California Privacy

Effective Date: May 2026

This California Privacy Notice supplements our general Privacy Policy and applies specifically to California residents under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA).

It is provided by Blueburry Royale Inc., a California corporation, doing business as BR Bespoke.

1. Categories of Personal Information We Collect

In the past twelve months we have collected the following categories of personal information from California residents:

• Identifiers — name, postal address, email address, phone number, IP address, online identifiers.
• Customer records — signature, physical characteristics (body measurements), payment information (collected by Authorize.net, not stored by us).
• Commercial information — products purchased, services obtained, order history.
• Internet or network activity — browsing history on our site, interaction with our advertising and emails.
• Geolocation data — approximate location derived from IP address.
• Sensory data — fitting photos that you or our consultant capture during your appointments.
• Professional or employment information — for consultant applicants who submit applications through the Site.
• Inferences — preferences and interests derived from the above (for example, fabric preferences, fitting profile).

2. Sources of Personal Information

• Directly from you (forms, appointments, fittings, payments, consultant applications).
• Automatically through cookies and analytics when you use our site.
• From our retail studio consultants who record measurements and style notes during your sessions.

3. How We Use Personal Information

• To produce, fit, and deliver bespoke garments.
• To process payments and provide receipts and shipping notifications.
• To schedule and confirm appointments and fittings.
• To communicate with you about orders, services, and (with your consent) marketing.
• To operate, improve, and secure our website and internal applications.
• To comply with legal obligations (tax, accounting, fraud prevention).

4. Categories of Personal Information Disclosed for Business Purposes

We disclose the categories above to the following types of recipients for business purposes:

• Production workshops — identifiers, customer records (measurements, style), commercial information.
• Payment processors (Authorize.net) — identifiers, payment-related identifiers, commercial information.
• Hosting and platform providers (Hostinger, WordPress, Google Cloud / Firebase) — identifiers, internet activity, geolocation.
• Email providers (Brevo) — identifiers, customer records.
• Analytics providers (Google Analytics) — internet activity, geolocation, inferences.
• Shipping carriers — identifiers, customer records (address).

5. Sale or Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA / CPRA.

If we ever change this practice, we will provide a clear “Do Not Sell or Share My Personal Information” opt-out link on our home page footer and update this notice in advance.

6. Sensitive Personal Information

We do not use sensitive personal information beyond the purposes permitted under the CPRA (for example, providing the goods and services you request and maintaining security).

7. Retention

We retain personal information for the periods described in our Privacy Policy. In summary: order and measurement records are retained for the duration of your client relationship plus a minimum of seven years (California tax / business records law). Other information is retained only as long as needed for the purpose for which it was collected.

8. Your California Rights

If you are a California resident, you have the following rights:

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
• Right to delete — request deletion of personal information we hold about you, subject to legal exceptions (for example, records we must retain for tax purposes).
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share, but you may exercise this right at any time.
• Right to limit use of sensitive personal information — we do not use sensitive personal information beyond permitted purposes.
• Right to non-discrimination — we will not deny services, charge different prices, or provide different quality because you exercised your rights.

9. How to Exercise Your Rights

To submit a request, email us at msromal@gmail.com with the subject line “California Privacy Request”. Please tell us which right you wish to exercise and provide enough information for us to verify your identity (typically the name and email associated with your account or appointments).

We will respond within 45 days, with one possible 45-day extension if needed (we will notify you within the first 45 days if an extension is needed). There is no charge unless your request is manifestly unfounded or excessive.

You may also designate an authorized agent to submit a request on your behalf. We will require written verification of the agent’s authority and may ask you to confirm directly.

10. Children Under 16

We do not knowingly sell or share the personal information of consumers under 16. We do not knowingly collect personal information from children under 16 in the first place.

11. Changes to This Notice

We may update this California Privacy Notice from time to time. The updated version takes effect when posted at this URL with a new effective date.

12. Contact

Questions about this notice or our California privacy practices:

Email: msromal@gmail.com
Mail: Blueburry Royale Inc., California, USA
Subject line for privacy requests: “California Privacy Request”

Effective Date: May 2026

This Privacy Policy explains how Blueburry Royale Inc., a California corporation, doing business as BR Bespoke (“we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit our website at brbespoke.com, interact with our retail studios, or engage with our bespoke garment production services.

