Privacy Policy

Effective date: January 21, 2026

At Bloom Insurance Agency, LLC (“Bloom,” “we,” “us,” or “our”), we are committed to protecting your privacy. This Privacy Policy (“Policy”) describes how we collect, use, disclose, and otherwise process personal information not regulated by HIPAA when you interact with Bloom, including when you visit our website, use our online services, or contact us through other means (collectively, the “Services”).

This Policy does not apply to your Protected Health Information (“PHI”) that is governed by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). For information on our use and disclosure of PHI, our legal duties with respect to your PHI, and your rights with respect to your PHI and how to exercise them, please refer to our Notice of Privacy Practices.

For additional information about your privacy rights as a resident of certain U.S. states, including California, please refer to the “Your Privacy Rights” section below.

From time to time, we may update this Policy. If we make material changes, we will revise the date at the top of the Policy.

Personal Information Collection

We collect personal information from various sources, including information that you provide to us directly through our Services and other communications, as well as information we collect automatically when you access our Services.

Information you provide directly:

  • Information you provide via our contact form, such as your name, email address, and phone number
  • Records of your communications with us via email or other channels

Information collected automatically:

  • Website usage data, such as pages visited, time spent on the site, and approximate geographic location, collected via Google Analytics
  • Information recorded by our web servers, including your IP address, browser type, and pages visited
  • Cookie data to support website functionality and remember your preferences

Information from social media:

  • If you interact with us through Facebook, LinkedIn, or other social media platforms, those platforms may share limited information with us, such as your profile name, interaction type (like/comment), or other publicly available data.

Children’s Privacy

Our website and services are not directed to children nor intended for use by anyone under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will remove it promptly.

How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and provide customer support
  • To analyze our own website performance and improve our Services
  • To protect against fraud and unauthorized access
  • To comply with legal obligations and enforce our agreements
  • To send you marketing communications and updates, if you have opted in

Who We Share Your Information With

We disclose your information to:

  • Service providers who perform functions on our behalf, including web hosting, email services, and analytics
  • Marketing and advertising partners who assist with our promotional activities
  • Social media platforms that you use to engage with our content
  • Law enforcement and government agencies when required by law

We do not sell or rent your personal information to third parties.

Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Enable website functionality
  • Remember your preferences
  • Analyze website usage through Google Analytics

When you visit our website, you may see a cookie banner that allows you to accept or reject certain categories of cookies. Your selections will guide how non-essential cookies are used. You can manage cookies through your browser settings. Most browsers allow you to refuse cookies or receive notifications when cookies are being sent. Note that disabling cookies may affect website functionality.

Third-party services:

We may use third-party platforms such as Google Analytics, Facebook, and LinkedIn to understand website usage and deliver advertising. These platforms may collect information via cookies or similar technologies. You can manage your preferences or opt out as described below.

  • Google Analytics: You can find out more about opting out at support.google.com/analytics/answer/6004245 or by installing the Google Analytics opt-out browser add-on.
  • Facebook and LinkedIn: We may use these platforms to deliver ads or track ad performance. You can control your ad preferences directly through those platforms

Your Choices

Marketing communications: You can unsubscribe from marketing emails by clicking the “unsubscribe” link in any email or by contacting us.

Cookies: You can adjust your browser settings to reject cookies or alert you when cookies are being sent.

Targeted advertising on third-party platforms: You can opt out through:

Data Retention

We retain your personal information for only as long as needed to:

  • Provide our Services
  • Comply with legal requirements
  • Resolve disputes and enforce agreements

Security

We implement reasonable technical, organizational, and administrative measures to protect your information against unauthorized access and loss. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Reporting Security Incidents

Bloom is committed to maintaining the security and privacy of all information entrusted to us. If you are a vendor, customer, business partner, or other third party and become aware of a suspected or confirmed security incident, privacy breach, or vulnerability involving Bloom or its systems, please report it immediately to our Security team at [email protected]. When reporting, please include a description of the incident, the date and time it was discovered, any systems or data potentially affected, and your contact information for follow-up. All reports will be promptly investigated in accordance with our Incident Response procedures.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Right to Know: You may request information about what personal information we collect, where it comes from, and how we use it.
  • Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
  • Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
  • Right to Opt Out: You may opt out of marketing communications and targeted advertising on third-party platforms.
  • Right to Data Portability: You may request a copy of your personal information in a portable format.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights

To exercise any of these rights, contact us at: [email protected]
We will verify your identity and respond within 45 days (or as otherwise required by law). We may request additional information to confirm your identity before processing certain requests.

California residents also have the right to request information about how we share personal information with third parties for their direct marketing purposes.

California Privacy Rights (CCPA/CPRA)

California residents have the following additional rights:

  • Request the categories of personal information we collect and the categories of third parties with whom we share it
  • Request deletion of your personal information (with certain exceptions)
  • Request correction of inaccurate personal information
  • Request to opt out of the “sale” or “sharing” of your personal information, as defined under California law, for purposes of targeted advertising on third-party platforms

We do not sell or share personal information of consumers under 16 years of age.

Other State Privacy Rights

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Mississippi, Montana, New Hampshire, New Jersey, Tennessee, Texas, Utah, Virginia, and other states with privacy laws have similar rights. We honor the privacy rights of individuals in all states with applicable privacy laws and provide similar rights where required.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: [email protected].

We will respond to all inquiries in accordance with applicable law.