This Privacy Policy describes how we collect, use, process, store, and distribute your information, includes personal information capable of identifying an individual (Personal Data), through your interactions with us. These interactions could be over the phone, online, via email, by using our website, or by interacting with us on social media. The type of Personal Data we collect will depend on the circumstances of its collection and the nature of your dealings with us. We will not use or share your information with anyone except as described in this Privacy Policy.

Please read this Privacy Policy carefully, which may be amended from time to time at our sole discretion, with changes, additions, and deletions. You should check this page regularly to ensure that you are aware of any changes. Your continued use of the Website and following any amendments indicates that you accept the amendments. In the event of a material change, we will let you know via email and/or a prominent notice on our Website. By using our Website or its content, you consent to this Privacy Policy as of June 2026, whether you have read it or not.

This Privacy Policy is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles and all applicable privacy, data protection and cybersecurity laws in force from time to time; including European Directives 95/46 and 2002/58/EC and any legislation and/or regulation implementing or made pursuant to them, or which amends, replaces, re-enacts, or consolidates any of them (including the General Data Protection Regulation (EU) 2016/679) and the privacy and data protection laws of the European Economic Area, Switzerland, and the United Kingdom, as amended from time to time (DPL).

GENERAL

1. Who We Are

The website at www.bloominhousedesign.com.au (Website) and the Website’s content, products, materials and services (Services) are owned by Clarissa House-Watson trading as Bloomin’ House Landscape Design ABN 44 928 603 404 (Bloomin’ House Design,we, us, our). The term ‘you’ refers to the user or browser of the Website.

2. Our Principles of Information Protection

Transparency: We are committed to being open, honest and transparent about Personal Data.

Trust: We agree only to use Personal Data for the purposes we say we will and for improving the effectiveness and efficiency of our Services as described or provided in and/or contemplated by this Website.

Safety: We are committed to keeping Personal Data provided to us secure.

Responsibility: We accept the responsibility of handling Personal Data.

3. Data We May Collect 

We may process certain types of Personal Data about you as follows:

• Identity data may include your full name, username, title, date of birth, and gender

• Contact data may include your address, contact details, email address, and phone number

• Financial data may include your bank account and payment card details

• Transaction data may include details about payments between us, purchases made by you, support or contact queries, and online comments.

• Technical data may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform, and other technology on the devices you use to access this site.

• Profile data may include your username and password, purchases or orders, your interests, preferences, feedback, and survey responses

• Usage data may include information about how you use our website, products, and services

• Marketing and communications data may include your preferences in receiving marketing communications from our third parties and us, and your communication preferences 

4. How we collect your personal data

Direct interactions: When you visit or use parts of our Website and/or Services you may provide data by filling in forms on our site (or otherwise) or by communicating with us by post, phone, email or otherwise, including when you order our products or Services, create an account on our site, subscribe to Services or publications, request resources or marketing materials, enter a competition, prize draw, promotion or survey, or give us feedback.

Automatically: We automatically collect some information about you when you visit our Website or use our Services, like your IP address, device ID, computer and connection information, geo-location information and device type. We also collect information when you navigate through our Website and Services, including what pages you looked at and what links you clicked on. This information gives us a better understanding of how you are using our Website and Services so that we can continue to provide the best experience possible, for example, by personalising the content you see.

Cookies: Some of your Personal Data is collected using standard cookies and similar tracking technologies such as tags and pixels. Cookies are small data files that a website or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enable the website or service provider systems to recognise your browser and capture and remember certain information. 

Some cookies ensure that certain parts of the website work properly and that your user preferences remain known, which makes it easier for you to visit our website and avoid having to repeatedly enter information, or add items back into your shopping cart. We may place these cookies without your consent. 

We use statistics, marketing/tracking cookies to optimise website experience and gain insight into the use of our website. We use these cookies to keep track of advertisements and compile aggregate data about website traffic and website interaction so that we can offer better website experiences and tools in the future. 

Where we have included content from social network platforms to promote web pages (e.g. ‘like’, ‘pin’) this content may be embedded with code from those platforms which places cookies. Please refer to the privacy statement of these social networks.

We do not set any Personal Data in cookies, nor do we employ any data-capture mechanisms on our Website other than cookies. You can choose to disable cookies through your own web browser settings or have your computer warn you each time a cookie is being sent. Please note disabling this function may cause some of the features on this Website not to work as well as intended; however, you can still place orders for our programs or Services over the telephone.

Information from third parties: At times we might collect Personal Data about you from other sources, such as publicly available materials or trusted third parties like our marketing and research partners. We use this information to supplement the Personal Data we already hold about you, to better inform, personalise and improve our Services, and to validate the personal data you provide.

