Terms & Conditions
InBloom
https://inbloom.al/
Version 1.0 | July 2026
This website belongs to In Bloom. In Bloom is an e-commerce platform dedicated to the distribution of authentic Korean skincare products, committed to providing consumers with carefully selected, high-quality cosmetic solutions.
When you visit our website or send us a message, you provide us with some personal data. This Privacy Policy explains:
what data we collect;
why we collect it;
who may access it;
what rights you have.
Please read it carefully. If you have any questions, you may contact us at the addresses below.
DATA CONTROLLER
Eni Syla, is a Sole Proprietor, registered at the National Business Center with Unique Identification Number M61320012O, with legal seat located at the address: Tirane, Tirane, Zona Kadastrale nr 8170 , Rruga Endri Keko , shkalla 3/1 , Njesia Administrative nr 3.
Eni Syla shall collect and process customer’s personal data, who visit, use or access the Website, for the purpose and in compliance with the terms and conditions determined here in below in this Privacy Policy (“Privacy Policy”).
The security of your personal data is important to us and we take the utmost care to protect it.
This Privacy Policy aims to inform you, as a data subject, about the personal data we collect and process, the purposes of such processing and you rights in relation to your personal data.
According to the records of the National Business Center (QKB), Ms. Eni Syla is the registered owner of the business operating under the trade name In Bloom.
Legal Grounds
Justification
Performance of a Contract
(Article 7 point (b) of Law 124/2024)
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
When you place an order through In Bloom’s Website, a distance sales contract is established between you and In Bloom. The processing of your personal data is necessary for the conclusion and performance of this contract and for fulfilling our obligations arising from it. Such processing includes but is not limited to: creating and managing your user account, processing orders, issuing invoices, arranging delivery, and handling returns, refunds, or warranty claims. Without this processing, In Bloom would not be able to conclude or perform the contractual relationship.
The functioning of the In Bloom Website requires the processing of certain personal data that is strictly necessary for the performance of the contract concluded with user/data subject upon registration and continued use of the digital services.
· In particular, the processing of identification and authentication data is required to create and manage the user account, verify the user’s identity and enable access to essential Website and functionalities. Without such processing, In Bloom would not be able to provide the digital services requested by the data subject.
Legitimate interest
(Article 7 point (dh) of Law 124/2024
Processing is necessary for the compliance with a legal interest pursued by the Controller 1 or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
In Bloom may process certain personal data when it is necessary for the purpose of legitimate interest pursued by In Bloom, provided that such interests are not overridden by your fundamental rights and freedoms. This includes processing activities for preventing and detecting fraud or misuse of service; ensuring the security, integrity availability and the proper functioning of the Website and IT systems; performing internal analytics to improve user experience; maintaining minimal records necessary for legal claims; whenever processing is based on legitimate interest, In Bloom conduct a balancing test (legitimate Interest Assessment) to ensure that such processing does not disproportionately affect your privacy.
PERSONAL DATA PROCESSED AND THE PURPOSES FOR PROCESSING
In Bloom collects and processes the following categories of personal data within the scope of its e-commerce activities conducted through its Website in accordance with the personal data processing conditions provided in Articles 6, 7 and 8 of Law 124/2024 for the following purposes:
Personal data collected
Purpose of processing
Legal Basis
Identification Data: Name, Surname;
Contact Details: Email address, Mobile phone number.
Account and Authentication Data: Username
Website usage – Account creation/registration and management - We need to process your data to identify you as user or as guest; to create, manage and maintain your online customer account, enabling you to view your orders, preferences and purchase history. Synchronize the user profile across devices
Performance of a contract (Article 7, point (b) of Law 124/2024)
Identification Data: Name, Surname;
Contact Details: Email address, mobile phone number, billing and delivery address;
Shopping and Transaction Data: Purchase and payment history, shopping preferences, shopping cart content, refund and return details;
Order processing and contract performance -To process, confirm and fulfill your online orders/purchases, issue invoices, manage payments, deliver products and handle returns, refunds or warranty claims.
Performance of a contract (Article 7, point (b) of Law 124/2024)
Identification Data: Name, Surname;
Contact Details: Email address, mobile phone number, billing and delivery address;
Shopping and Transaction Data: interactions with Customer Support Service.
Customer service and communication -To provide assistance and respond to your inquiries, requests, or complaints and provide updates related to your orders, deliveries or returns.
Performance of a contract (Article 7, point (b) of Law 124/2024)and Legitimate interest (Article 7, point dh of Law 124/2024)
Identification Data: Name, Surname;
Contact Details: Email address, mobile phone number;
Profiling and Website Usage Data: Information collected automatically through cookies and similar technologies, including age, gender, IP address, traffic data, geolocation data, device information (Device ID, software version connection used, operating system, browser used) and keywords searched according to your interests.