1. Information We Collect on This Website

1.1 Information You Provide

• Appointment requests and contact forms — name, email, phone, preferred studio location, garment interest, message content.
• Newsletter signup — email address (and any optional information you choose to share).
• Consultant applications — name, contact information, resume / experience details submitted through our online application.

1.2 Information Collected Automatically

• Cookies and similar technologies — for site functionality, analytics, and (with your consent) personalization. See “Cookies” below.
• Log data — IP address, browser type, device, operating system, referring URL, pages visited, timestamps, session duration. Collected by our hosting provider (Hostinger) and our analytics tools.
• Approximate location — derived from IP address, used to highlight your nearest studio.

1.3 Information You Provide When Becoming a Client

When you proceed from this website to placing an order or scheduling a fitting through our internal application, additional information is collected (name, address, body measurements, style preferences, fitting photos, payment information). The collection and use of that information is governed by our internal application’s privacy policy at https://bespokeospro.web.app/privacy-policy.

2. Cookies

We use cookies to operate the site, measure performance, and improve user experience. Our cookie banner gives you category-level control:

• Essential — required for the site to function (session, security, accessibility). Cannot be disabled.
• Analytics — Google Analytics 4, used to measure aggregate usage. Disabled by default until you accept; uses Google Consent Mode v2 to honor your choice.
• Personalization / Advertising — disabled by default; only used if you explicitly accept.

You can change your preferences at any time by clicking the “Cookie Settings” link in the site footer.

3. How We Use Your Information

• To respond to your appointment requests, applications, and other inquiries.
• To send the marketing communications and newsletters you have subscribed to (you can unsubscribe at any time).
• To operate, maintain, and improve the website and our services.
• To analyze website performance and audience trends (in aggregate, non-identifying form).
• To comply with our legal obligations and to protect our rights.

4. Google User Data — Limited Use Disclosure

Our internal staff application uses Google APIs (including Google Calendar) for appointment synchronization. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising and do not transfer it except as necessary to provide the requested feature, to comply with law, or as part of a merger or acquisition.

5. How We Share Your Information

We share personal information only with parties who help us operate the site or deliver our service, under appropriate contractual safeguards:

• Hostinger — website hosting.
• WordPress / Automattic — content management platform.
• Google (Analytics, Tag Manager, Consent Mode) — site analytics.
• Brevo (formerly Sendinblue) — newsletter and transactional email delivery.
• Authorize.net — if you proceed to placing an order, payment processing.
• Production workshops — if you become a client, your measurements, fabric, and style selections are shared with our offshore production workshops to make your garment.
• Legal authorities — when required by law, subpoena, or to protect our rights.

We do not sell your personal information.

6. Data Retention

Inquiry and form submission data is retained as long as needed to respond to your request and for a reasonable period thereafter. Customer order, measurement, and transactional records are retained for the duration of your relationship with us plus the period required by California tax and business records law (typically seven years). Newsletter subscriptions are retained until you unsubscribe.

7. Security

We protect personal information using industry-standard security controls, including HTTPS/TLS in transit, encryption at rest at our hosting and database providers, role-based access controls, and audit logging on our internal staff application. No security system is impenetrable; we cannot guarantee absolute security.

8. Your Rights

California residents — see our separate California Privacy Notice for detailed CCPA / CPRA rights and how to exercise them.

European Economic Area and United Kingdom residents — under the General Data Protection Regulation (GDPR) you have the right to access, correct, delete, restrict, and port your personal data, the right to object to processing, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at msromal@gmail.com. We will respond within the timeframes required by applicable law.

9. Children’s Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.

10. International Transfers

Our production workshops are located outside the United States. If you become a client, your measurements and order specifications may be transferred to and processed in the workshop’s country for the sole purpose of manufacturing your garment. We use contractual safeguards with each workshop to protect this data.

11. Third-Party Links

This website may contain links to third-party sites we do not control. We are not responsible for the privacy practices of those sites. Please read their privacy policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the Effective Date above and, where appropriate, by direct notice. Continued use of our website after an update constitutes acceptance.

13. Contact Us

Questions about this Privacy Policy or our data practices:

Email: msromal@gmail.com
Mail: Blueburry Royale Inc., California, USA