Bloom Portfolio
Bloom Portfolio is a self hosted website tool. This page explains its cookies, your GDPR and ePrivacy obligations, data transfers and how to deploy it with valid consent.
What does Bloom Portfolio do?
What Bloom Portfolio is and how it works
Bloom Portfolio is provided by Elegant Themes and runs on infrastructure that you control. It supports your website functionality directly, so you act as the controller for any personal data it processes.
What data and cookies Bloom Portfolio processes
Bloom Portfolio processes the data your visitors and members submit and stores first party cookies for sessions or preferences in your own database, so no data leaves your environment unless you connect an external provider.
GDPR and ePrivacy implications
Even when software is self hosted you remain fully responsible under the GDPR. You decide the purposes and the means, so you must document the processing, secure the data and respect the rights of the people whose data you hold.
Do you need consent
Because Bloom Portfolio sets cookies or processes identifiers that are not strictly necessary, you must obtain prior, informed and freely given consent before it loads.
International data transfers
Bloom stores email opt in records in your own WordPress database, although the email addresses you collect are usually forwarded to the email marketing provider you connect. Even so, record the hosting location in your records of processing to demonstrate accountability under Article 30 GDPR.
How to stay compliant with Bloom Portfolio
Keep Bloom Portfolio updated, restrict who can access the data, set a sensible retention period, describe any cookies it sets in your cookie policy and, if you forward data to an external provider, sign a data processing agreement with that provider.
Bloom Portfolio and the GDPR
Bloom Portfolio is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR)
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law)
Impact assessment (DPIA)
Bloom Portfolio is limited in scope and low risk, so a full DPIA is usually not required, but you should document your screening decision to evidence accountability.
Sample text for your banner
We use Bloom Portfolio to provide core features of this website. With your consent we store the cookies described in our cookie policy. You can accept, refuse or withdraw your choice at any time.
What Bloom Portfolio sets and contacts
- Tracking method
- First party session cookie, self hosted
- Server location
- Self hosted on your own infrastructure
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| et_bloom_subscribed | Functional | 1 year | Remembers that the visitor already subscribed so the opt in form is not shown again |
| et_bloom_optin_dismissed | Functional | 1 year | Records that the visitor dismissed the opt in form to avoid showing it repeatedly |
Third-party domains contacted (1)
elegantthemes.com
Frequently asked questions about Bloom Portfolio
Can't find your question? Write to us, we answer fast.
What cookies does Bloom Portfolio set?
Bloom Portfolio sets the following cookies: et_bloom_subscribed, et_bloom_optin_dismissed. Each one is listed in the cookie table on this page with its type, duration and purpose, and you should mirror that list in your own cookie policy.
Is consent required to use Bloom Portfolio?
Yes. Bloom Portfolio relies on cookies or identifiers that are not strictly necessary, so under ePrivacy Article 5(3) you must collect prior, informed and freely given consent before it loads.
What is the legal basis for Bloom Portfolio?
The lawful basis is Consent (Art. 6(1)(a) GDPR). Record this basis in your records of processing and state it in the privacy notice shown to visitors.
Does Bloom Portfolio transfer data to a third country?
By default no transfer to a third country takes place. Bloom stores email opt in records in your own WordPress database, although the email addresses you collect are usually forwarded to the email marketing provider you connect. Reassess if you later enable an external integration.
Do I need a DPIA for Bloom Portfolio?
A DPIA is usually not required for Bloom Portfolio on its own because the processing is limited and low risk, but document your reasoning.
How do I implement Bloom Portfolio in a compliant way?
Implement Bloom Portfolio through your consent layer: keep strictly necessary functions always on, gate optional ones behind consent, sign a data processing agreement with Elegant Themes where it acts as a processor and keep your cookie policy in sync with the real cookies.
What are the alternatives to Bloom Portfolio?
Alternatives include other self hosted or privacy friendly tools. Hosting the data yourself avoids an external transfer, which simplifies your compliance position.
How do I update my cookie policy for Bloom Portfolio?
List every cookie Bloom Portfolio sets in your cookie policy with its name, purpose and retention, state the legal basis, name Elegant Themes where relevant, and update the policy whenever the tool changes so refusals in your banner are always honoured.
LocomotiveCMS
LocomotiveCMS is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. LocomotiveCMS supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, LocomotiveCMS ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Elementor
Elementor is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Elementor supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Elementor enables informed decisions that improve experience and drive results.
WP-Royal Ashe
WP-Royal Ashe is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. WP-Royal Ashe supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, WP-Royal Ashe remains a leading web development choice.
Strikingly
Strikingly is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Strikingly integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Strikingly helps organizations maintain robust websites that meet user expectations and technical requirements.
Kadence WP Virtue
Kadence WP Virtue is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Kadence WP Virtue supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Kadence WP Virtue remains a leading web development choice.
GenerateBlocks
GenerateBlocks is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. GenerateBlocks offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, GenerateBlocks empowers organizations to optimize strategy and maximize return on investment.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.