Privacy Policy

Effective date: 21st August, 2026

Please read this policy carefully before using our site or opting in for any products, services, resources or communications.

Who we are and how to contact us

The Digital Bloom website (“Website”) is owned, controlled and operated by Sarah Garner trading as Digital Bloom (ABN 43 204 768 612) (“Digital Bloom”, “we”, “our” or “us”).

We’re Digital Bloom, the brand identity studio working with established health, beauty and wellness founders whose businesses have outgrown the brand that’s currently representing them. We’re committed to protecting the privacy of our clients, subscribers, suppliers and employees.

This Privacy Policy applies to all products, services and resources we provide, including on our Website, via our interactive tools, on our social media channels and through the third-party platforms we use to deliver our services. It explains how we collect, hold, use and disclose data, and forms part of our Website Terms and Conditions.

You can contact us with privacy-related questions by emailing support@digitalbloom.com.au.

We’ll only use your personal information in compliance with Australian privacy laws, being the Privacy Act 1988 (Cth) as amended from time to time (including the Privacy and Other Legislation Amendment Act 2024 (Cth)) and the Australian Privacy Principles, and to the extent applicable, the EU General Data Protection Regulation (GDPR) and any replacement legislation or regulations governing the use, storage or transmission of personal data.

Definitions

When we say “you”, “your” or “Client”, we mean you (the visitors to and clients of our Website, whether or not you engage our services).

When we say the “Privacy Act”, we mean the Privacy Act 1988 (Cth) as amended from time to time, including the Australian Privacy Principles.

When we say “Personal Information”, we mean any information or opinion, whether true or not, about a person who is identified or whose identity can reasonably be established, and not limited to information in a material form.

When we say “AI Tools”, we mean the artificial intelligence tools and services we use in our business, including any feature on our Website that uses artificial intelligence to generate a response from information you enter, the third-party AI services that power those features, and the AI tools we use to assist in creating content and delivering our services.

Our role in your privacy

Our responsibilities

As the providers of the products and services on this Website, we determine how and why your data is processed. We don’t sell or rent your details to any third parties. We’re committed to protecting your privacy and we want you to know exactly what information is collected and how we use it.

Your responsibilities

Please read this Privacy Policy and our Website Terms and Conditions.
If you provide us with any data relating to a third party (for example, details of your team members or suppliers as part of a rebrand engagement), you confirm that you have the right to authorise us to process that data on your behalf in accordance with this Privacy Policy.

Consent

By using our Website or otherwise supplying us your personal information, you consent to our collection, use, disclosure, storage, destruction and otherwise handling of Personal Information in accordance with the terms of this Privacy Policy.

When and how we collect data

From the moment you visit our Website, we’re collecting data. Sometimes you provide this data directly (by completing a form or booking a call), and sometimes we collect it automatically.

Here’s how we may collect data from you:

When you send us an enquiry about our services via the ‘contact us’ function on the Website.
When you contact us by email or phone.
When you book a groundwork (discovery) call with us.
When you complete a quiz, form, assessment or interactive tool on our Website.
When you subscribe to our newsletter or download a free resource.
When you engage us for a rebrand or other services and we open a client file.
When you attend a workshop, webinar or other event we organise.
Through the use of browser ‘cookies’ or similar tracking technologies.

Types of data we may collect

Contact details (name, phone number, business name, website address, email address, geographical information).
Financial information (billing details and payment information when you’re engaging our services).
Data about the products or services you purchase or enquire about.
Data that identifies you (your IP address, login information, browser type and version, time zone, browser plug-ins, geolocation data, operating system and version).
Data on how you use our Website (URL clicks, pages viewed, time spent on pages, download activity and other user actions).
Information you enter into our quizzes, assessments and AI Tools (for example, answers about your business and brand).
Data relating to your business circumstances and other information relevant to the brand identity services we provide.
Intellectual property and brand materials you provide for the completion of services (for example, logos, images, design files, documents, brand assets and website access).
Your feedback on project progress and deliverables, and any testimonials you provide.
If you’re an employee or prospective employee, data relating to your qualifications, skills and experience.
If you’re a supplier or prospective supplier, information about your products, services and pricing.

How and why we use your data

We collect only the personal data necessary for the purposes outlined in this policy. We don’t use your data in ways that are incompatible with the original purpose for which it was collected, unless legally required or you’ve given additional consent.

We’ll use your data for the purposes it was collected and related purposes, including:

To run our Website and provide you with brand identity and design services.
To provide you with products, information and services, including your quiz results and the resources you request.
Customer support and project management.
To track your enquiry, engagement and project history.
To detect and prevent fraud.
To improve our Website, tools and services.
Marketing (with your consent), including by email and, from time to time, by post.
To make your experience on our Website more efficient and enjoyable.
Market research, including contacting you for feedback about our services.
To provide you with information about events, resources or opportunities that may be of interest.
To customise the content of our Website so that it matches your preferences.
To understand usage trends and patterns.
To fix problems and respond to feedback and complaints.
To enforce any agreements between you and us.
In response to a request by any duly authorised law enforcement officer or any other person authorised by any law, or in circumstances permitted by the Privacy Act.

