Privacy policy

Last updated: 10 November 2026

This Privacy Policy explains how OH BABY BLOOM LLC ("Pentawild", "we", "us", "our") collects, uses, shares and protects personal information when you visit our online store, create an account, place an order, contact us or subscribe to our emails.

We sell a liquid herbal supplement in an amber glass dropper bottle. To take an order, ship it and answer your questions, we need a limited amount of information about you. This page tells you exactly what we collect, why, and what you can ask us to do with it.

1. Who is responsible for your data

The controller of the personal data described in this policy is:

Legal entity: OH BABY BLOOM LLC
Registered address: 5830 E 2nd St, Ste 7000 #29016, Casper, WY 82609, United States
Company registration number: Wyoming limited liability company — EIN 98-1887385
VAT number: EIN 98-1887385 (not registered for UK VAT)
Contact email for privacy requests: contact@ohbabybloom.com
Contact phone: No telephone support — we answer by e-mail
Data protection officer / privacy contact: No data protection officer has been appointed; privacy requests are handled at contact@ohbabybloom.com

If you have any question about this policy, write to us at contact@ohbabybloom.com and we will answer you directly.

2. Our store runs on Shopify

This store is hosted and operated on the Shopify e-commerce platform, provided by:

Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada

This matters for your privacy, so we say it plainly: Shopify hosts the website, stores the store data and processes your orders and payments on our behalf. When you browse the site, add a bottle to your cart or go through checkout, the pages you use are served by Shopify's infrastructure, and the information you enter is stored on Shopify's servers. Shopify acts as our data processor (service provider) and handles that information according to its own agreements with us and its own privacy commitments.

Shopify also records general analytics about visits to the store (pages viewed, time of visit, referring site, approximate location derived from IP address, device and browser type) so that we can understand how the store is used.

3. What personal data we collect

3.1 Information you give us

Identity and contact details: first and last name, email address, postal address, phone number (when you provide one).
Order details: items ordered, quantity, order value, currency, order date, order number, discount codes used.
Delivery details: shipping address, delivery instructions you choose to add.
Billing details: billing address and the billing name attached to your payment method.
Account details: if you create a customer account, your login email and password (stored in encrypted form by Shopify).
Correspondence: the content of the messages you send us by email or through any contact form, and our replies.
Marketing preferences: whether you have subscribed to or unsubscribed from our emails.
Reviews and feedback: any content you voluntarily submit about the product.

3.2 Payment data

We do not see or store your full card number, expiry date or security code. Card details are entered into the Shopify checkout and transmitted directly to the payment provider. What comes back to us is limited to confirmation of payment, the payment method type, the last digits of the card, and the billing name and address.

3.3 Information collected automatically

IP address and approximate location derived from it;
browser type and version, operating system, device type, screen size;
referring website or advertisement that brought you to the store;
pages viewed, products viewed, time spent, clicks, cart activity;
cookie and similar identifiers (see section 6).

3.4 What we do not collect

We do not ask you for, and you should not send us, medical records, diagnoses, prescription details or any other health information. Our product is a food supplement, not a medicine, and we have no need for a health file on you. If you choose to mention a health situation in an email to us, we will only use it to answer that message and we will not add it to any marketing profile.

Our store is not directed at children. We do not knowingly collect data from anyone under 18 years old.

4. Why we use your data, and on what legal basis

To process and ship your order — taking payment, confirming the order, preparing the bottle for dispatch, handing it to the carrier, sending tracking information, managing returns.
Legal basis: performance of the contract between you and us.
To manage your customer account if you create one.
Legal basis: performance of the contract.
To answer your questions sent by email or contact form.
Legal basis: performance of the contract, or our legitimate interest in replying to people who contact us.
To meet our accounting, tax and commercial record-keeping obligations.
Legal basis: compliance with a legal obligation.
To prevent fraud and abuse and to keep the store secure.
Legal basis: our legitimate interest in protecting the business and our customers.
To send you marketing emails about the product, restocks and offers.
Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in every email; or, where permitted by local law, our legitimate interest in contacting existing customers about a similar product.
To measure how the store is used and improve it (audience measurement, performance of pages and product descriptions).
Legal basis: your consent where cookies or similar technologies require it, otherwise our legitimate interest in understanding and improving our store.
To handle a complaint, a dispute or a legal claim.
Legal basis: our legitimate interest in defending our rights, or compliance with a legal obligation.

