Who we are and what this policy covers
Bloom & Verse is a Sydney-based florist studio operating from Level 6, 341 George Street, Sydney NSW 2000, Australia. This policy explains how we handle personal information collected through our website, over the phone, by email and in person at the studio. It applies to anyone who orders from us, subscribes to our newsletter, sends us a wedding enquiry or simply browses the site.
We are bound by the Australian Privacy Principles set out in the Privacy Act 1988 (Cth). Where we deal with customers located in the European Economic Area, we also handle their information in line with the General Data Protection Regulation (GDPR). If you have a question this page does not answer, write to us at bloomandverse@gmail.com and we will come back to you personally.
What personal information we collect
We collect only what we actually need to make a bouquet or plan a wedding. In practice, that means the following categories of information.
- Identification and contact details: your name, email address, mobile number and, where relevant, the name and address of the person receiving the flowers.
- Order information: the bouquet you chose, the delivery date and suburb, any card message you asked us to write, and the price you were quoted.
- Wedding planning information: for wedding enquiries we hold your venue name, guest count, event date and any design notes we took during the consultation.
- Correspondence: emails, text messages and call notes exchanged with the studio.
- Technical data: your IP address, browser type and pages visited on our website, collected in aggregate to understand which bouquets people look at most.
We do not collect sensitive information such as health data, and we do not ask for your date of birth or any government-issued identifier.
Why we need it and how we use it
Your information is used for specific, limited purposes. We do not sell it, rent it or trade it with anyone.
- To prepare, wrap and deliver the flowers you ordered, and to send you the dispatch photograph before they leave the studio.
- To contact you about your order, including confirming the palette, the suburb and the delivery window.
- To quote wedding work and coordinate a venue walk-through if you have asked us to.
- To send our newsletter, but only if you have actively subscribed. Every newsletter includes an unsubscribe link and the process takes effect within one business day.
- To keep proper accounting and tax records as required by Australian law.
Who we share it with
We share personal information only with the small number of service providers who help us operate, and only to the extent they need it to do their job. That includes our payment processor, our delivery drivers where a same-day order falls outside our own route, and our email provider. Each of these providers is contractually required to protect your information and to delete it when our arrangement with them ends.
We will also disclose information if Australian law compels us to, for example in response to a valid court order or a lawful request from a regulator. We will never share your details with an unrelated third party for marketing purposes.
How long we keep it and how we protect it
Order records are kept for seven years to satisfy Australian tax obligations. Wedding planning files are kept for two years after the event, which covers the mock-up period and any follow-up requests. Newsletter subscriptions are retained until you unsubscribe. Website analytics are stored in aggregate form only and individual records are deleted after fourteen months.
Access to our customer database is limited to studio staff who need it to do their work, all accounts are protected by two-factor authentication, and our website runs over encrypted connections. If we ever became aware of a data breach that put your information at risk, we would notify you and the Office of the Australian Information Commissioner as quickly as the law requires.
Your rights and how to contact us
You can ask us at any time to show you what personal information we hold about you, to correct anything that is wrong, or to delete records we are not legally required to keep. If you are in the European Economic Area you also have the right to object to processing, to request that we restrict it, and to receive your data in a portable format.
Send any request to bloomandverse@gmail.com, call the studio on +61 2 9137 4826, or write to us at Level 6, 341 George Street, Sydney NSW 2000, Australia. We respond to every privacy request within thirty days. If you are not satisfied with our response you are entitled to complain to the Office of the Australian Information Commissioner, or to your local supervisory authority if you are in the European Economic Area.