Shopping and Transaction Data: purchase history;
Marketing and promotional activities -To send newsletters, promotional messages and special offers about In Bloom products or services if you have given your consent.
Consent (Article 7, point (a) of Law 124/2024)
Identification Data: Name, Surname;
Contact Details: Email address, mobile phone number, billing and delivery address;
Shopping and Transaction Data: purchase history, refund and return details;
Legal compliance and protection of rights -To comply with legal obligations arising from tax, accounting and consumer protection laws and to establish, exercise or defend legal claims; To represent Joint Controllers before courts, public institutions, and other competent authorities
Legitimate interest (Article 7 point (dh) of Law 124/2024)
Technical, infrastructure and Security Data information generated or recorded when you access and use the Website location, including technical identifiers (such as IP address and device identifiers), device and software information, access timestamps, system and application logs, performance and stability metrics, server response data, and security-related records (including authentication events and automated protection logs).
Such data is processed for the purposes of maintaining and ensuring the proper functioning, stability and continuity of the digital infrastructure; diagnosing errors, crashes and service disruptions; monitoring and improving the technical performance of the platform; detecting, preventing and responding to cybersecurity incidents; protecting user accounts from unauthorized access;
Legitimate interest (Article 7 point (dh) of Law 124/2024)
Who may access your data?
In Bloom does not disclose, sell, or share your personal information with third parties. Access to your personal data is strictly limited to Eni Syla, who is solely responsible for processing orders and managing your purchases.
Your message is seen only by authorized In Bloom staff who handle client communications. Technical logs are accessed only by In Bloom’s staff for diagnostic purposes.
We do not share your data outside In Bloom, except in the following cases:
if required by law or a court order;
if we engage another company to assist with our IT systems (e.g. a hosting provider) — that company is contractually obliged to protect your data in exactly the same way as we do. In this case is Eni Syla that deals with the website.
We do not transfer your data outside Albania.
Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect data from children.
What is recorded
What it means
Why we keep it
IP address
Your device’s internet number, e.g. 192.168.1.1
Website security and technical diagnostics
Browser and version
The application you use to open the page, e.g. Chrome 120, Firefox 121
We ensure the website displays correctly
Device type
Whether you visit from a phone, tablet, or computer
We ensure the website displays correctly
Page visited and time
The URL of the page and the time of your visit
Technical diagnostics of errors
Referring page (if any)
The website from which you clicked the link to reach us
Technical diagnostics
This data is stored only in our server’s technical logs. We do not link it to your personal identity and do not use it to track you.
Our website does not use tracking cookies (files that follow your online behavior) and has no analytics systems such as Google Analytics.
Data recorded automatically by our website each time you visit our website, our system may automatically record certain technical data. This occurs on every website because it is how servers function.
Exercise of Rights and Contact point
Data subjects may exercise their rights under this Privacy Policy and Law 124/2024 with respect to each of Joint Controller.
In any case, you have the right to freely withdraw your consent at any time by contacting In Bloom, without affecting the lawfulness of the processing carried out prior to such withdrawal.
The following contact details apply to both Joint Controllers for any inquiries regarding the processing of your personal data, including but not limited to the exercise of your rights:
1. Adress: : Tirane, Tirane, Tirane,Zona Kadastrale nr 8170 ,Rruga Endri Keko ,shkalla 3/1 ,Njesia Administrative nr 3
2. Email: inbloom.team.al@gmail.com
Access to the Website
The Website is made available free of charge to all users with access to an internet connection.
In Bloom does not guarantee that the Website or any of its content will always be available or uninterrupted. We reserve the right to suspend, withdraw, discontinue or modify the Site, in whole or in part, at any time and without prior notice.
In Bloom shall not be liable to you for any unavailability of the Site, regardless of the duration for such interruption.
The Content of the Website is provided solely for your personal, non-commercial use. Downloading, copying, or otherwise saving any Content for personal purposes does not grant you any right of ownership or license to reproduce, distribute, modify, publicly display or otherwise use the Content for commercial or public purposes. Any unauthorized use, reproduction, distribution, or publication of the Content in whole or in part, without the prior written consent of In Bloom is strictly prohibited.
Liability for Delays
In Bloom shall not be held liable for any delay or failure in delivery caused by circumstances beyond its reasonable control.
Nevertheless, In Bloom will take all reasonable steps to complete the delivery as soon as practicable and will keep you informed of any substantial delays.