Privacy Policy

Last updated: November 7, 2026

Gilded Bloom ("we", "us") runs this online store from Brampton, Ontario, Canada. This policy explains what personal information we collect when you visit or buy from us, why, who we share it with, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for customers in Quebec, the Act respecting the protection of personal information in the private sector (Law 25).

What we collect

Order details: your name, shipping and billing address, email, phone number (if given), the items you bought, and any name or text you ask us to engrave.
Payment details: handled by Shopify Payments and our payment processors. We never see or store your full card number.
Messages: anything you send us by email or the contact form, including photos you share about an order.
Device and usage data: IP address, browser type, pages viewed and how you reached our site, collected through cookies (see our Cookies & advertising page).
Marketing preferences: your email address and consent if you join our newsletter.

Why we use it

To make, ship and track your order, and handle returns, remakes and refunds.
To answer your questions and give customer support.
To send newsletters and offers, only if you've agreed. Every email has an unsubscribe link.
To keep the store secure, prevent fraud, and meet our legal and tax obligations.
To understand how the site is used and improve it.

Who we share it with

Our production and shipping partners. Our jewellery is made and shipped by partner workshops outside Canada, mainly in China. To make and deliver your order we share your name, shipping address, phone number (if given) and the personalization text with them. They use it only to fulfil your order.
Shopify, which hosts our store and processes payments. See Shopify's privacy policy.
Carriers such as China Post, Cainiao, Canada Post and USPS, to deliver and track parcels.
Email and advertising tools (for example Shopify Email and, if you allow advertising cookies, Meta), only as described on our cookies page.
Authorities, when the law requires it.

We do not sell your personal information.

Information stored outside Canada

Because our partners and service providers are located in other countries, including China and the United States, your information may be stored and processed outside Canada and may be accessible to authorities there under local law. We choose partners who agree to protect it and use it only for the purpose we give them.

How long we keep it

We keep order records for seven years to meet Canadian tax requirements. Newsletter data is kept until you unsubscribe. Support messages are kept for two years after your last order. After that we delete or anonymize it.

Your rights

You can ask to see the personal information we hold about you, correct it, ask us to delete it (where the law allows), withdraw your consent to marketing at any time, or ask how it has been used and shared. Quebec residents also have the right to data portability and to be informed of automated decisions. We'll reply within 30 days and may need to confirm your identity first.

Children

Our store isn't intended for anyone under 16, and we don't knowingly collect their information.

Security

We use Shopify's secure, encrypted checkout and limit access to your information to people who need it to run the store. No system is perfectly secure; if a breach creates a real risk of significant harm, we'll notify you and the Office of the Privacy Commissioner of Canada as the law requires.

Questions and complaints

Our privacy contact is the Gilded Bloom owner, reachable at admin@tinydisplays.ca or by mail at Gilded Bloom, Brampton, ON, Canada. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.