Last updated: September 24, 2026

Memblee operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Memblee is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Privacy Policy

Last updated: September 2026

This Privacy Policy describes how Blackbird Bloom, trading under the names Memblee and House of Blackbird ("Memblee", "we", "us" or "our"), collects, uses, stores and shares your personal information when you visit our website, use our online store, purchase a product or service, book a session, communicate with us or otherwise use our services (collectively, the "Services").

Our online store is powered by Shopify. Shopify provides the ecommerce infrastructure that allows us to offer our products and Services online and may process certain personal information in connection with your use of the store.

Please read this Privacy Policy carefully. If you have questions about how we process your personal information, you can contact us using the details at the end of this policy.

1. Who we are

The controller responsible for the processing of your personal information is:

Blackbird Bloom
Trading under the names Memblee and House of Blackbird
Pieterbreugellaan
5261 AM Vught
The Netherlands

Chamber of Commerce (KvK): 93447019
VAT: NL005018155B72
Email: meer@memblee.com

Data controller: M.B. van Griensven

2. Personal information we collect

The personal information we collect depends on how you interact with us and which products or Services you use.

We may collect personal information when you:

• visit or use our website or online store;

• purchase a physical or digital product;

• book a session, reading or other Service;

• complete a form;

• create an account;

• request or access a digital download;

• subscribe to our newsletter or other communications;

• participate in a workshop, programme, event or other offering;

• contact or communicate with us.

Depending on the circumstances, this may include:

• your name;

• email address;

• telephone number;

• billing and delivery address;

• account and login information;

• order and transaction information;

• payment-related information;

• information you provide through forms, questionnaires or booking forms;

• information you voluntarily provide in preparation for or during a session or Service;

• date of birth, place of birth and time of birth where relevant to a Service you have requested;

• information concerning interests, preferences or systems such as astrology or Human Design where relevant to a Service;

• IP address, browser information, device information and information about how you use our website;

• communications you send to us;

• marketing and communication preferences.

Payment information may be processed directly by our payment providers and ecommerce providers. We do not necessarily receive or store complete payment card details ourselves.

We aim to collect only the information reasonably necessary for the relevant purpose.

3. Information collected through Shopify

Our online store is hosted and powered by Shopify.

When you visit, browse or make a purchase through our store, Shopify may collect and process information about your device, browser, network connection, IP address, use of the store, shopping activity, orders, payments and other interactions with the Services.

Information you provide through the store may be transmitted to and processed by Shopify and relevant service providers in order to operate the online store, process transactions, prevent fraud, provide customer support and perform related ecommerce functions.

Shopify may process certain information as our service provider and may also process information for its own purposes as described in Shopify's own privacy documentation.

4. How we use your personal information

We may use personal information to:

• provide and perform our products and Services;

• process and fulfil orders;

• provide digital products and downloads;

• manage bookings, sessions, readings, programmes and events;

• communicate with you before, during and after a purchase or Service;

• manage customer relationships and administration;

• process payments and maintain financial records;

• provide customer support;

• operate, maintain and improve our website and Services;

• understand how our website and online store are used;

• maintain the security of our website, accounts and Services;

• detect or prevent fraud, abuse or other unlawful activity;

• comply with legal, tax and administrative obligations;

• send newsletters and marketing communications where permitted;

• establish, exercise or defend legal claims where necessary.

5. Legal bases for processing

Where the General Data Protection Regulation ("GDPR") applies, we process personal information on one or more of the following legal bases:

Performance of a contract
Where processing is necessary to provide a product or Service you have requested, process your order, manage a booking or otherwise perform our agreement with you.

Legal obligation
Where we are required to retain or process information to comply with applicable law, including tax and accounting obligations.

Consent
Where you have given us specific consent, for example for certain marketing communications, cookies or the processing of particular information where consent is required.

Legitimate interests
Where processing is reasonably necessary for our legitimate business interests, such as operating and improving our Services, maintaining security, preventing misuse and managing our business, provided that these interests are not overridden by your rights and interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

6. Special category personal information

Because of the nature of certain Services, particularly personal, intuitive, energetic or other one-to-one work, you may voluntarily share information that could constitute special category personal data under the GDPR, including information concerning your health.

We do not require you to provide more sensitive personal information than is reasonably necessary for the Service.

Where special category personal information is processed on the basis of consent, we will only process that information where you have provided explicit, specific and informed consent.

You may withdraw this consent at any time. Withdrawal does not have retroactive effect, although it may affect our ability to continue providing a Service where the relevant information is necessary for that Service.

Special category personal information is treated confidentially and with additional care.

7. Sessions, readings, notes and recordings

We may make limited notes in connection with coaching, readings, mediumship, consultancy, sessions or other Services where reasonably necessary to prepare for, provide or follow up on the Service.

Such notes are treated confidentially and are not shared with third parties unless this is necessary for the provision of the Service, you have given permission, or disclosure is otherwise required or permitted by law.

Sessions are not recorded as standard.

