Privacy policy

blooom is a design and engineering studio run by two founders, Uvelt in Dubai, United Arab Emirates, and IO in the United Kingdom. This policy covers the website at blooom.dev and the enquiries that reach us through it or by email.

For anything about your data, write to hello@blooom.dev. Either founder can deal with it.

Nothing on its own. blooom.dev sets no cookies, stores nothing in your browser, and runs no analytics, advertising or tracking scripts. The fonts, images and videos on the page are served from blooom.dev, so viewing it sends no request to a font or media host.

Like every website, the server that hosts blooom.dev keeps standard access logs: the IP address a request came from, the browser used and the time. We use those logs only to keep the site running and secure, and they are kept for a short rolling period set by the host.

The contact form asks for your name, your email address, your company if you want to give it, the kind of project and a message. When you send it, that text goes to our inbox at hello@blooom.dev. Anything you email us directly, or send later during a project, is handled the same way.

We use it to reply to you, to scope the work and, if the project goes ahead, to run it. Where the UK GDPR applies, our basis for this is that it is a step you have asked for before a contract, together with our legitimate interest in answering people who write to us. We do not use your details for marketing and we never sell them.

The two founders read the inbox. The senior engineers who join a project see the parts of the correspondence that the project needs and nothing else.

Beyond that, your data reaches only the services we use to run the studio: the provider that hosts our email and, once a project starts, whatever contracting and payment services the project agreement names. We would also disclose it if the law required us to.

We work in the United Arab Emirates and the United Kingdom, so your message is read in both. Where the UK GDPR applies to you, we treat the transfer between the two under the safeguards that law provides for, and your data is handled under this policy wherever it is read.

An enquiry that does not turn into a project is deleted within twelve months of the last message. Correspondence about a project is kept for the life of the project and for six years after it ends, which is how long contract and tax records are kept in the UK, and is then deleted.

You can ask what we hold about you, have it corrected or deleted, ask us to stop using it, object to a use, or ask for a copy in a form you can take elsewhere. Write to hello@blooom.dev and you will have an answer within a month.

If you are in the UK and are not happy with how we handled a request, you can complain to the Information Commissioner's Office at ico.org.uk. If you are in the UAE, the Personal Data Protection Law gives you the equivalent rights, and the same address at blooom is the place to raise them.

The work section links to sites we built for clients, and the studio section links to the founders' own portfolios. Each of those is run by its owner under its own policy. This policy stops at blooom.dev.

The site is for businesses and adults. We do not knowingly collect data from anyone under eighteen. If you believe a child has sent us something, tell us and we will delete it.

The date at the top changes whenever the policy does. If a change affects what we do with data you have already sent, we will tell you by email first.