Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how Plaster Bloom collects and uses personal information when you visit this site or buy from us.

Who we are (data controller)

Plaster Bloom. Email: productadvice.info@gmail.com.

What we collect

Your email address, when you check out through Shopify, request fresh links at /access for an earlier purchase or contact us.
Order details: the products you bought, prices, date and time, and order status.
Payment information, which is collected and processed by Shopify. We do not see or store your full card number.
Technical data: IP address, browser and device type, pages viewed and actions on the site, collected through cookies and the Meta Pixel.
Server-side event data sent to Meta through the Conversions API, including a hashed (encrypted one way) version of your email address, so that ads can be measured.
Any information you include when you email us.

Why we use it and our legal bases (GDPR)

To process your order, deliver your files and send transactional emails such as your download links (performance of a contract).
To answer your questions and handle refunds (performance of a contract and legitimate interest).
To keep records required by tax and accounting law (legal obligation).
To prevent fraud and keep the site secure (legitimate interest).
To measure and improve our advertising with the Meta Pixel and Conversions API (consent where required by law, otherwise legitimate interest, always subject to your opt-out rights described below).
To send marketing emails, only if you have agreed to receive them (consent). You can unsubscribe at any time with the link in every marketing email.

Cookies and consent

Visitors from the European Economic Area, the United Kingdom and Switzerland see a consent banner. Advertising and analytics cookies, including the Meta Pixel, load only after you accept them, and you can change your choice anytime through the Your Privacy Choices link at the bottom of every page. Strictly necessary cookies that make the site and checkout work are always on.

Who we share it with (processors)

Shopify: checkout, payment processing and digital download delivery, including order and download link emails.
Resend: transactional email for earlier purchases, such as download link emails.
Klaviyo: marketing email, only with your consent.
Meta Platforms: advertising measurement through the Meta Pixel and Conversions API.
Lovable and Supabase: website hosting and database.

We share only what each provider needs to do its job, under contracts that require them to protect your data. We do not sell your personal information for money.

How long we keep it

Order and invoicing records: as long as tax and accounting law requires, generally up to 10 years under applicable law. Support emails: up to 24 months after the conversation ends. Marketing data: until you unsubscribe or withdraw consent. Advertising data held by Meta follows Meta's own retention rules.

International transfers

Some of our providers process data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission's Standard Contractual Clauses.

Your rights under the GDPR

You can ask to access, correct or delete your data, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw consent at any time. To use these rights, email productadvice.info@gmail.com. You can also lodge a complaint with your local data protection authority.

Your rights if you live in the United States

Depending on your state, including California, you may have the right to:

Know what personal information we collect, use and disclose.
Delete personal information we hold about you.
Correct inaccurate personal information.
Opt out of the sharing of personal information for targeted (cross-context behavioral) advertising.

We do not sell personal information for money. Using the Meta Pixel and Conversions API for advertising may count as "sharing" under some state laws. To opt out of sharing for advertising, use the Your Privacy Choices link at the bottom of every page, turn on Global Privacy Control in your browser, or email us with the subject line "Do not share my information." We honor Global Privacy Control signals. We will not treat you differently for using any of these rights. To make a request, email productadvice.info@gmail.com. We may need to confirm your identity by asking you to reply from your purchase email.

Children's privacy

This site and our products are not directed to children under 13, and we do not knowingly collect personal information from them. Our products are for adults. If you believe a child has given us personal information, email us and we will delete it.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

Plaster Bloom. productadvice.info@gmail.com