Legal

Privacy Policy

This Privacy Policy explains how smartbloomx.com handles personal information in a way that is compatible with the principles of GDPR and Canada’s PIPEDA. It is written for clarity and practical understanding.

1) Who we are

smartbloomx.com is an independent informational website. We publish editorial content such as hotel review Canada pages and travel guidance. We are not affiliated with any hotel reviewed on the site.

2) What data we collect

Data you choose to provide

If you contact us, you may provide personal information such as your name, email address, and message content. Please avoid sending sensitive personal information.

Data collected automatically

Like most websites, we may collect limited technical data when you browse, such as your device type, browser, approximate location derived from IP, pages visited, and referring page. This information is typically processed in aggregated form to understand site performance and improve content quality.

3) Why we collect data (purposes)

  • To operate the site reliably and securely
  • To respond to messages you send us
  • To understand which pages are useful and improve site content
  • To maintain fraud prevention and basic security logging

4) Legal bases (GDPR-aligned)

Where GDPR applies, our processing is generally based on one or more of the following:

  • Legitimate interests: running and improving the website, preventing abuse, measuring performance
  • Consent: where required for non-essential cookies or optional tracking
  • Contract / pre-contract steps: responding to inquiries you initiate
  • Legal obligations: complying with applicable law where relevant

5) Cookies and similar technologies

Cookies may be used for essential site functionality and to understand aggregated usage. For details about cookie categories and how consent works, read our Cookie Policy.

6) How we share information

We do not sell personal information. We may share limited information with service providers that support website operations (for example, hosting, security, or performance analytics) only as needed to provide the service.

When we use service providers, we expect them to protect information and restrict usage to the services they provide. If required, we aim to use contractual safeguards consistent with privacy best practices.

7) International transfers

Website infrastructure providers may process data in jurisdictions outside your province or country. Where applicable, we rely on appropriate safeguards to protect information during transfers.

8) Data retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law. Technical logs are typically retained for shorter periods to support security and reliability.

9) Your rights

Rights under GDPR (where applicable)

  • Access your personal data
  • Correct inaccurate data
  • Request deletion in certain circumstances
  • Restrict or object to processing
  • Data portability where applicable
  • Withdraw consent for non-essential processing

Rights under PIPEDA (Canada)

  • Request access to personal information we hold about you
  • Request corrections where information is inaccurate
  • Ask questions about our privacy practices

10) Security

We use reasonable safeguards appropriate to the nature of the information, including limiting access and using standard hosting security controls. No website can guarantee absolute security, but we aim to reduce risk through practical measures.

11) Children’s privacy

This site is not directed to children. We do not knowingly collect personal information from children.

12) Contact

For privacy questions or requests, contact:

Privacy Contact (placeholder)
Email: [email protected]
Address: [Add your business mailing address here]

13) Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or content changes. The latest version will be posted on this page.