Where we rely on legitimate interest, we have weighed that interest against your rights and freedoms. You may object to that processing at any time (see section 9).

5. Who we share your data with

We do not sell your personal data. We share it only with the service providers we need in order to run the store, and only with what they need to do their job.

5.1 Platform and order processing

Shopify Inc. (Canada) — hosting of the website, storage of customer and order data, operation of the checkout, order management.

5.2 Payment

Payment providers: the payment methods displayed at checkout (cards and wallets), processed through Shopify Payments and the payment providers integrated into the Shopify checkout — processing of card and alternative payments, fraud screening, refunds. They receive your payment credentials, billing details and order amount, and act as independent controllers for their own fraud-prevention and regulatory duties.

5.3 Delivery

Carriers and fulfilment partners: the tracked carrier named in your shipping confirmation e-mail — they receive your name, delivery address, phone number and/or email so that the bottle reaches you and so that you can be notified of the delivery.

5.4 Email and marketing

Email service provider: Shopify (order notifications and Shopify Email) — sending transactional and marketing emails and managing subscription status.

5.5 Audience measurement and advertising

Shopify analytics — built-in store statistics.
Third-party analytics and advertising tools: Shopify analytics and the Meta (Facebook & Instagram) sales channel connected to the store.

5.6 Others

Our accountant, auditor or legal advisers, where needed: none at present.
Public authorities, courts or law enforcement, when we are legally required to disclose information.
A buyer or successor entity, in the event of a sale, merger or reorganisation of the business, with the same protections continuing to apply.

6. Cookies and similar technologies

Cookies are small files placed on your device when you visit the store. We and our providers use them in the following categories:

Strictly necessary cookies — set by Shopify to keep your cart, your session and the checkout working, and to protect against fraud. The store cannot function without them, and they do not require your consent.
Preference cookies — remember choices such as your language, country or currency.
Analytics / audience measurement cookies — count visits, identify the most viewed pages, show how visitors move through the store.
Marketing and advertising cookies — measure the performance of our advertisements and, where applicable, show you relevant ads on other sites.

Analytics and marketing cookies are only placed where you have given consent, in the jurisdictions where consent is required. You can change or withdraw your choice at any time through the cookie banner or preferences link on the store, and you can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may prevent you from completing an order.

Full cookie list and durations: the cookies set by Shopify and its checkout (see shopify.com/legal/cookies) and, with your consent, the Meta (Facebook & Instagram) pixel; you can review them through the cookie banner

7. How long we keep your data

Order, invoice and accounting records: kept for the period required by applicable commercial and tax law — order and invoicing records are kept for as long as tax and accounting law requires (generally 6 years in the UK); marketing data is kept until you unsubscribe.
Customer account data: for as long as your account is active, then deleted or anonymised order and invoicing records are kept for as long as tax and accounting law requires (generally 6 years in the UK); marketing data is kept until you unsubscribe after your last interaction with us.
Prospect and marketing data (email subscribers who have not purchased): order and invoicing records are kept for as long as tax and accounting law requires (generally 6 years in the UK); marketing data is kept until you unsubscribe, or until you unsubscribe.
Customer service correspondence: contact@ohbabybloom.com.
Cookie and analytics data: for the lifetime of each cookie, and in any case no longer than Shopify analytics and the Meta (Facebook & Instagram) sales channel connected to the store.
Data linked to a dispute or claim: until the matter is finally resolved and any applicable limitation period has expired.

When a retention period ends, we delete the data or irreversibly anonymise it so that it can no longer be linked to you.

8. International transfers

Our store runs on Shopify, whose parent company is established in Canada and whose infrastructure and sub-processors may be located in other countries, including the United States. Our payment, shipping, email and analytics providers may also process data outside your country of residence.

This means your personal data may be transferred to, stored in or accessed from a country other than your own, where data protection law may differ from the law that applies to you.

