Making Dream Bloom Inc.

Privacy Policy

This Privacy Policy describes how Making Dream Bloom Inc. ("Making Dream", "we", "us", or "our") collects, uses, discloses, retains, and protects personal information in connection with our website, online and in-store purchases, flower and gift orders, delivery services, customer communications, marketing activities, and related business operations.

Last updated: August 31, 2026  •  Business location: Vaughan, Ontario, Canada

Key Privacy Information

The sections below explain our privacy practices in detail. These points provide a short reference.

1. Scope and Accountability

Making Dream Bloom Inc. is an Ontario business. This Policy applies to personal information under our control that is collected, used, or disclosed in connection with our commercial activities, subject to the privacy laws that apply to the particular information and activity.

Where the Personal Information Protection and Electronic Documents Act ("PIPEDA") applies, we manage personal information in accordance with its fair information principles, including accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance.

Questions or concerns about this Policy and our privacy practices may be sent to [email protected].

2. Personal Information We Collect

The information we collect depends on the transaction, service, communication, website function, or marketing interaction involved.

3. How Information Is Collected

• Directly from you: when you place an order, make a payment, contact us, subscribe to marketing, submit a form, or provide information in-store or through another communication channel.
• From a customer about a recipient: when a customer places a gift or delivery order and provides recipient and delivery information.
• Automatically through our website: through cookies, pixels, tags, log files, security tools, analytics tools, advertising technologies, and similar website technologies.
• From service providers: such as payment processors, advertising and analytics platforms, security providers, and other vendors that provide information needed to operate the related service.

4. Purposes of Collection and Use

We collect and use personal information for identified business purposes connected with our products, services, website, communications, and legal duties, including to:

• ✓Process, confirm, prepare, and deliver orders.
• ✓Contact customers or recipients about delivery, access, order questions, or service matters.
• ✓Process payments, refunds, chargebacks, and transaction records.
• ✓Respond to inquiries, requests, feedback, and complaints.
• ✓Operate, maintain, troubleshoot, and protect our website and related systems.
• ✓Measure website traffic, advertising performance, and conversions.
• ✓Manage advertising and marketing campaigns in accordance with applicable consent requirements.
• ✓Maintain records for accounting, fraud prevention, disputes, legal claims, and compliance duties.

5. Service Providers and Technology Platforms

We use third-party providers to operate parts of our website and business. Information can be made available to a provider when needed for the service that provider performs and according to the way the service is configured.

Each provider may have its own privacy terms and practices for information it processes in connection with its service.

6. Cookies, Pixels, Tags, and Similar Technologies

Our website uses cookies, pixels, tags, scripts, and similar technologies in connection with site functions, security, analytics, advertising, mapping, campaign measurement, and conversion measurement. These technologies can collect or generate website and device information such as IP address, browser or device details, page and event information, cookie identifiers, referral information, and advertising or conversion identifiers.

Google Tag Manager can be used to manage website tags. Google Analytics and Microsoft Clarity can be used for website measurement and interaction analytics. Google Ads, Microsoft Ads, Meta Pixel, OpenAI Pixel, and other marketing platforms can be used for advertising, attribution, campaign measurement, and conversion measurement according to their configuration.

Google Maps API can process information associated with map, address, or location-related website functions when those functions are used. Google Cloud services can process information according to the specific cloud service configured for our business.

7. Consent and Marketing Communications

Where consent is required for the collection, use, or disclosure of personal information, we seek consent appropriate to the circumstances, the purpose, and the sensitivity of the information. Consent may be express or implied where permitted by law. We may also collect, use, or disclose personal information without consent where applicable law permits or requires it.

You may withdraw consent to a future use or disclosure where withdrawal is legally available, subject to reasonable notice and any legal or contractual restrictions. A withdrawal can affect a service if the information is needed to provide that service.

8. Disclosure of Personal Information

We disclose personal information only for purposes connected with our business and services, with consent where required, or as otherwise permitted or required by law. Disclosures can include:

• Service providers: hosting, security, cloud, analytics, advertising, mapping, tag-management, payment, communication, and other providers supporting our operations.
• Delivery service providers: information needed to complete or support an order or delivery.
• Payment providers: information needed to process, verify, refund, dispute, or administer a payment.
• Legal and safety matters: information disclosed where required or permitted by law, lawful process, or a lawful request, or where permitted by law to protect rights, property, systems, customers, recipients, or other persons.

We do not state that a provider is permitted to use personal information for its own independent marketing unless that practice has been disclosed and a lawful basis exists.

9. Processing Outside Canada

Our website-hosting provider is Canadian Web Hosting. Some other service providers named in this Policy operate internationally. Depending on a provider's infrastructure and the service configuration, personal information can be processed or stored outside Canada.

When information is processed in another jurisdiction, it can be subject to the laws and lawful-access rules of that jurisdiction. We do not represent that all personal information remains in Canada solely because our website-hosting provider is Canadian.

10. Retention and Disposal

We retain personal information for as long as reasonably required for the purpose for which it was collected, and for any additional period required or permitted for legal, tax, accounting, fraud-prevention, dispute, consent-record, or other legitimate record-keeping purposes.

Retention periods can differ by record type and purpose. When personal information is no longer required, it is deleted, destroyed, or de-identified as appropriate, subject to technical, legal, and record-keeping requirements.

11. Safeguards and Privacy Breaches

We use reasonable administrative, technical, and physical safeguards suited to the sensitivity, amount, format, use, and storage of personal information under our control. Our website uses Cloudflare for security and related network services, and payment information is handled through the payment services described above.

No website, Internet transmission, or electronic storage method can be guaranteed to be completely secure.

If a breach of security safeguards occurs, we will assess the incident and take the steps required by applicable privacy law, including record keeping, notice, or reporting where those duties apply.

12. Access, Correction, Consent Withdrawal, and Complaints

Subject to applicable law, you may request access to personal information we hold about you, ask how it has been used or disclosed, request correction of inaccurate or incomplete information, withdraw consent where withdrawal is available, or raise a concern about our privacy practices.

• We may request information needed to verify your identity before responding to a privacy request.
• Access can be limited or refused where applicable law requires or permits this.
• Where a correction request is supported, we will address inaccurate or incomplete information as required by law.
• Requests and complaints may be sent to [email protected].

If PIPEDA applies to the matter and you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

13. Personal Information Concerning Minors

Where personal information relating to a minor is provided in connection with an order, delivery, communication, or other interaction with us, we will handle that information according to applicable privacy law, taking into account the sensitivity of the information and the circumstances of collection, use, or disclosure. Where consent from a parent, guardian, or other authorized person is legally required, we will obtain the required consent.

14. Third-Party Websites and Services

Our website can contain links, embedded content, payment interfaces, maps, or other services provided by third parties. When you interact directly with a third-party service, that provider can process information under its own terms and privacy practices. This Policy governs personal information under Making Dream Bloom Inc.'s control and does not replace the privacy terms of an independent third party.

15. Changes to This Privacy Policy

We may amend this Policy when our practices, website functions, providers, or legal duties change. A revised Policy will be posted on our website.

If a change involves a new collection, use, or disclosure for which fresh consent is required by applicable law, we will seek that consent rather than treating continued website use as consent to the new purpose.

16. Contact Us About Privacy