Last updated 2 September 2026.
The short version
Official Bloom Babe is a plant-education site run by one person. There are no ads here, no tracking pixels, and I do not sell or share your personal information — not for money, and not for anyone else’s advertising. The only personal detail I ever ask for is your email address, and only if you type it into the form yourself. Everything below is the long version of that.
This policy covers officialbloombabe.com and blog.officialbloombabe.com. Same brand, two different pieces of software, and they behave a little differently — so I’ve said which is which wherever it matters.
What I collect
Things you type in
- Your email address, and whatever you write, if you use the contact form on officialbloombabe.com. That form is part of the Hostinger Website Builder: submissions are stored by Hostinger and emailed to me.
- That form is the only place on either site where you can hand over personal information.
Things collected automatically
- Server logs. My host records your IP address, your browser and device type, which pages you asked for, and when. Every website receives this — it is how a web server answers a request at all.
- Cookies. On officialbloombabe.com, Hostinger sets strictly necessary cookies so the site works, and — only if you agree through the cookie banner — platform analytics cookies that tell Hostinger how the site is being used. Decline, and those analytics cookies are never set. The blog sets no analytics or advertising cookies at all.
What I don’t collect
This is the part most policies skip, so here it is by name. As of the date above, I have checked the code on both sites and none of the following is present:
- No Google Analytics. No Meta or Facebook pixel. No TikTok pixel. No Pinterest tag. None of them run on either site.
- No advertising networks, no retargeting, no cross-site tracking, no device fingerprinting.
- No visitor accounts, no logins, no passwords.
- No payment details. Nothing is sold directly on either site today. When merch launches, checkout will happen on a third party’s system, and I will update this page before that goes live — not after.
- No precise location, and none of the sensitive categories: health, finances, biometrics, ethnicity, or anything like them.
What I do with it, and why I’m allowed to
- To write back to you. Lawful basis under UK and EU GDPR: legitimate interest — you contacted me and are expecting a reply.
- To keep the sites up, quick, and free of abuse. Legitimate interest.
- To get a rough sense of how the site is used, on officialbloombabe.com only, through Hostinger’s platform analytics. Lawful basis: your consent, given through the banner and withdrawable at any time.
That is the whole list. I don’t build profiles on people, and I don’t use your email address for anything you didn’t ask for.
Affiliate links
Some posts link to products on Amazon. Those are affiliate links: if you buy something after clicking one, I may earn a small commission at no extra cost to you. As an Amazon Associate, I earn from qualifying purchases.
Affiliate links here always point at Amazon search results rather than a specific product page, and they are marked in the page’s code as sponsored so search engines and screen readers can tell what they are.
The moment you click one you have left my site, and Amazon’s privacy policy takes over. Amazon may set a cookie so the visit is credited to me. I never see who clicked, what you browsed, or what you bought — only anonymous totals in an Associates dashboard.
Everyone else who touches your data
- Hostinger — hosting and CDN for both sites, plus contact form storage, the cookie banner, and platform analytics on officialbloombabe.com. Server logs for both.
- Google Fonts — one decorative font on the blog loads from Google’s servers, which means Google receives your IP address when the page loads.
- WordPress.org — the blog loads a small emoji script from s.w.org.
- Amazon — only once you click an affiliate link.
The links to TikTok, Instagram, Facebook and Pinterest are ordinary links, not embedded widgets. Those platforms get nothing from you unless you click through.
Where your data goes
Hostinger and Google both operate internationally, so your data may be processed outside the UK and the EEA. Both companies publish the safeguards they rely on for those transfers, including the standard contractual clauses approved by the UK and EU authorities.
How long I keep it
- Contact form messages and email threads: while we are in touch, and up to 24 months afterwards. Then deleted.
- Server logs: rotated by Hostinger on their own schedule — weeks, not years.
- Ask me to delete something sooner and I will.
Your rights
Wherever you live: email me and you can ask what I hold about you, ask for a copy, ask me to correct it, or ask me to delete it. I’ll do it free of charge, within 30 days.
If you’re in California: I do not sell or share your personal information, and never have. There is no “Do Not Sell or Share My Personal Information” link on this site because there is nothing to opt out of. You still have the right to know, to delete, to correct, and not to be treated differently for asking.
If you’re in the UK or the EU: you can withdraw consent to analytics cookies whenever you like through the cookie banner, and you have the right to complain to your data protection authority. In the UK that is the Information Commissioner’s Office at ico.org.uk.
Children
Neither site is aimed at children under 13, and I don’t knowingly collect anything from them. If you think a child has sent me their details, email me and I’ll delete it.
Security
Both sites run over HTTPS. Administrative access is limited to me and protected by strong, unique credentials, and the automated publishing tools use revocable application passwords rather than my account password. No small site can promise perfect security — but there is very little here worth stealing, mostly plant photos and a short list of email addresses.
Changes to this policy
If anything here changes — a newsletter, a shop, an analytics tool — I’ll update this page and change the date at the top before the change goes live.
Contact
Questions, corrections, or a deletion request: officialbloombabe@gmail.com.