Privacy and Customer Information Policy

Purpose. Explains how Bloom and Stem collects, uses, stores and protects the personal information of customers, recipients and staff in line with the Australian Privacy Principles.

1.What is collected

The business collects the names, delivery addresses, contact details, card messages and payment details needed to fulfil orders, and the names and contact details of recipients supplied by the customer. Wedding and event files hold venue, date and guest information supplied by the client. Staff records hold employment and payroll information.

2.Use

Personal information must only be used to fulfil the order, respond to enquiries, manage accounts and, where the customer has opted in, send seasonal marketing. Card messages are private and must not be discussed or shared beyond the staff who need to write and deliver them.

3.Storage and access

Customer information is stored in the Order Book and the online store platform, both protected by individual staff logins. Paper order slips must be kept behind the counter and shredded once the order is complete and any complaint period has passed. Payment card details must never be written down or stored.

4.Recipient information

Staff must not disclose the sender of anonymous flowers to a recipient. A recipient who asks who sent the flowers must be told that the business is unable to share that information without the sender's consent.

5.Photographs

Photographs of deliveries taken for proof of delivery must show the product at the door and must not include people. Photographs of wedding and event work must only be published with the client's written consent recorded in the event brief.

6.Breaches and requests

Any suspected loss or misuse of personal information must be reported to the General Manager immediately. Customers can ask to see or correct the information held about them and requests must be answered within 30 days.