Privacy policy

Last updated: 1 May 2026

Bleam ("we", "us", or "our") operates bleamhealth.com and the related store, products, subscriptions, and services (the "Services"). Our store is hosted by Shopify, which provides the underlying e-commerce infrastructure. This Privacy Policy describes how we collect, use, share, and protect your personal information when you visit our site, place an order, contact us, or otherwise interact with the Services. If our Terms of Service and this Privacy Policy ever conflict on a privacy matter, this Privacy Policy controls.

By using bleamhealth.com or buying from us, you confirm you've read this policy and understand how we handle your information.

The short version

  • We collect what we need to ship your order, manage your account, run our marketing, and meet our legal obligations — nothing more.
  • We don't sell your personal information for money. We do share data with advertising partners (Meta, TikTok, Google) so we can show you relevant ads — you can opt out anytime.
  • We use Shopify as our store platform, so Shopify processes some of your information on our behalf. Read Shopify's consumer privacy policy.
  • You have rights over your data — to access, correct, delete, export, or stop targeted advertising. Email contact@bleamhealth.com to exercise any of them.
  • Bleam is operated from Australia and ships within the United States. Your information may move between those countries to fulfill your order.

Information we collect

Depending on how you interact with us, we collect the following categories of personal information:

  • Contact details: name, email address, phone number, billing address, shipping address.
  • Payment information: payment method, transaction confirmation, the last four digits of your card. Full card numbers are processed directly by Shopify Payments and our payment processors — we never see or store them.
  • Account information: username, password (encrypted), customer-account preferences, subscription settings, saved addresses.
  • Order and transaction data: products viewed, added to cart, purchased, returned, exchanged, or cancelled; subscription history; reviews you submit.
  • Communications with us: the content of any emails, SMS, or chat messages you send, including any health-related context you choose to share.
  • Device and technical data: IP address, browser type and version, operating system, device identifiers, and referring URL — automatically logged when you visit our site.
  • Usage data: pages viewed, links clicked, time on page, scroll depth, search queries, and similar interaction signals.
  • Marketing-consent records: whether you've opted in to email or SMS marketing, and your preferences.

Where this information comes from

  • Directly from you — when you create an account, place an order, sign up for emails or SMS, leave a product review, complete a quiz, or contact our support team.
  • Automatically — through cookies, pixels, and similar technologies on our website (see "Cookies and tracking technologies" below).
  • From service providers and partners — including Shopify, our payment processors, our shipping carriers, our supplement fulfillment partner Supliful, our subscription-management app, our email and SMS platforms, and our advertising partners.

How we use your information

  • To run our store and fulfill your orders — processing payments, shipping products, managing subscriptions, handling returns and replacements, and providing customer support.
  • To manage your account — creating and maintaining your customer account, remembering your preferences, and authenticating you when you log in.
  • To communicate with you — sending order confirmations, shipping notifications, subscription updates, customer-service replies, and important account or policy changes. These transactional messages are sent regardless of marketing-opt-in status.
  • For marketing and advertising — sending promotional emails or SMS (only if you've opted in), running targeted ads on Meta, TikTok, Google, and similar platforms, measuring ad performance, and tailoring website content. You can opt out of marketing anytime.
  • To improve our products and Services — understanding which products customers like, identifying site issues, A/B testing changes, and developing new SKUs.
  • For security and fraud prevention — detecting and preventing fraudulent transactions, abuse, and unauthorized access.
  • To meet legal obligations — complying with tax law, consumer-protection law, advertising regulations, and lawful requests from government authorities.

Marketing emails and SMS

We send marketing emails only to customers who've opted in (typically by checking a box at checkout, signing up via a popup, or entering an email at a giveaway or quiz). You can unsubscribe anytime by clicking the "unsubscribe" link at the bottom of any marketing email.

If you opt in to SMS marketing, you'll receive promotional and transactional text messages at the number you provided. Message and data rates may apply. Message frequency varies. Reply STOP to any message to unsubscribe, or HELP for assistance. Carriers are not liable for delayed or undelivered messages. By opting in to SMS, you consent to receive autodialed marketing text messages at the number you provide; consent is not a condition of any purchase.

You'll continue to receive transactional messages (order confirmations, shipping updates, subscription notifications) regardless of marketing-opt-in status — these aren't promotional.

Cookies and tracking technologies

We use cookies, pixels, web beacons, and similar technologies to run our site, remember your preferences, measure traffic, and run targeted advertising. The main categories:

  • Strictly necessary cookies — required for the site to function (cart, checkout, login). These cannot be turned off.
  • Analytics cookies — help us understand how visitors use our site (Shopify Analytics, Google Analytics).
  • Advertising cookies and pixels — used by us and our advertising partners (Meta Pixel, TikTok Pixel, Google Ads) to show you relevant ads on other websites and measure ad performance. These can be opted out of — see "Your privacy rights" below.

You can manage cookies through your browser settings or, where available, through the cookie banner on our site. Disabling some cookies may affect site functionality.