Where such a transfer takes place from the European Economic Area, the United Kingdom or any other territory requiring a transfer safeguard, it is framed by an appropriate mechanism — typically the European Commission's Standard Contractual Clauses, an adequacy decision covering the destination country, or an equivalent approved safeguard, together with additional technical and organisational measures where necessary.

Details of the safeguards used and a copy on request: the European Commission Standard Contractual Clauses and the UK International Data Transfer Addendum relied on by Shopify; you can request a copy of these safeguards at contact@ohbabybloom.com

9. Your rights

Depending on where you live, you have all or some of the following rights over your personal data:

Access — obtain confirmation that we process your data and receive a copy of it.
Rectification — have inaccurate or incomplete data corrected (a misspelled delivery address, for example).
Erasure — have your data deleted, where we no longer have a reason or a legal obligation to keep it.
Restriction — ask us to freeze the use of your data while a dispute about it is resolved.
Objection — object to processing based on our legitimate interest, and object at any time, without justification, to direct marketing.
Portability — receive the data you provided in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible.
Withdraw consent — at any time, where processing is based on consent. This does not affect the lawfulness of what was done before you withdrew it.
Not to be subject to automated decision-making producing legal or similarly significant effects. We do not use your data for that purpose.
Post-mortem instructions — give directions on what should happen to your data after your death, where local law provides for this.

If you are a resident of a US state with its own privacy law, you may also have the right to know what categories of personal information are collected and shared, the right to delete, the right to correct, the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and the right not to be discriminated against for exercising these rights. We do not sell personal information for money.

How to exercise your rights

Send your request to contact@ohbabybloom.com, or by post to 5830 E 2nd St, Ste 7000 #29016, Casper, WY 82609, United States. Tell us which right you wish to exercise and from which email address you ordered, so that we can find your record. We may need to ask for additional information to confirm your identity before acting, in order to protect your data from someone impersonating you.

We answer within one month of receiving your request. If the request is complex or if we receive several from you, we may extend that period by two further months and will tell you why within the first month. Exercising your rights is free, unless a request is manifestly unfounded or excessive.

Complaints

If you believe we have not handled your data properly, you may lodge a complaint with the competent supervisory authority: the Information Commissioner's Office (ICO), ico.org.uk. We would appreciate the chance to resolve the matter with you first.

10. Marketing emails

If you subscribe, we may send you emails about the product, restocks, usage tips and offers. Every email contains a one-click unsubscribe link, and you can also ask us to remove you at contact@ohbabybloom.com. Unsubscribing from marketing does not stop transactional messages — order confirmations, shipping notifications and replies to your questions — which are part of fulfilling your order.

11. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure and alteration. In particular:

the store is served over an encrypted HTTPS/TLS connection;
payment details are transmitted directly to the payment provider through the Shopify checkout and are not stored on our side;
account passwords are stored in hashed form by the platform, never in plain text;
access to customer and order data is limited to the people who need it to run the store, under individual accounts;
our providers are selected for their security standards and are bound by contract to protect the data we entrust to them.

No method of transmission or storage on the internet is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to create a high risk for your rights, we will notify you and the competent authority as required by applicable law.

12. Links to other sites

Our store may contain links to third-party websites or social media pages. This policy does not cover them. When you follow such a link, the privacy policy of that site applies, and we invite you to read it.

13. Changes to this policy

We may update this policy to reflect changes in our practices, our providers or the law. The updated version is published on this page with a new "Last updated" date. If a change materially affects how we use your data, we will inform you by a clear notice on the store or, where required, by email before it takes effect.

14. Hosting

The website is hosted by:

Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada

15. Contact

OH BABY BLOOM LLC
Address: 5830 E 2nd St, Ste 7000 #29016, Casper, WY 82609, United States
Email: contact@ohbabybloom.com
Phone: No telephone support — we answer by e-mail
Publication director / person responsible for the site: Flavie Cassegrain

This product is a food supplement. It is not intended to diagnose, treat, cure or prevent any disease. Statements concerning it have not been evaluated by any regulatory authority unless expressly stated. Talk to your doctor before use, particularly if you are under medical follow-up for a respiratory condition, pregnant, breastfeeding or taking medication.