Privacy Policy

1. Who We Are

Flow Festive Boutique is an Australian online retailer selling metaphysical crystals, crystal kits, bracelets, and festive clothing. We are based in Melbourne, Victoria, Australia. For privacy-related enquiries, contact us at hello@flowfestiveboutique.com.

2. Information We Collect

We may collect the following types of personal information:

• Identity information — your name and email address
• Contact information — shipping address, billing address, and phone number
• Payment information — processed securely by Stripe; we do not store card details on our servers
• Order information — details of products purchased, order history, and correspondence
• Technical information — IP address, browser type, device information, and pages visited, collected through cookies and analytics tools
• Marketing preferences — whether you have opted in to receive promotional communications

We only collect personal information that is necessary for our business operations. You may choose not to provide certain information, but this may affect our ability to process your order or provide services.

3. How We Collect Your Information

We collect information when you:

• Place an order on our website
• Create an account or subscribe to our mailing list
• Contact us via email or social media
• Browse our website (via cookies and analytics)

4. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders, including sending order confirmations and tracking information
• Communicate with you about your purchases, returns, or enquiries
• Improve our website, products, and customer experience
• Send promotional emails and marketing communications if you have opted in
• Prevent fraud and ensure the security of our website and transactions
• Comply with our legal obligations under Australian law

We will never sell your personal information to third parties.

5. Sharing Your Information

We only share your personal information with trusted third parties where necessary to operate our business, including:

• Payment processors — Stripe, for secure payment processing
• Shipping carriers — Australia Post, DHL, and other carriers, to deliver your orders
• Email marketing platforms — if you have opted into our mailing list
• Analytics providers — to help us understand website usage and improve our services

All third parties are required to handle your information in accordance with applicable privacy laws. We do not authorise them to use your information for their own marketing purposes.

6. Cookies

Our website uses cookies — small text files stored on your device — to enhance your browsing experience, remember your preferences, and analyse site traffic. We use essential cookies (required for the site to function), analytical cookies (to understand how visitors use our site), and marketing cookies (if you have opted in to receive personalised communications).

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website, including the ability to complete a purchase.

7. Data Storage & Security

We take reasonable steps to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our website uses SSL encryption for data transmission. Payment information is processed securely through Stripe and is never stored on our servers.

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of information transmitted to our website.

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by Australian law. Order information is typically retained for 7 years for tax and accounting purposes. You may request deletion of your personal information at any time, subject to our legal retention obligations.

9. Marketing Communications

We will only send you marketing emails if you have opted in to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us at hello@flowfestiveboutique.com. Unsubscribing from marketing emails will not affect transactional emails related to your orders.

10. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal obligations)
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy

To exercise any of these rights, please contact us at hello@flowfestiveboutique.com. We will respond to your request within 30 days.

11. Third-Party Links

Our website may contain links to third-party websites, including our social media pages. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

14. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us at hello@flowfestiveboutique.com. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.