Privacy Rights in Select States
This Summary Notice explains the categories of personal information/data (“personal information”) that we collect and how we use them in accordance with the California Consumer Privacy Act (“CCPA”) (as amended by the California Privacy Rights Act [“CPRA”]), the “Shine-the-Light” law, the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act ("UCPA"), and the Virginia Consumer Data Protection Act (“VCDPA”) (collectively, the “Privacy Laws”).
California
When we collect personal information from residents of California, we become subject to, and those residents have certain rights under, California’s privacy laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”).
​
We may collect personal information. ​ We may collect (and may have collected during the 12-month period prior to the effective date of this Policy) the following categories of personal information about you:
-
Identifiers (personal) (including, for example, name, alias, postal address, unique personal identifier, online and device identifier, IP address, email address, account name and number, telephone number, postal address, and other similar identifiers).
-
Identifiers (others) (including, for example, insurance policy number, certain financial information, and health insurance information).
-
Personal characteristics, histories, and associations (including, for example, marital status, gender or gender expression, age, and characteristics of protected classification under California or federal law).
-
Commercial Information (including, for example, records of personal property; products or services purchased, obtained, or considered; marketing histories; purchasing histories or tendencies; purchase profiles; shopping and retail browsing channel preferences; online browsing and website interaction histories; and direct marketing histories).
-
Biometric information (including, for example, signature; and physical characteristics or description).
-
Computing or mobile-device information and internet or other electronic-network-activity information (including, for example, online advertisement engagements; and cookies, tags, and similar device or user identifying information).
-
Geolocation information (approximate) (including, for example, through the mobile app).
-
Audio and visual information (including, for example, videos you upload with a review or in-store security cameras).
-
Professional or employment-related information (including applications, professional history, and work history).
-
Education information.
-
Inferences (including, for example, predictive information, purchase profiles, shopping profiles and characteristics (e.g., loyalty shopper, cardholder, or online shopper)).
-
Sensitive Personal Information (including, for example, social security number; driver’s license number or other state identification card number; login credential; and precise geographic information).
-
Financial information (including, for example, banking details and income level).
-
Payment card and transaction information (including, for example, credit card number; debit card number, and other financial information).
-
Household information (including, for example, family size and composition).
-
Incident-related information (including, for example, statements; or insurance, or similar claims).
-
​
Our products and services are designed for a general audience and are not directed to children. We do not knowingly collect or solicit personal information from children under the age of sixteen (16) (or other relevant ages, which may apply by virtue of applicable law).
You have the following rights:
1. A right of knowledge - you may ask that we confirm whether or not we are processing your personal data.
2. A right of access - you may ask to access your personal data we are processing; you may ask to receive a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
3. A right of correction - you may correct inaccuracies in your personal data, taking into account the nature of that data and the purposes of processing that data.
4. A right of deletion - you may ask that we delete personal data provided by or obtained about you.
5. A right of opt-out - you may opt out of the processing of the personal data for purposes of (1) targeted advertising, (2) the sale of personal data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
6. A right to appeal - you have the right to appeal a company decision not to fulfill your request.
​
Opt-Out Option
-
If you would like to exercise this right under California law, please scroll down the Banner at the Bottom of every page, and click on the area marked as "Do Not Sell Me Personal Information".
​
​We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
Colorado
This section applies only if you are a Colorado resident and we (1) (A) do business in Colorado or (B) produce products or services that are targeted to Colorado residents and (2) (A) during a calendar year, control or process personal data of at least 100,000 Colorado residents or (B) control or process personal data of at least 25,000 Colorado residents and derive revenue or receive a financial benefit from the sale of personal data.
You have the following rights:
1. A right of knowledge - you may ask that we confirm whether or not we are processing your personal data.
2. A right of access - you may ask to access your personal data we are processing; you may ask to receive a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
3. A right of correction - you may correct inaccuracies in your personal data, taking into account the nature of that data and the purposes of processing that data.
4. A right of deletion - you may ask that we delete personal data provided by or obtained about you.
5. A right of opt-out - you may opt out of the processing of the personal data for purposes of (1) targeted advertising, (2) the sale of personal data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. You also have the right to opt out by using a universal opt-out mechanism that meets technical standards that will be established by the state attorney general.
6. A right to appeal - you have the right to appeal a company decision not to fulfill any of these requests.
We have the following related obligations, subject to applicable law:
1. Timely response to your requests.
. We have to respond to your requests without undue delay, but in all cases within 45 days of receipt.
