Legal
RoseHarbor (“we”, “us”) is a neighbourhood florist at Cnr Devlin St &, Blaxland Rd, Ryde NSW 2112, Australia. This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, send an enquiry, place a pickup or delivery order, pay for flowers, or contact the studio. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Questions: email [email protected] or call +61298088888. Current version: 2026. This policy applies to our shop, our website, and any conversation that leads to an order. Nothing here requires you to accept marketing in order to buy flowers.
We collect information you give us, information created when you use the website or place an order, and limited details from a friend who orders for another person. Typical details include name, email, telephone, order notes, occasion, preferred pickup time, bouquet selection, extra stems, colour comments, a delivery address if you ask for local delivery, and form messages. We do not store full payment card numbers. Payments go through a provider; we keep only confirmations needed for receipts, refunds, and bookkeeping. This website may collect browser type, device type, approximate region, and pages viewed. We may also keep a short note of flower allergies or colour dislikes when you tell us. Please do not put card numbers in the free-text box.
Most information comes from you through our website form, email, telephone, or in person at Cnr Devlin St &, Blaxland Rd, Ryde NSW 2112, Australia. If a friend books a surprise bouquet, they may give a first name, occasion, or contact number. Please only share another person’s details if you have a reasonable basis to do so, such as placing an order they asked you to place. We may receive limited information from payment processors or hosting partners when a receipt, refund, or technical error needs a note. We do not buy marketing lists. When you call +61298088888 or email [email protected], the number or message may be stored with the ticket so we can confirm a ready time or reply. Walk-in customers may give details at the counter while we wrap. If you send flowers to someone else, we use the recipient details only to complete that instruction.
We use personal information to respond to enquiries, take flower orders, confirm pickup times, take payment, send ready notices, issue credits, handle cancellations, and keep studio records. We also use it to match guests to sizes, extra stems, or palettes such as Signature Roses when you ask for that help. We do not sell personal information. Optional news about seasonal flowers can be stopped by writing to [email protected]. Messages about an existing order are not marketing. Aggregated numbers may help us understand which bouquets fill the bench on Friday mornings. We will not publish a child’s full name in a gallery story unless a parent or guardian agrees. We may use your telephone number to tell you that a bouquet is ready or that a stem substitution is needed because a flower is out of season. We do not use personal information to set different prices for different customers.
We collect personal information for lawful purposes connected with running this florist. Under Australian law we take reasonable steps to collect information fairly, use it for related florist purposes, and keep it secure. We rely on the need to complete a contract when you order, pay, or request pickup; on legitimate florist operations such as running a safe studio, preventing fraud, keeping records, and improving the collection; on legal obligation when tax or consumer rules require records; and on consent for optional news or guest photographs. We take reasonable steps to keep information accurate and ask you to tell us when a phone number, email address, or colour note changes. Access to order tickets is limited to staff who need it to arrange, wrap, or account for the bouquet. We do not use solely automated decisions that produce legal effects without human review. If a cloud provider stores a backup outside Australia, we take reasonable steps consistent with Australian Privacy Principle 8.
We may share information with staff and contractors who arrange flowers, take orders, maintain servers, keep our books, provide hosting, process payments, or advise on legal matters, only to the extent they need it. They must protect the information and use it for our instructions, not unrelated marketing. We will not publish private contact details. Gallery photos will not name a minor unless a parent or guardian agrees. We may share information with authorities if the law requires it, or to protect guests, staff, or property. We do not sell mailing lists. Payment companies may see purchase status because they process the card for this florist. A delivery driver, if used for a local drop, may see a name, address, and a short gift note, and nothing more. If a dispute arises, we may share limited ticket details with an insurer or adviser. Staff are instructed not to discuss private orders in front of other customers at the counter.
Order, purchase, and guest records are kept while needed to run the relationship and honour refunds, then for a further period required for accounting, tax, insurance, or consumer review. Enquiry emails that do not become orders are deleted or archived on a shorter cycle. We use reasonable physical, technical, and organisational measures, including restricted staff access. No storage method is perfectly secure. If a personal data incident is likely to risk your rights, we will assess it and, where required by the Notifiable Data Breaches scheme, notify affected people and the Office of the Australian Information Commissioner. Contact us at once if someone may have used your details to place a flower order in your name. Do not send full card numbers by email. Paper tickets are stored in the studio, not left on the public counter overnight. When a record reaches the end of its useful life, we shred paper or delete files in a way that is practical for a small florist.
Under the Privacy Act 1988 (Cth) you may request access to personal information we hold about you or your child and ask us to correct it if wrong. You may ask us to erase information where the law allows, and you may stop optional marketing without affecting a completed flower purchase. Australian Consumer Law rights about goods and services are separate from this notice and are not waived by placing an order. We do not sell personal information. We may verify identity before releasing records. Email [email protected], write to RoseHarbor, Cnr Devlin St &, Blaxland Rd, Ryde NSW 2112, Australia, or call +61298088888. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner. This florist welcomes families, but we do not knowingly collect detailed personal information from children for marketing. Orders for a child’s party should be made by a parent, guardian, or responsible adult. We will remove a shop-floor photo from our gallery on a reasonable request from a parent. Ordering flowers does not require you to accept marketing messages.