Privacy Policy

Privacy Policy

Last updated: February 2026

Eunoia Bloom (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit eunoiabloom.com.

1. Data Controller

Eunoia Bloom
Email: admin@eunoiabloom.com

2. Server Location

This website is hosted on servers located in Germany.

3. Data We Collect

• Purchase and transaction data: When you make a purchase (via WooCommerce or Easy Digital Downloads), we collect your name, email, billing address, and payment information. Payment is processed by third-party payment processors; we do not store credit card details.
• Course enrollment data: When you enrol in a course (LearnPress), we collect your account details and track course progress.
• Contact form submissions: Via Contact Form 7 and WPForms, we collect your name, email, and message.
• Newsletter subscriptions: When you subscribe via MailPoet, we collect your email address and consent preferences.
• Analytics data: We use Google Analytics (via Google Site Kit) to collect anonymized usage data.
• Social sharing interactions: AddToAny may collect data about shared content.
• Server logs: IP address, browser type, operating system, and visit timestamps.
• Cookies: See our Cookie Policy.

4. Legal Basis for Processing (GDPR Art. 6)

• Consent (Art. 6(1)(a)): For marketing, analytics, newsletter subscriptions, and non-essential cookies.
• Contract performance (Art. 6(1)(b)): For processing purchases, digital downloads, and course enrolments.
• Legitimate interest (Art. 6(1)(f)): For website security (Wordfence) and fraud prevention.
• Legal obligation (Art. 6(1)(c)): For retaining transaction records as required by German tax law.

5. Third-Party Services

• Google Analytics (Google LLC) — Website usage statistics.
• AddToAny — Social sharing functionality.
• MailPoet — Newsletter email delivery.
• Payment processors — Payment data for WooCommerce and Easy Digital Downloads transactions is handled by third-party payment gateways (e.g., PayPal, Stripe). Refer to their respective privacy policies.

6. International Data Transfers

• Google LLC — United States, under the EU-US Data Privacy Framework.
• AddToAny — United States, under the EU-US Data Privacy Framework.

These transfers are safeguarded by the EU-US Data Privacy Framework, ensuring adequate data protection as recognized by the European Commission.

7. Data Retention

• Transaction records: 10 years (German tax law requirements).
• Course data: For the lifetime of your account; deleted upon account deletion request.
• Newsletter subscriptions: Until you unsubscribe.
• Contact form submissions: 1 year, then securely deleted.
• Analytics data: Per Google Analytics retention settings.
• Server logs: 30 days, then automatically purged.

8. Your Rights (GDPR Art. 13–22)

• Access (Art. 15): Request a copy of your personal data.
• Rectification (Art. 16): Correct inaccurate data.
• Erasure (Art. 17): Request deletion, subject to legal obligations (e.g., tax records).
• Restriction (Art. 18): Restrict processing under certain circumstances.
• Portability (Art. 20): Receive your data in a machine-readable format.
• Objection (Art. 21): Object to processing based on legitimate interest.

To exercise these rights, contact admin@eunoiabloom.com.

9. Right to Lodge a Complaint

Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Str. 153
53117 Bonn, Germany

10. Changes to This Policy

We may update this policy from time to time. The date at the top indicates the most recent revision.

11. Contact

Email: admin@eunoiabloom.com