Privacy Policy

Last updated: 20 August 2026

Deja Creative Studio (ABN 91 419 296 145), trading as Deja ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to personal information collected through our website [www.dejastudio.com.au] (the "Website"), by phone, in person, or through our social media channels.

1. What Personal Information We Collect

Depending on how you interact with us, we may collect:

Identity and contact information: name, email address, phone number, billing and delivery address.
Recipient information: for gift orders, the name, address and phone number of the person you are sending flowers to.
Payment information: payment card details are collected and processed by our third-party payment gateway (e.g. Stripe, PayPal); we do not store full card numbers on our own systems.
Order and transaction information: order history, products purchased, gift messages, delivery instructions and preferences.
Account information: username and password, if you create an account.
Communications: records of emails, phone calls, live chat, or messages you send us (e.g. customer service enquiries, reviews, competition entries).
Technical and usage information: IP address, browser type, device information, pages viewed, and cookie data collected via analytics and advertising tools (see clause 6).
Marketing preferences: whether you have opted in or out of receiving marketing communications.

We generally collect information directly from you when you place an order, create an account, subscribe to our newsletter, or contact us. We may also collect information automatically through cookies and similar technologies (see clause 6).

2. How We Collect Personal Information

We collect personal information:

directly from you, via the Website, phone, email, in-store, or social media;
from someone placing an order on behalf of a recipient (the recipient's name, address and contact number);
from third parties, such as payment processors, delivery partners, or, where you use social sign-in, from that platform (with your consent); and
automatically through cookies, analytics and similar technology when you use the Website.

Where practicable, we collect personal information directly from the individual concerned. Where we collect recipient information from a gift-giver, the gift-giver is responsible for ensuring the recipient is aware of, and consents to, this Privacy Policy where required.

3. Why We Collect, Hold, Use and Disclose Personal Information

We collect and use personal information for purposes including:

processing and fulfilling your orders, including arranging delivery;
contacting you or the recipient about an order (e.g. delivery updates, delays, substitutions);
processing payments and preventing fraud;
managing your account and customer relationship with us;
responding to enquiries, complaints and providing customer support;
sending you marketing communications about products, promotions and events, where you have consented or where otherwise permitted by law (you can opt out at any time — see clause 8);
improving our Website, products and services, including through analytics;
complying with our legal and regulatory obligations (e.g. tax and financial record-keeping); and
protecting our legal rights and the safety and security of our business, staff, and customers.

We will not use or disclose personal information for a purpose other than the purpose for which it was collected, unless the APPs permit us to do so (for example, with your consent, or where required or authorised by law).

4. Disclosure of Personal Information

We may disclose personal information to:

Delivery and courier partners, to arrange delivery of your order (recipient name, address and contact number);
Payment processors (e.g. Stripe, PayPal, Afterpay), to process transactions;
IT service providers, website hosting and email/SMS platforms, who assist us in operating the Website and communicating with customers;
Marketing and analytics providers (e.g. Google Analytics, Meta/Facebook, email marketing platforms), for the purposes described in clause 6;
Professional advisers (e.g. accountants, lawyers), where reasonably necessary;
Government or regulatory bodies, where required or authorised by law; and
A prospective buyer or their advisers, if we sell or transfer part or all of our business, subject to appropriate confidentiality arrangements.

We do not sell your personal information to third parties.

5. Overseas Disclosure

Some of the third-party service providers we use (for example, certain cloud hosting, email marketing, or analytics platforms) may store or process personal information outside Australia, including in the United States or other countries where those providers or their servers are located.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that recipient does not breach the APPs in relation to that information, including through contractual protections, except where an exception under APP 8 applies (for example, where you have consented to the disclosure, or the recipient is subject to a substantially similar privacy law with enforcement mechanisms you can access).

6. Cookies and Online Tracking

6.1 We use cookies and similar technologies (such as web beacons and pixels) to operate the Website, remember your preferences, understand how visitors use the Website, and deliver relevant advertising.

6.2 Categories of cookies we may use include:

Essential cookies: required for the Website and checkout to function (e.g. shopping cart).
Analytics cookies: help us understand Website usage (e.g. Google Analytics).
Advertising/retargeting cookies: used by platforms such as Meta (Facebook/Instagram) or Google Ads to show you relevant ads on other sites.

6.3 You can control or disable cookies through your browser settings; however, disabling essential cookies may affect the functionality of the Website, including checkout.

6.4 If we use online advertising or analytics tools that involve cross-context behavioural advertising, we will provide any required notices or opt-outs in accordance with applicable law.

7. Data Security

7.1 We take reasonable technical and organisational steps to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure, including secure hosting, restricted access to systems, and use of reputable, PCI-compliant payment processors for card transactions.

7.2 No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.

7.3 We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting obligations (e.g. tax record-keeping requirements), after which it is securely deleted or de-identified.

8. Marketing Communications

8.1 With your consent (e.g. by subscribing to our newsletter or opting in at checkout), we may send you marketing emails or SMS about promotions, new products, and floral occasions.

8.2 You can opt out at any time by clicking "unsubscribe" in any marketing email, replying "STOP" to SMS, or contacting us at privacy@dejastudio.com.au. Opting out of marketing does not affect transactional communications about your orders.

9. Access, Correction and Complaints

9.1 You have the right to request access to the personal information we hold about you, and to request correction if it is inaccurate, out of date, or incomplete.

9.2 To make an access or correction request, or to lodge a privacy complaint, contact our Privacy Officer:

Privacy Officer, Deja Email: privacy@dejastudio.com.au Post: 337 Smith St, Fitzroy, VIC 3065

9.3 We will respond to access, correction and complaint requests within a reasonable period (generally within 30 days). We may need to verify your identity before providing access to, or correcting, personal information.

9.4 If you are not satisfied with our response to a privacy complaint, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au Phone: 1300 363 992

10. Children's Privacy

Our Website is not directed at children, and we do not knowingly collect personal information from individuals under 18 without appropriate consent. If you believe we have inadvertently collected such information, please contact us so we can address it.

11. Third-Party Links

The Website may contain links to third-party websites (e.g. social media, payment providers). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on the Website with a revised "Last updated" date. We encourage you to review this policy periodically.