Where we collect Personal Data, we will only process it to perform a contract with you, make a booking, or where we have legitimate interests to process the Personal Data, and they are not overridden by your rights, or in accordance with a legal obligation, or where we have provided your consent. If we do not collect your Personal Data, we may be unable to provide you with all our Services, and some functions and features on our Website may not be available to you.

5. How We Hold Your Personal Data

We hold your personal information in hard copy, electronic format, encrypted electronic forms, in secure databases or cloud-based platforms that we own and operate or that are owned and operated by our service providers. We will only access your Personal Data where there is a business need, or service requirement and we have your consent. While we take reasonable steps to protect the security of your personal information, data protection and security measures can never be guaranteed. We, therefore, cannot guarantee the security of your personal information.

6. How We Use Your Personal Data 

We will only use your Personal Data when legally permitted. We mostly use your Personal Data to operate the Website, provide you with any Services you have requested, and to manage our relationship with you. 

We will only use your Personal Data for the purpose for which we collected it, unless we reasonably consider that we need to use it for another reason which is compatible with the original purpose. We may process your Personal Data without your knowledge or consent where this is required or permitted by law. 

The type of Personal Data we process can be categorised into these groups: identity, contact, financial, transaction, marketing and communications, profile, usage, and technical. 

The legal basis for processing your Personal Data, will typically be one of the following:

• with your consent;

• for the performance of a contract with you or a relevant party; or

• for our legitimate business interests or compliance with our legal obligations.

We may use your Personal Data in the following ways to:

• communicate with you or register you as a new customer, or to process and deliver your order including managing payments, fees, and charges, and collect and recover money owed to us;

• manage our relationship with you, including notifying you about changes to our terms or privacy policy, asking you to leave a review, or take a survey;

• enable you to partake in a prize draw, competition, or complete a survey;

• administer and protect our business and our site (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data);

• deliver relevant content and advertisements to you and measure and understand the effectiveness of our advertising;

• use data analytics to improve our website, products/services, marketing, customer relationships and experiences;

• make suggestions and recommendations to you about goods or services that may be of interest to you;

• protect you and our business by detecting and preventing any fraudulent or malicious activity; and

• analyse, aggregate and report: we may use the Personal Data we collect about you and other users of our Website and Services (whether obtained directly or from third parties) to produce aggregated and anonymised analytics and reports, which we may share publicly or with third parties.

7. How We Share Your Personal Data

We may share your Personal Data with third parties who we trust, who we are affiliated with and whom we are required to provide it to for the purpose of fulfilling the Services. We do not sell, trade, or otherwise transfer your Personal Data to outside parties. However, we may sell, trade or otherwise transfer your Personal Data to third parties who assist us in operating our Website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. For example, third-party service providers and partners who assist us with the functionality of the Website or services, or to deliver, market or promote our goods and services to you. 

We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

We may be required to provide your Personal Data to regulators, law enforcement bodies, government agencies, courts or other third parties where it is necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. Where possible and appropriate, we will notify you of this type of disclosure.

Your Personal Data may be shared with an actual or potential buyer (and its agents and advisers) in connection with an actual or proposed purchase, merger, or acquisition of any part of our business. We will only disclose your Personal Data to other third parties where we have obtained your consent.

9. Marketing Communications 

You may receive marketing communications from us if you have requested information from us, purchased goods or services from us, provided us with your details when entering a competition, promotion or for any other reason where you have not opted out of receiving marketing.

The email address you provide for order processing may be used to send you information and updates pertaining to your order, in addition to receiving occasional company news, updates, related product or service information, etc. If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

Inaddition to marketing communications, we may also use your Personal Data to display targeted advertising to you online. Through our own Website, through third-party websites or through social media platforms, we carry out profiling activities to learn more about you and offer you tailored advertising based on your behaviour on our platforms. You can opt-out of Google Analytics® at any time. For more information on opting out of being tracked by Google Analytics® across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.

10. Direct Marketing

Direct marketing means using your Personal Data to contact you via the phone, SMS, or email to promote our Services. You acknowledge that by providing us with your Personal Data, we, our related entities, and/or business partners may contact you to promote and market our respective products and Services. You can opt out of being contacted by us, our related entities, or business partners for direct marketing by emailing us at clarissa@bloominhousedesign.com.au at any time to receive a Personal Data Request or Preference Update Form, or you can follow the unsubscribe instructions contained in the email communication.

