BloomynestPrivacy Policy

Welcome to Bloomynest.

Bloomynest ("Bloomynest", "we", "our", or "us") operates an on-demand platform for space improvement and property services. Our services include painting, waterproofing, false ceilings, wallpaper installation, thermal scanning, cleaning, carpentry, and other property-related services offered through our website, mobile application, and associated digital platforms.

Our platform serves residential customers, housing societies, commercial establishments, offices, warehouses, industrial facilities, and other property owners or managers.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you access our website, use our application, request a quotation, book a service, make a payment, contact our support team, or otherwise interact with Bloomynest.

We are committed to handling personal information responsibly and in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the rules and notifications applicable to it, and other applicable privacy and consumer protection requirements.

By using our platform, you acknowledge that you have read this Privacy Policy. Where consent is legally required, we will request it separately and explain the relevant purposes.

Depending on how you use Bloomynest, we may collect the following categories of information.

2.1 Personal and Contact Information

When you register, submit an enquiry, or book a service, we may collect:

• Full name.
• Mobile number.
• Email address.
• Service address and postal code.
• City and preferred service location.
• Billing address, where applicable.
• Business or organisation name and designation, where applicable.

2.2 Account Information

If you create an account, we may collect:

• Login credentials or authentication information.
• Account identifiers and profile details.
• Registration and account activity information.
• Communication preferences.
• Account status and service history.

Passwords, where used, should be stored securely using appropriate password-hashing methods rather than in readable form.

2.3 Property and Service Information

To understand and fulfil your requirements, we may collect:

• Property type, such as apartment, bungalow, housing society, office, warehouse, or industrial facility.
• Property size and relevant measurements.
• Type of service requested.
• Areas requiring painting, waterproofing, cleaning, repairs, or other work.
• Project scope, estimated budget, and preferred schedule.
• Photographs, videos, and documents voluntarily provided for assessment.
• Site inspection details and technical observations.
• Quotations, work orders, invoices, and service-related records.

Please avoid uploading unnecessary personal, confidential, or sensitive information about yourself or other people.

2.4 Location Information

We may collect your selected city, postal code, service address, or other location information needed to determine service availability and arrange appointments.

If our website or application requests access to your device's precise location, that access should be subject to the relevant device permission and applicable consent requirements.

You can manage location permissions through your device settings. However, restricting location information may affect features that depend on identifying your service area.

2.5 Booking, Payment, and Transaction Information

When you book a service or make a payment, we may process:

• Booking and appointment details.
• Order or service reference numbers.
• Service charges, taxes, discounts, and applicable fees.
• Payment status, transaction references, and refunds.
• Invoice and billing information.
• Records of cancellations, disputes, and payment-related enquiries.

Online payments may be processed by third-party payment gateways.

Bloomynest should not collect or store full payment card details, card security codes, UPI PINs, or banking passwords unless a specific lawful and compliant payment arrangement permits it. Payment authentication should ordinarily take place through the relevant payment provider.

2.6 Communications and Customer Support

When you contact us, we may collect and retain information contained in:

• Customer support enquiries.
• Emails and contact forms.
• Telephone or WhatsApp communications.
• Complaints, feedback, and service requests.
• Appointment confirmations and follow-up messages.
• Records of consent and communication preferences.

If Bloomynest uses WhatsApp Business API providers or customer communication platforms, relevant information may be processed through those services to deliver communications.

2.7 Device and Technical Information

When you use our website or application, certain technical information may be collected, including:

• IP address.
• Browser and device type.
• Operating system and application version.
• Access timestamps and log records.
• Pages viewed and interactions with platform features.
• Diagnostic information and error logs.
• Cookie identifiers and similar technologies, where used.

We use this information for platform operation, troubleshooting, security, performance improvement, and other disclosed purposes.

Bloomynest uses personal information only for specified and legitimate purposes, subject to applicable legal requirements.

