Privacy policy

Who we are

BlueBloom is the trading name of Tarryn Blom, a sole proprietor in South Africa. Tarryn Blom is the responsible party and Information Officer under the Protection of Personal Information Act, 4 of 2013 (POPIA). Contact us at info@bluebloom.co.za or 074 837 5701.

What we collect

• Scorecard submissions: your email address and answers, only if you choose to request the full report. Taking the scorecard without submitting your email sends us nothing.
• Enquiries and engagements: your name, work contact details, company details, correspondence, project inputs and anything else you provide when enquiring or working with us.
• Payments: payer details, invoice information, transaction references, amount, currency and payment status. Payfast processes payment credentials; BlueBloom does not receive or store your complete card or bank-account credentials.

This site sets no cookies and runs no third-party analytics or advertising trackers. Payfast's own site and payment environment are governed by its privacy policy.

Why we process it

We process personal information to provide a requested scorecard report, respond to enquiries, conclude and perform engagements, process and reconcile payments, prevent fraud, keep legally required business records, resolve disputes and protect our legal rights. We do not sell personal information, share it for third-party marketing, or add you to a mailing list unless you ask.

Who receives it

We disclose only what is reasonably necessary to service providers that support the engagement, including our hosting provider and Payfast for payment processing; to professional advisers under duties of confidentiality; or to regulators, courts and law-enforcement bodies where law requires it. We remain accountable for processors we appoint and require appropriate confidentiality and security.

Retention and location

Scorecard submissions are kept while relevant to a possible or active engagement and deleted on request unless law requires retention. Client, invoice and transaction records are kept for the periods required by tax, accounting, fraud-prevention and other applicable laws. Working copies of client material are deleted when no longer needed for the engagement or a legal purpose.

Our hosting and service-provider infrastructure may be located outside South Africa. Where personal information crosses borders, we apply the safeguards required by POPIA section 72, including using recipients subject to substantially similar protections or binding contractual safeguards.

Security

We use reasonable technical and organisational safeguards appropriate to the information and the risk. Payments are completed in Payfast's payment environment. No internet transmission or storage system can be guaranteed completely secure, so please do not email passwords, complete payment-card details or information that the engagement does not require.

Your rights

Under POPIA you may ask what we hold about you, request correction or deletion, object to processing, withdraw consent where consent is the basis, and complain to the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za. To exercise a right, email info@bluebloom.co.za. We respond within one business day and action valid requests within a reasonable time, subject to identity verification and any lawful reason to retain information.