. We may extend the response period once by 45 additional days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of any extension within the initial 45-day response period, together with the reason for the extension.
. If we decline to take action on your request, we have to inform you without undue delay, but in all cases and at the latest within 45 days of receipt of the request, including the justification for declining to take action and instructions for how to appeal our decision.
. In general, we will provide information in response to your requests without charge, up to once annually per user.
2. Appeal mechanism.
. We have to establish a process for you to appeal our refusal to take action on a request within a reasonable period of time after your receipt of our decision not to take action.
. We have to make the appeal process conspicuously available and similar to the process for submitting requests to initiate action. You may appeal our decision by replying to our decision or by making a new request for an appeal of that decision.· Within 45 days of receipt of an appeal, we have to inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
. We may extend the response period once by 60 additional days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of any extension within the initial 45-day response period, together with the reason for the extension.
. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact the state attorney general to submit a complaint.
Under Colorado law, you have the option to opt-in to processing of your personal data for targeted advertising or the sale of personal data on the terms described in detail in this privacy policy. Even after you provide opt-in consent, you may withdraw your consent by using the opt-out procedures described in this privacy policy. This disclosure will also be included where you can opt-in as described in this paragraph.
We do not “sell” personal information as defined by Colorado law nor do we process your personal data for targeted advertising.
​
We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
​
Please make any of your requests under Colorado law, as applicable, using one of these methods: support@bloomingenergies.com or here: 2033 N Ashley Street, Valdosta, GA, 31602
Connecticut
This section applies only if you are a Connecticut resident and we (1) (A) do business in Connecticut or (B) produce products or services that are targeted to Connecticut residents; and (2) during the prior calendar year, controlled or processed the personal data of (A) at least 100,000 Connecticut residents; or (B) (i) at least 25,000 or more Connecticut residents and (ii) we derived over 25% of our gross revenue from the sale of personal data.
You have the following rights:
1. A right of knowledge - you may ask that we confirm whether or not we are processing your personal data.
2. A right of access - you may ask to access your personal data we are processing; you may ask to receive a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
3. A right of correction - you may correct inaccuracies in your personal data, taking into account the nature of that data and the purposes of processing that data.
4. A right of deletion - you may ask that we delete personal data provided by or obtained about you.
5. A right of opt-out - you may opt out of the processing of the personal data for purposes of (1) targeted advertising, (2) the sale of personal data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
6. A right to appeal- you have the right to appeal a company decision not to fulfill any of these requests.
We have the following related obligations, subject to applicable law:
1. Timely response to your requests.
. We have to respond to your requests without undue delay, but in all cases within 45 days of receipt.
. We may extend the response period once by 45 additional days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of any extension within the initial 45-day response period, together with the reason for the extension..
If we decline to take action on your request, we have to inform you without undue delay, but in all cases and at the latest within 45 days of receipt of the request, including the justification for declining to take action and instructions for how to appeal our decision.
. In general, we will provide information in response to your requests without charge, up to once annually per user.
2. Appeal mechanism.
. We have to establish a process for you to appeal our refusal to take action on a request within a reasonable period of time after your receipt of our decision not to take action.
. We have to make the appeal process conspicuously available and similar to the process for submitting requests to initiate action.
. Within 60 days of receipt of an appeal, we have to inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact the state attorney general to submit a complaint.
We do not “sell” personal information as defined by Connecticut law nor do we process your personal data for targeted advertising.
​
​We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
Please make any of your requests under Connecticut law, as applicable, using one of these methods: support@bloomingenergies.com or here: 2033 N Ashley Street, Valdosta, GA, 31602
Iowa
This section applies only if you are an Iowa resident and we (1) (A) do business in Iowa or (B) produce products or services that are targeted to Iowa residents; and (2) during the prior calendar year, controlled or processed the personal data of (A) at least 100,000 Iowa residents; or (B) (i) at least 25,000 Iowa residents and (ii) we derived over 50% of our gross revenue from the sale of personal data.
You have the following rights:
1. A right of knowledge - you may ask that we confirm whether or not we are processing your personal data.
2. A right of access - you may ask to access your personal data we are processing; you may ask to receive a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
3. A right of opt-out - you may opt out of the sale of personal data.
​
We have the following related obligations, subject to applicable law:
1. Timely response to your requests.
. We have to respond to your request without undue delay, but in any case within 90 days of receipt.
. We may extend the response period once by 45 additional days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of any extension within the initial 90-day response period, together with the reason for the extension.