These purposes may include:

1. 1Account management: Creating and maintaining user accounts.
2. 2Service bookings: Receiving requests, scheduling appointments, and managing service orders.
3. 3Service delivery: Understanding project requirements and coordinating the delivery of requested services.
4. 4Quotations and inspections: Preparing estimates, arranging site inspections, and documenting property conditions.
5. 5Payments and refunds: Processing transactions, issuing invoices, and resolving payment issues.
6. 6Customer support: Answering questions, handling complaints, and providing service updates.
7. 7Notifications: Sending booking confirmations, appointment reminders, invoices, and important service communications.
8. 8Platform improvement: Analysing usage patterns, fixing errors, and improving the user experience.
9. 9Security and fraud prevention: Detecting suspicious activity, protecting accounts, and investigating misuse.
10. 10Legal and regulatory compliance: Maintaining required records and responding to lawful requests.
11. 11Marketing: Sending promotional offers or service updates where permitted by law and, where required, with your consent.

We will not use personal information for unrelated purposes without an appropriate legal basis or additional consent where required.

Where consent is the applicable legal basis for processing your personal information, we will request consent in a clear and understandable manner.

You should be able to understand what information is being collected, why it is needed, and how to withdraw consent.

You may withdraw consent through the available account settings, communication preferences, or the contact details provided in this policy. Where consent was obtained through another channel, we will provide an appropriate withdrawal mechanism.

Withdrawing consent does not invalidate processing lawfully completed before withdrawal. It may also prevent us from providing services that genuinely require the relevant information.

Where we need to retain information to meet a legal obligation or establish, exercise, or defend a legal claim, we will handle that information in accordance with the applicable law.

Marketing communications may be stopped using the unsubscribe or opt-out mechanism provided in the communication, where available.

Bloomynest may use cookies, local storage, and similar technologies to:

• Keep users signed in.
• Maintain essential website functionality.
• Remember selected preferences.
• Understand website performance.
• Diagnose technical problems.
• Measure engagement and improve platform usability.
• Support advertising or marketing measurement, if implemented.

Essential technologies may be necessary for the website or application to function.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

You may manage cookies through your browser settings. Disabling certain cookies may affect some website features.

If Bloomynest uses analytics, advertising pixels, or third-party tracking tools, the deployed tools and their purposes should be disclosed appropriately.

Bloomynest does not sell personal information to third parties for their independent marketing purposes.

We may share relevant information with the following categories of recipients when necessary and legally permitted.

6.1 Service Delivery and Operations

Information may be shared with personnel, operational teams, or other authorised persons involved in delivering the services you request.

For example, property photographs, site details, and appointment information may be used by the relevant team to assess and complete a painting or waterproofing project.

6.2 Payment Service Providers

Payment information necessary to process a transaction may be shared with the applicable payment gateway, bank, or payment service provider.

These providers may independently process certain information under their own terms and privacy policies.

6.3 Technology and Hosting Providers

We may use third-party providers for:

• Website and application hosting.
• Cloud storage and infrastructure.
• Database management.
• Security and technical support.
• Email and SMS delivery.
• Customer communication and WhatsApp messaging.
• Analytics and application monitoring.

These providers should receive only the information reasonably required for their assigned functions and should be subject to appropriate contractual and security safeguards.

6.4 Business and Enterprise Customers

Where a service is requested by or on behalf of a housing society, company, commercial establishment, or other organisation, relevant information may be shared with authorised representatives to coordinate the requested work, subject to applicable law and the agreed service arrangement.

6.5 Legal and Regulatory Requirements

We may disclose information where reasonably necessary to comply with applicable law, a valid court order, a lawful government request, or to protect our legal rights and the safety of users.

6.6 Business Transfers

If Bloomynest undergoes a merger, acquisition, restructuring, or sale of business assets, relevant information may be transferred as part of the transaction, subject to applicable legal requirements and appropriate safeguards.

We do not authorise third parties to use personal information obtained through Bloomynest for unrelated purposes merely because they have access to it.

Certain Bloomynest services may involve thermal scanning, property inspections, photographs, videos, or technical reports.

Where applicable, we may collect and process this information to:

• Assess the condition of the relevant property.
• Identify and document possible moisture or other property-related issues.
• Prepare and deliver a technical report.
• Provide a requested quotation or service recommendation.
• Maintain service records and resolve related disputes.

Reports may contain property images, inspection observations, measurements, and technical findings.

Where a report is provided through a paid service, access may be restricted to authorised users according to the applicable service terms. Payment-based access controls do not remove our obligations to protect personal information.

We will not use identifiable customer property images or reports for public marketing without an appropriate legal basis and consent where required.

