Privacy policy

Updated: 2026

Privacy document

This policy describes how Mindspaceau collects, uses, stores and shares your personal data as data controller. We apply a pragmatic and proportionate approach to process only the information necessary for the provision of our floral services, customer relationship management and improvement of the experience offered on our platforms.

Categories of data. We may process: identification information (name, surname), contact details (postal address, email, phone), order-related data (products chosen, accompanying messages), communication preferences, as well as technical browsing data (event log, pages visited, timestamps) collected via cookies or similar technologies that are strictly necessary, analytical and personalisation if you consent. Payment information is processed by our payment service providers according to their own compliance policies.

Purposes and legal bases. Processing is based on the performance of a contract (preparation and delivery of bouquets, after-sales service), legitimate interest (continuous improvement, system security, abuse prevention), compliance with legal obligations (invoicing, accounting) and, where applicable, your consent (marketing communications, non-essential cookies). Where consent is required, you may withdraw it at any time without affecting the lawfulness of processing already carried out.

Retention periods. Customer data is kept for the duration of the business relationship, then archived for the periods required by applicable regulations. Technical browsing information is kept for limited and proportionate periods. Cookies have different durations depending on their purpose; you can manage your preferences from the dedicated banner or your browser settings.

Sharing and recipients. We may transmit certain data to service providers involved in the execution of services (logistics, payment, hosting, customer support) strictly to the extent necessary and based on appropriate contractual commitments (confidentiality, security, subcontracting). No transfer is made for purposes unrelated to our activities. In the event of a legal requirement or request from a competent authority, we may disclose information in accordance with applicable law.

Security. We implement reasonable technical and organisational measures to preserve the integrity, confidentiality and availability of data (access control, logging, environment separation). However, no mechanism offers an absolute level of protection; we invite you to adopt responsible practices (strong passwords, verification of recipients).

Your rights. In accordance with applicable laws, you have in particular the rights of access, rectification, erasure, restriction, objection on legitimate grounds, as well as the right to data portability where conditions are met. You may also set guidelines regarding the fate of your data in the event of an exceptional event. To exercise these rights, contact us via the details below, specifying the purpose of your request and the information necessary for your identification. A response will be provided within the required timeframes.

Cookies and trackers. The information banner allows you to accept or refuse non-essential categories. Cookies strictly necessary for the operation of the site are placed without prior consent. You can change your preferences at any time by deleting cookies from your browser and then reviewing your choices on your next visit. Additional information links are available in the banner and in your device settings.

Contact. For any privacy-related questions, please write to us atmindspaceau@gmail.comor by mail to Mindspaceau, 1 George Street, Sydney NSW 2000, Australia. If you believe, after contacting us, that your rights are not respected, you may lodge a complaint with the competent supervisory authority.

Changes. We may update this policy to reflect regulatory, technical or organisational changes. The current version is the one published on this page at the time of consultation. We invite you to read it regularly to stay informed of our practices.

Practical summary

  • Purposes: service, improvement, legal obligations, marketing on consent.
  • Durations: proportionate and limited.
  • Rights: access, rectification, erasure, objection, portability.
  • Contact: mindspaceau@gmail.com
Data security