GDPR Compliance Statement

Last updated: May 20, 2026

Our Commitment to Data Protection

blooming purse is committed to protecting the privacy and security of your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws including the Privacy Act 1988.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, unless a longer retention period is required by law. Client records are typically retained for seven years after the last service date for legal and business purposes.

International Data Transfers

Your data is primarily processed and stored within Australia. If we transfer data outside Australia, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Protection Officer

For any questions regarding data protection or to exercise your GDPR rights, please contact us at:

Email: [email protected]
Subject line: "GDPR Request"

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or the relevant EU supervisory authority if you are located in the European Union.

Updates to This Statement

We may update this GDPR Compliance Statement from time to time. Any changes will be posted on this page with an updated revision date.