We take reasonable measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, and misuse.

Depending on the nature of the information and the risks involved, these measures may include:

• Access controls and role-based permissions.
• Encryption where appropriate.
• Secure authentication and password storage.
• Security monitoring and system logging.
• Backups and recovery procedures.
• Appropriate contractual safeguards for service providers.
• Internal procedures for handling suspected security incidents.

No website, application, or electronic transmission can be guaranteed to be completely secure.

Retention of Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by applicable law.

Retention periods may depend on:

• Whether your account remains active.
• Whether a service booking or payment is pending.
• Applicable accounting and tax requirements.
• The need to resolve complaints or disputes.
• Security and fraud-prevention requirements.
• Legal claims and regulatory obligations.

When personal information is no longer required, we will take appropriate steps to delete it or otherwise dispose of it securely, subject to applicable legal requirements and legitimate retention needs.

We do not promise indefinite retention or immediate deletion where a lawful retention obligation applies.

If Bloomynest becomes aware of a personal data breach, we will assess and respond to it in accordance with applicable law.

Depending on the nature of the incident and the legal requirements in force, this may include taking steps to contain the incident, investigate its impact, mitigate harm, and notify affected individuals or the relevant authorities within applicable timelines.

We encourage users to report suspected account compromise, unauthorised access, or other privacy concerns through our official contact channels.

Subject to the laws applicable to your information and the relevant provisions in force, you may have rights to:

• Obtain information about the personal data being processed.
• Request correction of inaccurate or incomplete personal information.
• Request completion or updating of information where applicable.
• Request deletion of personal information where legally permissible.
• Withdraw consent where processing is based on consent.
• Raise a grievance regarding the processing of personal information.
• Nominate another person to exercise specified rights in circumstances permitted by law.
• Seek applicable remedies through the legally prescribed mechanisms.

To exercise these rights, contact us using the details provided in the Contact and Grievance Redressal section.

We may need to verify your identity before processing a request. If a request cannot be fulfilled because of a legal requirement or another lawful reason, we will respond appropriately and explain the applicable limitation where required.

Bloomynest's services are intended for individuals who are legally able to enter into the relevant service arrangements, and for authorised representatives of businesses and other organisations.

We do not knowingly seek to collect children's personal information except where legally permitted and supported by the applicable requirements.

Where processing children's personal data is subject to parental consent, restrictions on tracking, or other safeguards under applicable law, we will implement the requirements that apply to our processing activities.

If you believe a child has provided personal information to Bloomynest in circumstances that are not permitted, please contact us so that we can review the matter and take appropriate action.

Our platform may contain links to third-party websites, payment gateways, messaging services, or other external platforms.

Those services may have their own privacy policies, security practices, and terms of use.

Bloomynest is not responsible for the privacy practices of independent third parties outside our control. We encourage you to review their applicable policies before providing information directly to them.

This does not exclude any responsibility Bloomynest may have under applicable law for its own actions or obligations.

Bloomynest and its service providers may store or process personal information using systems located in India or other jurisdictions, depending on the infrastructure and providers used.

Where personal information is transferred outside India, Bloomynest will comply with applicable Indian legal requirements, including any restrictions, conditions, or safeguards applicable to such transfers.

We will not represent that all information is stored exclusively in India unless this is factually accurate for the systems used.

We may update this Privacy Policy when our services, technology, business operations, or legal obligations change.

The updated version will be published on our website or application with a revised Last Updated date.

Where required by applicable law, we will provide notice of material changes or obtain fresh consent before undertaking processing that requires it.

We encourage users to review this page periodically.

If you have questions about this Privacy Policy, want to exercise your privacy rights, or wish to raise a grievance concerning personal information, contact Bloomynest using the details below.

Please include sufficient details to help us understand your request. Avoid sending passwords, payment credentials, or unnecessary sensitive information by email.

We will acknowledge and address grievances within the timelines prescribed by applicable law.

Where required by law, we will identify the appropriate grievance contact and provide the applicable process for escalating unresolved complaints.

This Privacy Policy is governed by the laws of India, subject to applicable conflict-of-law principles and any mandatory legal protections available to users.

Nothing in this policy is intended to exclude or restrict any right or remedy that cannot lawfully be excluded or restricted.