. If we decline to take action on your request, we have to inform you without undue delay, but in any case within 90 days of receipt of the request, including the justification for declining to take action and instructions for how to appeal our decision.
. In general, we will provide information in response to your requests without charge, up to twice annually per user.
2. Appeal mechanism
. We have to establish a process for you to appeal our refusal to take action on a request within a reasonable period of time after your receipt of our decision not to take action.
. We have to make the appeal process conspicuously available and similar to the process for submitting requests to initiate action.
. Within 60 days of receipt of an appeal, we have to inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact the state attorney general to submit a complaint.
We do not “sell” personal information as defined by Iowa law.
We do not process sensitive personal information as defined by Iowa law nor do we process your personal data for targeted advertising.
​
​We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
Please make any of your requests under Iowa law, as applicable, using one of these methods: support@bloomingenergies.com or here: 2033 N Ashley Street, Valdosta, GA, 31602.
Utah
This section applies only if you are a Utah resident and we (1) (A) do business in Utah or (B) produce products or services that are targeted to Utah residents; (2) earn at least $25 million in annual revenue; and (3) during the prior calendar year, controlled or processed the personal data of (A) at least 100,000 Utah residents; or (B) (i) at least 2 5,000 Utah residents and (ii) we derived over 25% of our gross revenue from the sale of personal data.
You have the following rights:
1. A right of knowledge - you may ask that we confirm whether or not we are processing your personal data.
2. A right of access - you may ask to access your personal data we are processing; you may ask to receive a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
3. A right of deletion - you may ask that we delete personal data provided by you.
4. A right of opt-out - you may opt out of the processing of the personal data for purposes of (1) targeted advertising or the sale of personal data.
We have the following related obligations, subject to applicable law:
1. Timely response to your requests.
. We have to respond to your request without undue delay, but in all cases within 45 days of receipt.
. We may extend the response period once by 45 additional days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of any extension within the initial 45-day response period, together with the reason for the extension.
. If we decline to take action on your request, we have to inform you without undue delay, but in all cases and at the latest within 45 days of receipt of the request, including the justification for declining to take action and instructions for how to appeal our decision.In general, we will provide information in response to your requests without charge, up to once annually per user.
We do not “sell” personal information as defined by Utah law nor do we process your personal data for targeted advertising.

We do not process sensitive personal information as defined by Utah law.
​
​We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
Please make any of your requests under Utah law, as applicable, using one of these methods: support@bloomingenergies.com or here: 2033 N Ashley Street, Valdosta, GA, 31602
Virginia
This section applies only if you are a Virginia resident and we (1) (A) do business in Virginia or (B) produce products or services that are targeted to Virginia residents and (2) (A) during a calendar year, control or process personal data of at least 100,000 Virginia residents or (B) control or process personal data of at least 25,000 Virginia residents and derive over 50 percent of our gross revenue from the sale of personal data.
You have the following rights:
1. A right of knowledge - you may ask that we confirm whether or not we are processing your personal data.
2. A right of access - you may ask to access your personal data we are processing; you may ask to receive a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
3. A right of correction - you may correct inaccuracies in your personal data, taking into account the nature of that data and the purposes of processing that data.
4. A right of deletion - you may ask that we delete personal data provided by or obtained about you.
5. A right of opt-out - you may opt out of the processing of the personal data for purposes of (1) targeted advertising, (2) the sale of personal data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
6. A right to appeal - you have the right to appeal a company decision not to fulfill your request.
We have the following related obligations, subject to applicable law:
1. Timely response
. We have to respond to your request without undue delay, but in all cases within 45 days of receipt.
. We may extend the response period once by 45 additional days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of any extension within the initial 45-day response period, together with the reason for the extension.
. If we decline to take action on your request, we have to inform you without undue delay, but in all cases and at the latest within 45 days of receipt of the request, including the justification for declining to take action and instructions for how to appeal our decision.
. In general, we will provide information in response to your requests without charge, up to twice annually per user.
2. Appeal mechanism
. We have to establish a process for you to appeal our refusal to take action on a request within a reasonable period of time after your receipt of our decision not to take action.
. We have to make the appeal process conspicuously available and similar to the process for submitting requests to initiate action.
. Within 60 days of receipt of an appeal, we have to inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact the state attorney general to submit a complaint.
We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
​
Please make any of your requests under Virginia law, as applicable, using one of these methods: support@bloomingenergies.com or here: 2033 N Ashley Street, Valdosta, GA, 31602
Blooms and Stones LLC says Thank You with Free Shipping Over $75+ Use Code SHIP75