Privacy Policy

Last updated: May 31, 2026

MindBloom ("we," "us," or "our"), operated by COLORADO POPPYS INC (EIN 84-1490272), is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website coloradopoppys.com or interact with our SMS marketing communications.

1. Information We Collect

We may collect the following types of information:

• Personal Data: Name, email address, mobile phone number, and shipping/billing address when you place an order or subscribe to our SMS list.
• Usage Data: IP address, browser type, operating system, referring URLs, pages visited, and interaction timestamps collected automatically through cookies and similar technologies.
• Device Data: Device identifiers, screen resolution, and mobile network information used to optimize your browsing experience.

2. SMS Communications

When you provide your mobile phone number and opt in, you consent to receive recurring automated marketing and informational text messages from MindBloom. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message. Reply HELP for assistance. Consent to receive SMS is not a condition of purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. The phone number and SMS opt-in consent you provide are used solely by MindBloom to deliver the messages you requested and to support your order. We do not sell, rent, or share your mobile opt-in data or text-messaging consent with any third party. All other categories of data sharing described in this policy exclude text-messaging originator opt-in data and consent.

3. How We Use Your Information

We use the collected data for the following purposes:

• Process and fulfill your orders and deliver purchased products.
• Send transactional messages (order confirmations, shipping updates).
• Deliver promotional offers, discounts, and product announcements via SMS and email (with your consent).
• Improve our website, products, and customer experience.
• Respond to customer service inquiries and support requests.
• Comply with legal obligations and enforce our Terms of Service.

4. Cookies and Tracking Technologies

Our website uses cookies, pixels, and similar tracking technologies to enhance your experience, analyze traffic, and serve relevant content. You can manage cookie preferences through your browser settings. Disabling cookies may limit certain website features.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data with:

• Service Providers: Payment processors, shipping partners, SMS platform providers, and analytics services that help us operate our business.
• Legal Requirements: When required by law, court order, or government regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Your Rights Under the CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale of your personal information (we do not sell personal data).
• Non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at support@coloradopoppys.com.

7. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy or as required by law. SMS opt-in records are retained for the duration of your subscription plus a reasonable period for compliance verification.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us immediately so we can take appropriate action.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those external sites. We encourage you to review the privacy policies of any third-party site you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of our services after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

COLORADO POPPYS INC
EIN: 84-1490272
342 East Elkhorn
Estes Park, CO 80517-2170 — US
Email: support@coloradopoppys.com