Privacy policy,
in plain English

What we collect

When you order from us we collect the stuff we physically need: your name, phone number, email, the delivery address, and the card message you wrote. If you order for someone else, we briefly hold their name, address and phone number too, because the courier needs somewhere to go.

When you browse the site we collect the usual technical crumbs: pages visited, rough location (suburb level), device type and how you found us. No keystroke logging, no creepy session recordings.

What we don't collect

We don't store full card numbers. Payments run through a PCI-compliant processor; we only ever see the last four digits and a receipt reference.

Why we need it

Delivery details exist for one reason: getting flowers to a doorstep. Your contact details let us send the photo approval, the delivery text, and the very occasional 'we're running 20 minutes late' message.

• Orders: name, addresses, phone, card message.
• Photo approvals: sent to the contact you gave us.
• Subscriptions: your delivery-day preference and house notes (dog, gate code, shade spot).
• Marketing: only if you ticked the box or joined the market-notes list.

Who sees your data

Inside the studio: the florist building your order and the dispatcher running the vans. Outside the studio: our payment processor, and the courier driver who gets the address and a phone number for that delivery only.

We don't sell data, rent lists, or hand your details to 'partners' for marketing. If a law ever required us to share records, we'd tell you unless legally barred from doing so.

How long we keep it

Order records stick around for 7 years because Australian tax law says they must. Marketing lists get purged of inactive contacts every 12 months. Recipient delivery details for one-off gifts are trimmed from active systems after 90 days, though they remain in archived order records for the tax period.

Unsubscribe from the market-notes email any Thursday and you're off the list from the next send, no 'processing period'.

Cookies and tracking

The site uses a handful of cookies: ones that remember your cookie choice itself, analytics that tell us which pages people actually read, and preference cookies that keep your suburb in the delivery checker. Details live in the cookie policy.

You can refuse non-essential cookies and the site still works. The ordering and contact forms don't depend on tracking.

Your rights

You can ask for a copy of what we hold on you, ask us to fix it, or ask us to delete it where the law lets us. Email bloominggiftstudio@gmail.com with 'Privacy query' in the subject and we respond within 30 days, usually much faster.

If you're a recipient of a gift and want your delivery details removed, same email works. If you're unhappy with how we handled something, you can complain to the Office of the Australian Information Commissioner, and we'll help you find the form.