Privacy Policy

1. Introduction

Solar Bloom Limited ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website solar-bloom.com (the "Service") or use our digital art platform.

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Profile information and preferences
• Payment information (processed securely through third-party providers)
• Communications you send to us

2.2 Automatically Collected Information

When you visit our Service, we may automatically collect certain information, including:

• IP address and geolocation data
• Browser type, version, and operating system
• Pages visited and time spent on our Service
• Referral URLs and search terms
• Device information and unique identifiers

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience. You can control cookie preferences through our cookie management system or your browser settings.

3. How We Use Your Information

We use the collected information for various purposes, including:

• Providing, maintaining, and improving our Service
• Processing transactions and managing your account
• Communicating with you about our services, updates, and promotions
• Personalising your experience and content recommendations
• Analysing usage patterns and improving our platform
• Preventing fraud and ensuring platform security
• Complying with legal obligations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing our agreement with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, including:

• Cloud hosting and storage services
• Payment processing providers
• Email and communication services
• Analytics and marketing platforms

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Protect the safety of our users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions for specific countries
• Certification schemes and codes of conduct

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary based on:

• The type of information collected
• The purpose for which it was collected
• Legal and regulatory requirements
• Our legitimate business interests

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

9.1 GDPR Rights (EU/UK Residents)

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing activities
• Right to Data Portability: Request transfer of data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for specific processing activities

9.2 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframes required by applicable law.

10. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 years of age in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete such information.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Regulatory Authority

If you are located in the EU or UK and believe we have not adequately resolved a privacy concern, you have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• EU: Your local Data Protection Authority