Skip to main content
Eat well. Find what works for you. Bloom.
Eat & BloomRECIPES · DRINKS · WELLNESS
AboutContact
HomeHealthy RecipesSmoothies & DrinksWeight & ProteinFunctional FoodsBeauty & WellnessAboutContact

Privacy Policy

Last updated : October 17, 2026

This Privacy Policy explains how Eat & Bloom Media, operated by Emma Vance (editorial name: Emma Bloom) ("we", "us", "Eat & Bloom") collects, uses and protects your personal data when you visit eatandbloom.com (the "Site"). We process your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

Data controller

The data controller responsible for your personal data is:

  • Eat & Bloom Media, operated by Emma Vance (editorial name: Emma Bloom)
  • United States
  • Email: hello@eatandbloom.com

Data we collect

We collect the following categories of data:

  • Comments and ratings: the name you enter, the text of your comment, your rating, and a pseudonymised (hashed) form of your IP address, used to prevent abuse and duplicate votes. Comments are moderated before they are published.
  • Technical data: your IP address and connection logs, processed by our hosting provider to deliver and secure the Site. A hashed form of your IP address is also used to limit repeated requests.
  • Data you provide directly: if you contact us by email, the content of your message and your contact details.
  • Usage and analytics data: pages viewed, time spent, referring pages, approximate location, device type, browser and operating system, collected through Google Tag Manager and Google Analytics 4.
  • Advertising identifiers and cookies: identifiers set by advertising cookies to serve and measure ads and, where you consent, to personalise them.

Purposes of processing

  • Operating, securing and maintaining the Site, and preventing abuse;
  • Publishing and moderating comments and ratings;
  • Measuring audience and understanding how the Site is used;
  • Displaying advertising and measuring its performance, and personalising it only with your consent;
  • Responding to your requests and messages.

Legal bases

  • Consent (Art. 6(1)(a) GDPR): for non-essential cookies, audience measurement and personalised advertising. You may withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR): for keeping the Site secure, preventing abuse, moderating comments and basic operation. You may object to processing based on legitimate interest.
  • Legal obligation (Art. 6(1)(c) GDPR) where applicable.

Third parties and recipients

We share data with the following categories of service providers and partners:

  • Hosting and infrastructure: Cloudflare, Inc., including its anti-spam check (Turnstile) on forms and its Email Routing service, which receives and forwards the emails sent to our address.
  • Email delivery: Resend, Inc., which sends the emails we write to you in reply.
  • Advertising partners (Google AdSense): to serve, cap and measure advertising. See Google's Privacy Policy and how Google uses data.
  • Analytics provider: Google Tag Manager and Google Analytics 4, to measure audience.

We do not sell your personal data.

No sale of personal data

We do not sell your personal data in exchange for money. Advertising partners such as Google may, with your consent where required, use cookies and identifiers to show and measure ads; under some laws (for example in certain US states) this can count as "sharing" or targeted advertising. You can opt out through the "Cookie settings" link in the footer, through Google Ads Settings, or by writing to us.

International data transfers

Some of our providers are located outside the European Economic Area (for example in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or applicable adequacy frameworks.

Data retention

We keep personal data only for as long as necessary for the purposes described above:

  • Comments and ratings: for as long as the content is published, and deleted on request where the law requires it;
  • Analytics data: 2 months (Google Analytics 4 default setting);
  • Advertising cookie data: for the lifetime of the relevant cookies (see our Cookie Policy);
  • Email correspondence: for the time needed to handle your request and, where required, for the applicable legal limitation period.

Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to processing, including processing based on legitimate interest;
  • Data portability: receive your data in a structured, machine-readable format;
  • Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Residents of US states

If you live in a US state with a consumer privacy law (such as California, Colorado, Virginia or Texas), you may have the right to know what personal data we hold, to access, correct or delete it, to opt out of targeted advertising or the sale or sharing of personal data, and not to be treated unfairly for using these rights. Use the contact details below; we may need to verify your identity, and you may use an authorised agent.

How to exercise your rights

To exercise any of these rights, contact us at hello@eatandbloom.com. We may need to verify your identity before responding. We will reply within the timeframe required by law (generally one month).

Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access and pseudonymised identifiers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's privacy

The Site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it promptly.

Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work or the place of the alleged infringement (the data protection authority of your country of residence; for the EU, see edpb.europa.eu).

Cookies

Detailed information about the cookies and similar technologies we use, and how to manage them, is available in our Cookie Policy.

The Site links to websites we do not operate. We are not responsible for their privacy practices; please read their policies.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision.