Privacy Policy

Last updated January 2026 · Upbloom Studio Pty Ltd, Melbourne VIC 3000, Australia

Overview

Upbloom Studio Pty Ltd ("Upbloom", "we", "our", "us") operates upbloom.co and related services. We are committed to protecting your personal information and your right to privacy. This policy explains what data we collect, why we collect it, and how you can manage it.

This policy is compliant with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are located in the European Economic Area or UK, you also have rights under the GDPR and UK GDPR respectively.

What Information We Collect

Information you give us directly

• Contact details: name, email address, phone number, mailing address
• Order information: billing and shipping address, items purchased, payment method (we do not store card numbers — Stripe handles this)
• Event enquiry details: event date, venue, guest count, budget, vision description
• Communications: emails, form submissions, and any other messages you send us
• Newsletter subscription: email address

Information collected automatically

• Usage data: pages visited, time spent, links clicked, referring URL
• Device & browser data: IP address, browser type, operating system, screen resolution
• Cookies & local storage: cart contents, preferences, session identifiers

Information from third parties

• Payment processors (Stripe) — limited transaction confirmation data
• Analytics providers (Google Analytics 4) — aggregated usage data
• Social media platforms — if you contact us via Instagram DM

How We Use Your Information

We use personal information to:

• Process and fulfil your orders and send confirmation emails
• Respond to event enquiries and manage bookings
• Send transactional communications (order updates, tracking)
• Send marketing emails if you've opted in (you can unsubscribe any time)
• Improve our website, products, and services through analytics
• Detect and prevent fraud and security issues
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

How We Share Your Information

We share data only with trusted service providers who help us operate our business, under strict data processing agreements:

• Stripe — payment processing (PCI-DSS Level 1 compliant)
• Netlify — website hosting and form handling
• Australia Post / CouriersPlease / DHL — order fulfilment and delivery
• Google Analytics — anonymised website analytics
• Mailchimp / Klaviyo — email marketing (if subscribed)

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Upbloom, our customers, or others.

Cookies & Tracking

We use cookies and similar technologies to:

• Remember your cart contents and preferences (functional cookies)
• Analyse how our website is used (analytics cookies)
• Facilitate payment checkout (Stripe cookies)

You can manage or disable cookies through your browser settings. Disabling cookies may affect the functionality of the site (e.g., your cart may not persist between sessions). We do not use advertising or retargeting cookies.

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations. Specifically:

• Order data is retained for 7 years for tax and accounting purposes
• Marketing subscription data is kept until you unsubscribe
• Website analytics data is retained for 26 months
• Event enquiry data is retained for 2 years

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Delete your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time (e.g., unsubscribe from marketing)

To exercise any of these rights, email [email protected]. We'll respond within 30 days. If you're unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. All data transmitted through our website is encrypted via HTTPS/TLS. Payments are handled entirely by Stripe — we never see or store your card number. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we'll notify you by email (if we have it) or by posting a notice on our website. The "last updated" date at the top of this page reflects when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

For any privacy-related questions, requests, or complaints:

• Email: [email protected]
• Post: Upbloom Studio Pty Ltd, Melbourne VIC 3000, Australia
• Response time: within 30 days