Privacy Policy — HerBloom (SBK SOLUTIONS) Version: August 11, 2026

This Privacy Policy explains how SBK SOLUTIONS ("we", "our", "us") collects, uses, shares, and protects your personal information when you visit and interact with www.try-herbloom.com (the "Site"). We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the French Data Protection Act (Loi Informatique et Libertés), and — for California residents — the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

By using this Site, you agree to the terms described in this Privacy Policy.

1. Data Controller

SBK SOLUTIONS (SASU) SIREN: 934110636 Registered Address: Chemin des Brosses, 53410 France Email: hello@try-herbloom.com

We are the entity responsible for collecting and processing your personal information.

2. Information We Collect

We may collect the following categories of personal data:

Identity Information: First name, last name Contact Information: Email address, billing address, shipping address, phone number Transaction Information: Order details, payment method (processed via secure third parties) Technical Information: IP address, browser type, device type, operating system Usage Information: Pages viewed, time spent, interaction with the Site Marketing & Communication Preferences: Newsletter subscription status, campaign interactions User-Generated Content: Reviews, testimonials, comments, or messages you voluntarily provide

We do not intentionally collect sensitive or special-category data.

3. How We Collect Information

We collect your information when you:

Place an order on our Site Create an account or profile Subscribe to our newsletter or marketing emails Participate in a survey, giveaway, or promotion Contact customer service Browse or interact with our ads and website through cookies, analytics, and tracking pixels

4. Legal Bases for Processing

We collect and process personal information under the following legal bases:

Performance of a contract: To process and deliver your order Consent: For optional marketing communications or newsletter subscriptions Legal obligation: To comply with tax, accounting, and consumer protection laws Legitimate interest: To improve our products, detect fraud, and secure transactions

You can withdraw your consent at any time by contacting us at hello@try-herbloom.com.

5. How We Use Your Information

We use your information to:

Process, fulfill, and deliver your orders Communicate order confirmations, shipping updates, and support messages Provide personalized recommendations and product updates Improve website functionality and customer experience Send marketing or promotional emails (only if you opted in) Prevent fraud and maintain security of payments and accounts Comply with applicable laws and regulations

6. Sharing Your Information

We share your personal data only when necessary to operate our business, with:

Payment processors: (e.g., Stripe, PayPal) for secure transaction processing Shipping and logistics providers: for order delivery and returns Marketing platforms: (e.g., Klaviyo) for opt-in newsletters and campaigns IT and infrastructure partners: (e.g., Shopify, analytics tools, hosting providers) Legal authorities: if required by law, subpoena, or court order

All service providers are contractually obligated to protect your data and use it only for authorized purposes.

7. International Data Transfers

We are established in France, and your data is primarily processed within the European Economic Area (EEA). Some of our service providers (for example, Shopify, Stripe, Klaviyo, and advertising or analytics partners) are located outside the EEA and the United Kingdom, including in the United States. When we transfer personal data outside the EEA/UK, we ensure that adequate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission, and the UK International Data Transfer Addendum where applicable Transfers to countries recognized as providing an adequate level of protection Data Processing Agreements with each of our vendors

8. Data Retention

We retain your personal information:

For as long as necessary to fulfill your order or provide services For the period required by law (e.g., tax and accounting records are kept for the legally mandated period) Until you request deletion, where applicable and not overridden by a legal obligation

Once data is no longer needed, we securely delete or anonymize it.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal data:

Under the GDPR / UK GDPR (EU, EEA, and UK residents):

Right of access Right to rectification Right to erasure ("right to be forgotten") Right to restrict processing Right to object to certain uses (e.g., marketing) Right to data portability Right to withdraw consent

Under CCPA/CPRA (California residents):

Right to know what personal data we collect and how we use it Right to request deletion of your data Right to opt-out of the sale or sharing of your information Right to non-discrimination for exercising privacy rights

To exercise any of these rights, contact us at hello@try-herbloom.com. We may request identity verification before processing your request.

If you are not satisfied with our response, you may lodge a complaint with a data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr. In the UK, you may contact the Information Commissioner's Office (ICO) at www.ico.org.uk. EEA residents may also contact their local supervisory authority.

10. Data Security

We implement strict measures to protect your information, including:

SSL encryption on all transactions Restricted access to personal data PCI-DSS compliance for payment processing Regular monitoring and security audits

However, please note that no system is completely secure. You should always use caution when sharing information online.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enable core site functions (shopping cart, login) Measure analytics (e.g., Google Analytics, Meta Pixel) Deliver relevant ads and marketing messages Remember your preferences across sessions

Non-essential cookies (analytics and advertising) are only placed with your consent. You can manage your cookie preferences via our on-site cookie banner or your browser settings. For more details, please refer to our Cookie Policy.

12. SMS / MMS Text Message Marketing Program Privacy

Your privacy is extremely important to us. We will only use the information you provide through our SMS/MMS Program to transmit your mobile messages and respond to you when necessary. This may include sharing information with platform providers, mobile carriers, and vendors who assist us in the delivery of such messages.

We do not sell, rent, loan, trade, lease, or otherwise transfer for profit any phone numbers or customer information collected through the SMS/MMS Program to any third party.

We may, however, disclose information if required to comply with any applicable law, regulation, or governmental request, to prevent liability, or to protect our rights or property.

When you provide information related to the Program, you agree to provide accurate, complete, and truthful information. If we believe, in our reasonable discretion, that the information provided is inaccurate, incomplete, or used for improper purposes, we may refuse your access to the Program.

13. Contact

For any questions, requests, or concerns related to this Privacy Policy or your personal data, please contact:

📩 hello@try-herbloom.com 🌐 www.try-herbloom.com

— SBK SOLUTIONS (SASU) SIREN: 934110636 Chemin des Brosses, 53410 France