11. Data Security 

We are committed to protecting the information you provide us. To prevent unauthorised access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information, we have put in place the appropriate procedures to safeguard the information we collect.

In addition, we limit access to your Personal Data to employees, agents, contractors, and other third parties on a need-to-know basis. They will only be permitted to process your Personal Data on our instruction, and subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We use Secure Sockets Layer (SSL) encryption when collecting or transferring sensitive data such as credit card information. SSL encryption is designed to make the information unreadable by anyone but us. This security measure is working when you see either the symbol of an unbroken key or closed lock (depending on your browser) on the bottom of your browser window. However, we cannot guarantee that your Personal Data will always be secure due to technology or security breaches. If we become aware of a high-risk data breach, we will notify you (and the appropriate authority) within seventy-two (72) hours.

12.  Data Controller and Data Processors

We are the data controllers as we are collecting and using your Personal Data. We use trusted third parties as our data processors for technical and organisational purposes, including for payments and email marketing. We make all reasonable efforts to ensure our data processors are GDPR-compliant.

13. International Data Transfers

Your Personal Data will be collected and processed in Australia. By providing us with your Personal Data, you consent to us using third parties located overseas to store your Personal Data. When we share data (to the extent that we do from time to time), it may be transferred to, and processed in a jurisdiction other than the one you reside in. These recipients may include providers of cloud hosting, data storage, analytics, customer relationship management, marketing and other business services.

For those in the European Union (EU), this means that your data may be transferred outside of the European Economic Area (EEA). Countries outside of the EEA do not always offer the same levels of protection to your Personal Data so European law has prohibited transfers of Personal Data outside of the EEA unless the transfer meets certain criteria under the DPL. Whenever we transfer your Personal Data out of the EEA, we do our best to ensure a similar degree of security.

Where your Personal Data is transferred outside the EU, it will only be transferred to countries that have been identified as providing adequate protection for EU data or to a third party where we have approved transfer mechanisms in place to protect your Personal Data. If we use US-based providers that are part of EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place. If none of the above safeguards are available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.

14. Anti-Spam Policy

We will always provide you with the ability to opt-out of our communications by selecting the unsubscribe link at the bottom of all emails. We will not share your email address without your consent.

15. Automated Decision-Making

We do not use your Personal Data for Automated Decision Making (ADM). We may use ADM, including profiling, in certain situations, for example, where it supports our legitimate interests or is necessary to enter into or carry out a contract with you. Profiling allows us to tailor our services and provide marketing that is more relevant to your interests.

16. Third-Party Websites

We may provide links to other websites on our Website. We have no responsibility or liability for the content and activities of any other individual, company or entity whose website or materials may be linked to our Website or its content, and thus we cannot be held liable for the privacy of the information on their website or that you voluntarily share with their website. Please review their privacy policies for guidelines as to how they respectively store, use, and protect the privacy of your Personal Data.

17. Children’s Online Privacy Protection Act Compliance and Minors

We do not knowingly collect any personally identifiable information from anyone under sixteen (16) years of age in compliance with COPPA (Children’s Online Privacy Protection Act (USA)) and the DPL. Pursuant to our Website Terms and Conditions, if you are under the age of eighteen (18), you must ask your parent or guardian for permission to use the Website.

18. Data Retention 

We will retain your Personal Data for as long as we have a relationship with you and for the period afterwards where we have an ongoing business need to retain it, or a legal reason to retain it in accordance with our data retention policies and practices. Following that period, we will make sure it is deleted or is converted to aggregate data.

19. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your Personal Data. 

These include the right to request:

• not to send you marketing emails by contacting us or follow the unsubscribe instructions contained in the email communication;

• access to your Personal Data;

• the correction of your Personal Data;

• to the erasure of your Personal Data;

• not to process your Personal Data;

• to restrict the processing of your Personal Data;

• the transfer of your Personal Data;

• a withdrawal of your consent; and 

• not to be subject to a decision based solely on ADM, including profiling.

You may exercise these rights at any time by sending an email to clarissa@bloominhousedesign.com.au.

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive, or refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one (1) month. Occasionally, it may take us longer than one (1) month if your request is particularly complex or you have made several requests. In this case, we will notify you.

LEVY & W. IS AN INCORPORATED LEGAL PRACTICE ACN 622 416 488 | LEVYW.COM

Liability limited by a scheme approved under Professional Standards Legislation.

© THIS DIGITAL DOCUMENT IS SUBJECT TO COPYRIGHT.UNAUTHORISED USE, MODIFICATION, REPRODUCTION, TRANSFER OR PART THEREOF, IS STRICTLY PROHIBITED.