Privacy policy

Who we are

Blossom Box Co is a florist at Shop 2, 112 Prospect Road, Prospect SA 5082. This policy explains how we collect, use, share and protect personal information when you shop at blossomboxco.com.au, visit our studio, book a workshop or contact us.

We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). Questions? Email hello@blossomboxco.com.au or call 08 7226 5567.

Last updated: 24 October 2026.

What we collect

About you

Your name, email address, phone number, and billing and delivery addresses.
Your order: what you bought, the price, your delivery or pick up date and any instructions.
Payment confirmation. We never see or keep your full card number. Payments are handled by our payment providers.
Your account details if you create an account, and your points if you join our rewards program.
Messages you send us by email, phone, website chat, our contact form or social media.
Workshop bookings, and details you give us for corporate or event enquiries.

About the person receiving your gift

Their name, delivery address and phone number.
Your card message, delivery instructions and whether we can leave the order in a safe place.

When you give us someone else's details, please make sure they would be happy for you to share them. We use them only to deliver your order.

When you use our website

Your device and browser, IP address, pages you view, items you add to your bag and how you found us. This comes from cookies and similar tools (see Cookies and tracking).

In our studio

If you pay by card in store, our in store payment provider processes the payment. We see only the last four digits of your card.

Why we use it

We use personal information to:

take, make and deliver your order, and send you order and delivery updates
write your card message and deliver to the person receiving your gift
contact you or your recipient if there is a problem with a delivery
take payment, give refunds and prevent fraud
answer questions and handle feedback or complaints
run workshops, events and corporate orders you book with us
run our rewards program, if you join
send you news and offers, if you agree (see Marketing)
see how people use our website so we can improve it
show our ads on Facebook, Instagram, TikTok and Google to people likely to be interested
meet our legal obligations, such as keeping tax records

We do not sell your personal information. We do share some website activity with advertising platforms, as explained below.

Marketing

We email our newsletter and offers only if you sign up on our website or tick the box at checkout. Every email has an unsubscribe link, or you can ask us to take you off the list. We never add the person receiving your gift to our mailing list. We follow the Spam Act 2003 (Cth).

Who we share it with

We share personal information only with the businesses that help us run the shop, and only what they need.

Shopify runs our website, checkout, customer accounts, Shop Pay, our newsletter (Shopify Email) and website chat (Shopify Inbox). It receives everything you enter on our website.
Payment providers: Shopify Payments, PayPal, Zip, Apple Pay and Google Pay take payments and check for fraud. They receive your name, contact details, billing address, order total and the payment details you give them.
Our delivery team and our delivery route app plan and make local deliveries. They receive your recipient's name, address and phone number, and your delivery instructions.
Australia Post and other couriers deliver posted gifts. They receive your recipient's name, address and phone number.
Our rewards program provider runs points, if you join. It receives your name, email address and order history.
Meta (Facebook and Instagram), TikTok and Google measure our ads and show them to the right people. They receive website activity linked to cookies or device IDs. For purchases, they receive the order value and, in scrambled (hashed) form, your email address or phone number.
Our accountant and advisers help with tax, accounts and legal advice. They receive order and payment records.

We also share information when the law requires it, for example with police or a government agency. Each provider handles information under its own privacy policy. Shopify's is at shopify.com/legal/privacy.

Information sent overseas

Shopify, PayPal, Meta, Google and TikTok store and process information outside Australia, including in Canada, the United States, Ireland and other countries in Europe and Asia. We use established providers with their own privacy and security programs. Overseas laws may not protect your information in the same way Australian law does.

Cookies and tracking

Our website uses cookies and similar tools:

Needed for the shop: your bag, checkout and account login (Shopify).
Analytics: Shopify and Google Analytics show us which pages and products people view.
Advertising: the Meta, TikTok and Google tags tell those platforms when someone visits or buys, so they can measure our ads and show them to similar people.

You can block or delete cookies in your browser settings, but the shop needs some cookies for your bag and checkout to work. To change the ads you see, use Meta's Ad preferences, Google's My Ad Center or TikTok's ad settings.

Keeping it safe and how long we keep it

Our website and checkout run on Shopify, which encrypts payment details and meets the PCI DSS card security standard. Only staff who need your details to do their job can see them. Printed dockets and card messages are disposed of securely.

We keep order and payment records for at least five years, as Australian tax law requires. Your newsletter subscription stays until you unsubscribe. Other details are kept only while we need them, then deleted.

If a data breach is likely to cause you serious harm, we will tell you and take steps to limit the harm.

Your choices

You can ask us to:

show you the personal information we hold about you
correct anything that is wrong or out of date
delete your details, unless we must keep them (for example, tax records of an order)
stop sending you marketing

Email hello@blossomboxco.com.au or call 08 7226 5567. We reply within 30 days and may ask you to confirm who you are. There is no charge.

You can choose not to give us some details, but we may then be unable to deliver your order.

Complaints

If you think we have mishandled your personal information, tell us first by email or phone. We will look into it and reply in writing within 30 days.

If you are not happy with our reply, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Children

Our shop is for adults. If you are under 18, please ask a parent or guardian to order for you. We do not knowingly send marketing to anyone under 16.

Changes to this policy

We may update this policy as our shop changes. The latest version is always on this page, with the date it was last updated.

Contact us

Blossom Box Co
Shop 2, 112 Prospect Road, Prospect SA 5082
hello@blossomboxco.com.au
08 7226 5567