Blumi

Privacy Policy

Last updated: 25 April 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1 — Interpretation and Definitions

1.1 Interpretation

The words of which the initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

1.2 Definitions

  • Account: a unique account created for You to access our Service or parts of our Service.
  • Affiliate: an entity that controls, is controlled by or is under common control with a party.
  • Application: the Blumi software program provided by the Company or Operator.
  • Business: for the purpose of applicable consumer-privacy laws, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing.
  • Company: refers to Blumi (the Data Controller), referred to as “the Company”, “We”, “Us” or “Our”.
  • Consumer: refers to You, the Service user.
  • Cookies: small files placed on Your Device by a website, containing the details of Your browsing history on that website among many other uses.
  • Country: refers to Singapore.
  • Data Controller: refers to the Company or Operator as the legal person that determines the purposes and means of the processing of Personal Data.
  • Device: any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Do Not Track (DNT): a concept that has been promoted by US regulatory authorities to allow Internet users to control the tracking of their online activities across websites.
  • Operator: refers to Blumi (the Data Controller).
  • Personal Data: any information that relates to an identified or identifiable individual. This includes information protected under Singapore's Personal Data Protection Act 2012 (PDPA), the EU GDPR and other applicable data-protection regimes.
  • Service: refers to the Application or Website or both.
  • Service Provider: any natural or legal person who processes the data on behalf of the Company or Operator. Under GDPR, Service Providers are considered Data Processors.
  • Third-party Social Media Service: any website or social network through which a User can log in or create an account to use the Service.
  • Usage Data: data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
  • Website: refers to Blumi, accessible from the URL where this Service is hosted.
  • You: the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

2 — Contact Us

If you have any questions about this Privacy Policy, You can contact us:

3 — Collecting and Using Your Personal Data

3.1 Types of Data Collected

3.1.1 Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to: email address, first and last name, phone number, address, postal code, city, bank account information, payment-card information and Usage Data.

3.1.2 Usage Data

Usage Data is collected automatically when using the Service. It may include information such as Your Device's Internet Protocol address, browser type and version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

3.1.3 Information from Third-Party Social Media Services

The Company or Operator allows You to create an account and log in to use the Service through Third-Party Social Media Services such as Google, Facebook, Apple or others. If You choose to register through one of these, We may collect Personal Data already associated with the account.

3.1.4 Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Cookies can be Persistent or Session Cookies and are used for: necessary / essential, notice acceptance, functionality and tracking and performance purposes.

3.2 Use of Your Personal Data

The Company or Operator may use Personal Data for: providing and maintaining our Service, managing Your Account, performing the contract you have with us, contacting You, providing You with news, attending and managing Your requests, business transfers, and other purposes such as data analysis and improving the Service.

We may share Your personal information in the following situations: with Service Providers, for business transfers, with Affiliates, with business partners, with other users (when You interact in public areas), and with Your consent.

3.3 Retention of Your Personal Data

The Company or Operator will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes and enforce our legal agreements and policies.

3.4 Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This may involve transferring Your data to — and maintaining it on — computers located outside of Your country.

3.5 Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You. Our Service may give You the ability to delete certain information about You from within the Service. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

3.6 Disclosure of Your Personal Data

The Company or Operator may disclose Your Personal Data in good faith belief that such action is necessary to: comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of Users of the Service or the public, and protect against legal liability.

3.7 Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

4 — Detailed Information on the Processing of Your Personal Data

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

4.1 Analytics

We may use third-party Service providers to monitor and analyse the use of our Service, including Google Analytics, Vercel Analytics, Plausible or Fathom.

4.2 Email Marketing

We may use Your Personal Data to contact You with newsletters, marketing or promotional materials and other information that may be of interest to You. You may opt-out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send.

4.3 Payments

We use third-party payment processors. Payment-card details are not stored or collected by Us — they are provided directly to our third-party payment processors whose use of Your personal information is governed by their Privacy Policy. Processors include Stripe (and may include GrabPay or PayPal in future).

5 — Singapore PDPA Notice

Where we collect, use or disclose Your Personal Data, We will do so in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). You may withdraw consent to our collection, use or disclosure of Your Personal Data by contacting our Data Protection Officer at hey@blumi.co.uk. Withdrawing consent may affect Our ability to provide the Service to You.

6 — GDPR Privacy

If You are within the European Union or the United Kingdom, this section also applies. Our legal bases for processing Personal Data include: Your consent, performance of a contract with You, our legitimate interests, our legal obligations, vital interests, and public interest tasks. Under GDPR, You have rights to access, rectify, erase, restrict processing, object, data portability, and withdraw consent at any time.

7 — Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

8 — Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.