How we share information

We share personal information with the following types of recipients:

  • Service providers who run parts of our operation under contract — Shopify (e-commerce platform), payment processors, shipping carriers, our supplement fulfillment partner Supliful, subscription-management apps, email and SMS providers, customer-support tools, and analytics providers.
  • Advertising partners such as Meta, TikTok, and Google, to run and measure paid advertising. Under California, Virginia, Colorado, Connecticut, and similar US state privacy laws, this may be considered a "sale" or "share" of personal information for cross-context behavioral advertising. You can opt out anytime — see below.
  • Affiliates and corporate group, if applicable.
  • Legal and safety recipients — government agencies, courts, law enforcement, or other parties when required by law, in response to a subpoena or other legal process, or to protect our rights, property, or the safety of our customers or others.
  • Buyers in a business transaction — if Bleam is acquired, merged, or sold, customer information may be transferred as part of that transaction. We'll notify you if this materially affects how your data is handled.

We do not sell personal information for money.

Our relationship with Shopify

Bleam's store is hosted by Shopify, which provides the e-commerce platform powering bleamhealth.com. Information you submit to our Services is shared with Shopify so they can host the store, process payments, and provide related infrastructure. Shopify may also use this information for its own purposes — including improving the Shopify platform — under its own privacy policy.

To learn how Shopify handles your information and what rights you have with respect to data Shopify processes, read the Shopify Consumer Privacy Policy. You can exercise privacy rights against Shopify directly through the Shopify Privacy Portal.

Health-related information

Bleam sells dietary supplements. When you contact our customer-support team or leave a product review, you may share information about your health — for example, that you experience bloating, digestive discomfort, hormonal symptoms, or follow a specific diet. We treat this information with care: we use it only to answer your question or improve our products in aggregate, we do not share it with advertising partners, and we never use it to make targeted health claims to you specifically.

Bleam is not a healthcare provider. We are not subject to HIPAA, and the information you share with us is not "protected health information" under that law. Please don't send us sensitive medical records or diagnoses; if you have a medical question about whether our product is right for you, talk to your doctor.

Third-party websites and links

Our site may link to third-party websites — for example, ingredient suppliers, scientific studies, or social media platforms. We don't control those sites and aren't responsible for their privacy practices. Read their policies before sharing information with them.

Information you post on public surfaces (product reviews on our site, comments on our social media accounts) may be visible to other users and may be used by us or by those third-party platforms in ways we don't fully control.

Children's privacy

Bleam's products and Services are not intended for children. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us at contact@bleamhealth.com and we'll delete it. As of the "Last updated" date above, we have no actual knowledge that we sell or share personal information of anyone under 16, as those terms are defined under applicable law.

How we keep your information safe and how long we keep it

We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and vendor due diligence — to protect personal information. No system is perfectly secure, however, and we can't guarantee absolute security. Don't send sensitive information through unsecured channels (such as plain email) when an alternative is available.

We retain personal information only as long as we need it for the purposes described in this policy:

  • Account and order data: kept while your account is active, then for up to 7 years after closure to comply with tax, accounting, and consumer-protection record-keeping laws.
  • Marketing-consent records: kept until you withdraw consent, then for a reasonable period to demonstrate compliance with privacy and anti-spam laws.
  • Customer-support correspondence: kept for up to 3 years.
  • Cookie and analytics data: retained according to the relevant tool's retention settings (typically 12–26 months).

Your privacy rights

Depending on where you live, you may have some or all of the following rights:

  • Right to access or know. Request a copy of the personal information we hold about you and information about how we use and share it.
  • Right to delete. Request that we delete personal information we hold about you, subject to legal exceptions (we may need to retain some records for tax or fraud-prevention reasons).
  • Right to correct. Request that we correct inaccurate information about you.
  • Right to portability. Receive a portable copy of your information in certain circumstances.
  • Right to opt out of sale, sharing, or targeted advertising. Opt out of having your information used for cross-context behavioral advertising. Email contact@bleamhealth.com with the subject line "Opt out — targeted ads" to exercise this right. We also honor the Global Privacy Control (GPC) browser signal — if your browser sends GPC, we'll treat it as an opt-out for that browser and any associated account. Learn more at globalprivacycontrol.org.
  • Right to opt out of marketing communications. Unsubscribe from marketing emails using the link in any email; reply STOP to marketing SMS to opt out. You'll still receive transactional messages.

To exercise any right, email contact@bleamhealth.com with details about your request. We may need to verify your identity before responding (typically by confirming details only the account holder would know). We'll respond within the timeframe required by applicable law — usually 30 to 45 days. You may authorize an agent to make a request on your behalf; we'll require proof of authorization.

We won't discriminate against you for exercising any privacy right.

Other than Global Privacy Control, we don't currently respond to "Do Not Track" browser signals.

International data transfers

Bleam is operated from Australia, and our store ships within the United States. Your personal information may be transferred to, stored in, and processed in either or both countries — and in other countries where our service providers operate. When we transfer information internationally, we use safeguards required by applicable law to keep it protected.

Complaints

If you have a complaint about how we handle your personal information, please email contact@bleamhealth.com and we'll work with you to resolve it. If you're not satisfied with our response, you may also lodge a complaint with the data-protection authority in your jurisdiction:

  • Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au.
  • United States: your state attorney general's office (for state privacy law complaints) or the Federal Trade Commission (for federal complaints) — reportfraud.ftc.gov.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our products, or applicable law. When we do, we'll post the updated policy on this page with a new "Last updated" date. If the change is material, we'll provide additional notice — for example, by email to your account on file.

Contact

Questions about this Privacy Policy or your personal information:

Email: contact@bleamhealth.com
Response time: Within 1 business day, Monday–Friday