subject under POPIA, you have the right to:

• Be notified of the collection and use of your personal information;
• Access the personal information we hold about you;
• Request correction or deletion of inaccurate or incomplete information;
• Object to the processing of your personal information;
• Withdraw consent at any time (where processing is based on consent);
• Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise any of these rights, contact us at info@nordicbloom.co.za.

The Platform may use cookies and similar tracking technologies to enhance your experience, analyse usage, and deliver relevant content. You may control cookie settings through your browser; however, disabling certain cookies may affect Platform functionality.

To the fullest extent permitted by law, Nordic Bloom shall not be liable for any loss or damage arising from unauthorised access to or breaches of your personal information where we have implemented reasonable security measures in accordance with POPIA. We do not accept liability for the privacy practices of third-party websites linked from our Platform.

We may update this Privacy Policy from time to time. Changes will be posted on the Platform with a revised effective date. Your continued use of the Platform constitutes acceptance of the updated Policy.

For privacy-related queries, requests, or complaints, please contact our Information Officer:

Nordic Bloom (Pty) Ltd, Information Officer
Email: info@nordicbloom.co.za
Republic of South Africa

You also have the right to lodge a complaint with the Information Regulator of South Africa:
www.inforegulator.org.za