​Welcome to Peribloom (“we,” “our,” or “us”). We are committed to protecting your privacy and handling your personal information with transparency, accountability, and security. This Privacy Policy describes how we collect, use, disclose, and protect your information across our website at www.peribloom.com, mobile applications, and in connection with our health and wellness services (collectively, the “Services”).

​

This policy complies with applicable U.S. law (including HIPAA, New York State privacy laws, and California’s CCPA/CPRA) and international standards under the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA).

​

1. Information We Collect

We may collect the following types of information:

a. Personal Information

• Name, email address, phone number, mailing address

• Date of birth

• Account credentials

• Insurance information (if applicable)

• Billing and payment information (via secure third-party processors)

b. Health Information (PHI)

If you receive services related to health, wellness, or medical care, we may collect Protected Health Information (PHI) such as:

• Medical history, symptoms, lab results

• Treatment records or notes

• Appointment and consultation information

We only collect PHI when necessary to provide services and in compliance with HIPAA (see Section 4).

c. Automatically Collected Data

When you use our website or app, we collect:

• IP address, device ID, browser type

• Usage data (pages visited, links clicked)

• App crash logs and performance diagnostics

• Cookies or tracking technologies (with consent where required)

 

2. Legal Bases for Processing  GDPR Compliance

If you are located in the EEA, we rely on the following legal bases:

• Consent (e.g., for marketing communications)

• Contract performance (e.g., to provide services you request)

• Legal obligations

• Legitimate interest (e.g., site analytics, fraud prevention)

• Vital interest or public interest, where applicable

 

3. How We Use Your Information

We use your data to:

• Provide and manage wellness or healthcare services

• Schedule appointments and communicate with you

• Personalize your experience on our platform

• Process payments securely

• Conduct analytics and improve services

• Comply with legal and regulatory requirements

• Send marketing or educational materials (with your consent)

 

4. HIPAA Notice  (US Users Only)

We comply with the Health Insurance Portability and Accountability Act (HIPAA) to safeguard Protected Health Information (PHI). If applicable, you will receive a separate HIPAA Notice of Privacy Practices outlining your rights and our responsibilities under HIPAA.

​

If you submit PHI through our site or app (e.g., through intake forms, messaging systems, or patient portals), we protect it with administrative, technical, and physical safeguards.

​

5. Sharing and Disclosure

We do not sell your personal or health information. We may share your data with:

• Service providers (e.g., hosting providers, payment processors, EHR systems)

• Healthcare partners or practitioners, with your authorization

• Regulatory or legal authorities, when required

• Business partners, only with your express consent

• In the event of a merger, acquisition, or asset sale

All vendors with access to PHI must sign a Business Associate Agreement (BAA) as required under HIPAA.

​

6. Your Rights

For U.S. Residents:

You have the right to:

• Access or request a copy of your personal data

• Request correction or deletion

• Object to or restrict processing

• Opt out of marketing communications

• File a complaint with a regulatory authority

 

For EU/EEA Residents (under GDPR):

You also have the right to:

• Data portability

• Withdraw consent at any time

• Lodge a complaint with your local data protection authority

 

To exercise your rights, email us at info@peribloom.com

 

7. Data Security

We implement strong technical and organizational measures to protect your data, including:

• Encrypted data transmission (SSL/TLS)

• Role-based access controls

• Regular security audits

• Secure cloud storage with HIPAA-compliant providers

 

8. International Transfers

If you access our services from outside the United States, your information may be transferred to and stored in the U.S. or other jurisdictions. We ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place for such transfers.

​

9. Retention of Data

We retain personal and health data only for as long as necessary to provide services, comply with laws, or resolve disputes. You may request deletion where permitted by law.

​

10. Cookies and Analytics

We use cookies and similar technologies for:

• Site functionality

• Analytics and performance tracking

• Personalized content and ads (with consent)

You may manage cookies through your browser settings or consent banner.

​

11. Childrens Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from minors without verified parental consent.

​

12. Changes to This Privacy Policy

We may update this policy from time to time. Updates will be posted on this page with the effective date. Significant changes will be communicated via email or app notification, where applicable.

​

13. Contact Us

Peribloom.com
New York, NY 
Email: info@peribloom.com
 

​

Canadian Users PIPEDA Compliance

If you are a resident of Canada, the following terms apply to you in addition to the rest of this Privacy Policy.

​

a. Your Consent

By using our services and providing personal information, you consent to our collection, use, and disclosure of your information as outlined in this Privacy Policy and in accordance with PIPEDA and other applicable Canadian privacy laws.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. However, doing so may impact your ability to use certain services.

​​

b. Your Rights Under PIPEDA

Canadian residents have the right to:

• Request access to the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request details on how your information has been used and shared

• Withdraw consent for certain uses of your information

• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, please contact us at info@peribloom.com.

​

c. Cross-Border Data Transfers

Our servers and service providers may be located in the United States or other jurisdictions. As such, your personal information may be transferred to and stored in countries outside of Canada. We take all reasonable steps to ensure that your data is protected in accordance with this Privacy Policy and Canadian law, including contractual protections with our third-party providers.

​

d. Health Information and Wellness Data

While PIPEDA does not have a distinct category for “health data,” we treat any sensitive wellness, fitness, or health-related information you provide with enhanced confidentiality and care. If you are receiving medically oriented services, please also refer to the HIPAA section above.

​

e. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with applicable laws. When information is no longer needed, it is securely deleted or anonymized.

​

f. Contact for Privacy Inquiries in Canada

If you are a Canadian user and have questions about this policy or your rights, please contact:

Peribloom

info@peribloom.com

​

You may also contact:
Office of the Privacy Commissioner of Canada
https://www.priv.gc.ca/en/
Toll-Free: 1-800-282-1376

​

Effective Date: 20 May 2025

Last Updated: 20 May 2025