Bloomr Privacy Policy

Privacy Policy

Last updated: 26 August 2026

1. Who we are

BLOOMR HEALTH & WELLNESS LTD (“Bloomr”, “we”, “us” or “our”) operates bloomr.co.uk and is responsible for the personal information described in this policy. Bloomr is registered in England and Wales under company number 16574457. Our registered office is Flat 2-3, 2 Claremont Grove, Manchester, England, M20 2GL. You can contact us about privacy at [email protected].

2. What this policy covers

This policy explains how Bloomr collects, uses, shares and protects personal information when people browse the website, create an account, apply for professional membership, subscribe, purchase an event ticket, create content, communicate with others, use the Progress Log or contact us.

Bloomr accounts are for people aged 18 or over. Bloomr does not knowingly provide accounts to children.

3. Information we collect

Account and profile information

This may include your name, email address, username, password credentials in protected form, age or confirmation that you are aged 18 or over, general location, profile photograph, biography, interests, preferences and other information you choose to add to your profile.

Professional applications and verification

Professional applicants may provide identity evidence, qualifications, registrations, accreditations, insurance details, experience, scope of practice, organisation details, application answers and supporting correspondence. We may record verification decisions, evidence expiry dates and relevant restrictions or concerns notified to us or identified through appropriate checks.

Platform activity and communications

We process information generated when you use Bloomr, including connections, posts, comments, reactions, groups, forums, messages, event activity, ratings, reviews, reports and content you upload. Information you publish publicly can be seen and copied by other people. Direct messages are intended for their participants, although Bloomr may access relevant information where reasonably necessary to investigate a report, protect users, secure the Platform or comply with law.

Progress Log information

The Progress Log contains only information a member chooses to enter about their activities, goals, wellbeing, measurements, achievements or progress. Bloomr does not access or import NHS records or clinical records through the Progress Log. It is not an NHS or clinical record.

Some optional entries may reveal information about physical or mental health and may therefore receive additional legal protection as health data. Progress Log information is private by default unless the member deliberately chooses to share selected information with another person.

Payments and transactions

We process information about professional subscriptions and event purchases, including the plan or ticket purchased, price, date, payment status, refunds and payment identifiers. Payments are handled through an authorised payment provider. Bloomr does not need to store complete payment-card details where those details are processed by the payment provider.

Technical and usage information

This may include IP address, device and browser information, login and security records, pages and features used, searches, clicks, referral source, session information, performance data and cookie or consent choices.

Support, safety and legal information

We may process enquiries, complaints, reports, moderation evidence and decisions, appeals, suspected misuse and information needed to establish, exercise or defend legal claims or respond to lawful requests.

4. How we use personal information

We use personal information only where we have a lawful reason. Depending on the circumstances, we use it to:

  • create and administer accounts, provide Platform features and respond to support requests;
  • review professional applications, check relevant evidence and operate the Bloomr Verified Standard;
  • process subscriptions, event payments, confirmations, cancellations and refunds;
  • enable profiles, professional discovery, connections, messages, posts, groups, forums, events, ratings and reviews;
  • store Progress Log information and carry out a member’s chosen sharing instructions;
  • secure the Platform, prevent fraud and misuse, protect review integrity and investigate reports;
  • comply with legal obligations, enforce our Terms and manage complaints and legal claims;
  • understand and improve Platform performance and user journeys; and
  • send service communications and, where permitted, marketing communications.

Our principal lawful bases are performance of a contract, steps requested before entering a contract, compliance with legal obligations, and our legitimate interests in operating, securing and improving Bloomr. We rely on consent where the law requires it, including for optional marketing or non-essential cookies where applicable.

5. Optional health-related information

Not every fitness, activity or progress metric is necessarily health data. However, an entry may be health data where it reveals something about a person’s physical or mental health. Where explicit consent is the appropriate condition for processing such information, Bloomr will request that consent separately and record it. You can withdraw consent through the available settings or by contacting [email protected]. Withdrawal does not affect processing that was lawful before withdrawal, but it may prevent the relevant feature from continuing.

Do not enter information about another identifiable person unless you have authority and a lawful reason to do so. Professionals receiving information through Bloomr must also meet their own confidentiality, professional and data-protection responsibilities.

6. Sharing information

We may share personal information only as reasonably necessary with:

  • other users or the public, according to the feature and the visibility or sharing choices you make;
  • people with whom you deliberately share Progress Log information;
  • event organisers where necessary to administer a purchase or attendance;
  • suppliers providing hosting, security, email, support, analytics and payment services under appropriate contractual protections;
  • professional registers, awarding bodies, insurers or verification sources where a check is appropriate and lawful;
  • professional advisers, insurers, regulators, courts, emergency services and law-enforcement bodies where lawful and necessary; and
  • a prospective purchaser, investor or successor where reasonably necessary for a genuine corporate transaction and subject to appropriate confidentiality and legal safeguards.

Bloomr does not sell personal information. Professionals and event organisers may act as separate controllers for information they receive when providing their own services, and their own privacy information may apply.

7. International processing

Some service providers may process information outside the United Kingdom. Where required, we use an applicable adequacy decision, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard, together with supplementary protections where appropriate. You may contact us for further information about the relevant safeguards.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, taking account of its nature, sensitivity, risk and applicable legal, accounting, safety and dispute requirements.

  • Account and profile information is generally kept while the account remains active and for a limited period afterwards where needed for closure, security, disputes or legal obligations.
  • Progress Log information is kept until the member deletes it or closes the account, subject to normal backup cycles and any lawful preservation requirement.
  • Professional verification and transaction records may be retained during the relationship and afterwards where required for tax, complaints, safety, regulatory matters or legal claims.
  • Reports and moderation records are retained for as long as reasonably necessary to address safety, repeated misuse, complaints, appeals and legal duties.

When information is no longer required, we delete or anonymise it.

9. Security

We use proportionate technical and organisational safeguards designed to protect personal information. These include access controls, restricted administrative access, secure transmission, supplier controls, backups, monitoring and incident procedures. No internet service is completely risk-free, so users must also protect their login details and report suspected unauthorised access promptly.

10. Your choices and rights

Depending on the circumstances, you may have the right to be informed, request access, correct inaccurate information, request deletion, restrict processing, object to processing, receive portable information, withdraw consent and challenge a decision made solely by automated means that has a legal or similarly significant effect. Bloomr does not intend to make such significant decisions solely by automated means.

To exercise a right, email [email protected]. We may ask for information needed to verify your identity. You may also complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first.

11. Marketing and cookies

You can unsubscribe from marketing using the link in the message or by contacting us. Account, payment, security and service messages are not marketing. Where cookies or similar technologies require consent, Bloomr will provide controls allowing users to accept, reject or change non-essential cookie choices. A separate Cookie Policy will be published once the production website’s technologies have been confirmed and accurately inventoried.

12. Changes and contact

We may update this policy when the Platform, our practices or legal requirements change. The current version and its effective date will be published on Bloomr. We will provide appropriate notice where a change is material.

Questions, requests and complaints should be sent to [email protected].