Where we wish to make an audio or video recording of a session, we will obtain appropriate permission beforehand. Recordings will not be retained longer than reasonably necessary for the purpose for which they were made.

8. Marketing communications

We may send you newsletters, updates, offers and other marketing communications where you have consented to receive them or where we are otherwise permitted to do so under applicable law.

You can unsubscribe from marketing emails at any time using the unsubscribe option included in the communication or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending transactional or service-related communications, such as order confirmations, download links, booking information or information necessary to perform an agreement with you.

9. Cookies and similar technologies

Our website and online store use cookies and similar technologies.

These may include:

• strictly necessary and functional cookies required to operate the website and store;

• analytics cookies that help us understand how our website is used;

• preference cookies;

• marketing and advertising cookies.

Where required by law, non-essential cookies are only placed after you have provided consent through our cookie settings or consent banner.

You can change your cookie preferences through the available cookie settings. You may also be able to control cookies through your browser settings.

Some features of the website may not function correctly if certain cookies are disabled.

10. How we share personal information

We do not sell your personal information.

We may share personal information with third parties where reasonably necessary to operate our business, provide the Services, fulfil your order or comply with legal obligations.

These parties may include:

• Shopify, for ecommerce hosting, store functionality, orders and related Services;

• payment providers such as Mollie, for processing payments;

• MailerLite, where used for newsletters and email communications;

• Whereby, where used to provide online meetings or sessions;

• Google and Google Analytics, where used for website functionality and analytics;

• professional advisers such as accountants, legal advisers or other professional service providers where necessary;

• IT, hosting, storage, security and other technology providers;

• public authorities or other parties where disclosure is required by law.

Depending on the circumstances, these parties may act as processors on our behalf or as independent controllers of personal information.

Where required, we enter into appropriate data processing agreements with processors.

11. WhatsApp and other communication services

Where you choose to communicate with us through WhatsApp, your information may also be processed by WhatsApp and Meta Platforms in accordance with their own privacy practices.

Personal information processed through these services may be transferred or accessed outside the European Economic Area.

We recommend that you do not send highly sensitive or special category personal information through WhatsApp unless necessary and appropriate.

12. International transfers

Some of the service providers we use, including Shopify and other technology providers, may process or store personal information outside the European Economic Area ("EEA").

Where personal information is transferred internationally, we take appropriate measures where required under applicable data protection law. Depending on the recipient and destination, these measures may include an adequacy decision, Standard Contractual Clauses approved by the European Commission and appropriate supplementary safeguards.

13. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide our Services and comply with legal, accounting and reporting obligations.

Retention periods depend on the type of information and why we process it.

In general:

• financial and administrative records are retained for the applicable statutory tax retention period;

• newsletter information is retained until you unsubscribe or the information is otherwise no longer required;

• order and customer information is retained for as long as reasonably necessary for administration, customer service and legal obligations;

• session-related information and notes are retained only for as long as reasonably necessary for the relevant Service and related administration;

• recordings, where made with permission, are not retained longer than necessary for their stated purpose.

We may retain certain information for longer where reasonably necessary to establish, exercise or defend legal claims or where we are required to do so by law.

14. Security

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Depending on the relevant system, these measures may include secure connections, access restrictions, encryption, authentication measures, data minimisation and two-factor authentication.

No method of transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

15. Your privacy rights

If the GDPR or other applicable data protection legislation applies to you, you may have the right to:

• request access to the personal information we hold about you;

• request correction of inaccurate or incomplete information;

• request deletion of your personal information;

• request restriction of certain processing;

• object to certain processing;

• withdraw consent where processing is based on consent;

• request portability of certain personal information;

• object to direct marketing;

• lodge a complaint with a competent data protection authority.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise your rights, contact us at meer@memblee.com.

We may need to verify your identity before completing certain requests.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

16. Children's privacy

Our Services are not intended for children where they are not legally able to enter into the relevant agreement or provide the required consent independently.

We do not knowingly seek to collect personal information from children contrary to applicable law.

If you believe that a child has provided personal information to us unlawfully, please contact us so that we can investigate and, where appropriate, delete the information.

17. Third-party websites and services

Our website may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy practices, security or content of those third parties. When you leave our website or interact directly with a third-party service, that party's own privacy terms and policies may apply.

We recommend reviewing the privacy information of any third-party service you choose to use.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes to our Services, technology, service providers or applicable law.

The most current version will be published on our website. Where required by law, we will provide additional notice of material changes.

19. Contact

If you have questions about this Privacy Policy, our privacy practices or the personal information we hold about you, or if you would like to exercise your privacy rights, please contact:

Blackbird Bloom
Trading as Memblee and House of Blackbird
Pieterbreugellaan
5261 AM Vught
The Netherlands

KvK: 93447019
VAT: NL005018155B72
Email: meer@memblee.com

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at letters@memblee.com or contact us at Pieterbreugellaan 10, 5261 AM Vught, Netherlands. For the purpose of applicable data protection laws, we are the data controller of your personal information.