We may disclose your data:

As required by law, subject to our obligations.
With your consent.
Within our business and to our professional advisors.
To our suppliers and service providers (including payment processors, hosting providers, email service providers and AI service providers).
To third parties engaged in fraud prevention and detection.
In order to sell our business (if we were ever to sell, we may need to transfer data to the new owner).

Third parties who process your data

Digital Bloom is operated alongside other brands owned by the same founder (including Webfit). These brands are run separately and we don’t share your personal information between them without your consent.

We share data with third parties in the following circumstances:

Our suppliers and service providers, including our payment processor (Stripe), the AI service providers that support our tools and services (such as Anthropic and OpenAI), our analytics provider (Google) and reputable providers of website hosting, email marketing, scheduling and bookings, video conferencing, forms and surveys, project management, and design and creative tools. This list may change from time to time as our tools evolve.
Our professional and legal advisors.
Third parties engaged in fraud prevention and detection.
Law enforcement or other government authorities.
Where we have your consent to do so, or otherwise where we’re legally permitted.

This Privacy Policy only applies to Personal Information we collect in connection with the operation of the Website and provision of our services. We’re not responsible for the collection of Personal Information by third parties. If you want to know more about the privacy practices of any third party, you should refer to their privacy policy.

AI tools and automated processing

We use AI Tools in our business in the following ways:

Content creation. Some content on our Website (such as blog articles) may be researched or drafted with the assistance of AI tools. All published content is reviewed and edited by us before it appears on the Website.
Service delivery. We may use AI-assisted tools internally to support our work, such as research, analysis, drafting and administration. Where AI tools are used in delivering client services, client information is handled in accordance with this Privacy Policy and our confidentiality obligations.
Interactive features. Where our Website includes interactive features that use AI to generate a response from information you enter, the information you enter is transmitted to a third-party AI service provider in order to generate that response, protected by encryption in transit. We use commercial AI services whose terms provide that inputs submitted through the service aren’t used to train their publicly available AI models. Responses generated by these features are general information only, not business, branding, design, financial or legal advice, and shouldn’t be relied on as such. Please don’t enter sensitive information (such as health information, financial account details or information about other identifiable individuals) into these features.

Our automated tools don’t make decisions that have legal or similarly significant effects on individuals. If that ever changes, we’ll update this policy to explain the kinds of decisions involved, as required under Australian privacy law.

International data transfer

Some of our third-party service providers may be located, or store data, outside Australia, including in the United States, Canada and the EU. Where data is transferred internationally, we take reasonable steps to ensure it’s protected under standards at least substantially similar to Australian privacy laws.

Communication with our contractors and service providers occurs via encrypted channels, ensuring your data is handled securely and responsibly.

Analytics and advertising platforms

Google Analytics and Google Ads

We use Google Analytics functions to understand how visitors use our Website. You can find out how your data is collected in Google’s privacy documentation, and you can opt out of Google Analytics data tracking through your browser settings or Google’s opt-out tools.

We may also use Google’s advertising tools from time to time, including display advertising and remarketing, which use tracking technologies (cookies) to measure ad performance and show our ads to relevant audiences based on past visits to our Website. You can control the ads you see through Google’s ad settings.

Meta (Facebook and Instagram)

We use Meta’s insights tools to understand interaction with our Facebook and Instagram presence and improve our content. We may also use Meta’s advertising tools from time to time, which use tracking technologies (such as the Meta pixel) to measure ad performance and show our ads to relevant audiences based on past visits to our Website. You can control your ad preferences through your Meta account settings. Your interaction with our social media channels is also governed by Meta’s own privacy policy.

What are your choices?

Don’t provide personal data

You can choose not to provide us with any personal data. If you do this, we won’t be able to provide you with our brand identity services, send you your quiz results or requested resources, or book a call with you, though you can continue to browse our Website.

Turning off cookies

Our Website uses cookies and similar technologies to provide certain functionality. You can turn off cookies through your browser settings. If you turn off cookies, you can continue to use the Website, however certain features may not work as effectively.

Don’t want marketing?

We’ll always let you know what we intend to use your data for and obtain your consent for marketing. You can change your mind at any time by using the unsubscribe link in our emails or contacting us directly at support@digitalbloom.com.au. If you’d prefer not to receive marketing from us by post, contact us at the same address and we’ll stop sending it.

What are your rights?

Access information we hold about you

We’ll provide you with the information within 30 days of your request, unless doing so would adversely affect the rights and freedoms of others. We’ll tell you if we can’t comply with your request and why.

Data portability

You may request that we provide a copy of the personal data you’ve provided to us in a structured, commonly used and machine-readable format, where technically feasible.

Correct inaccurate information

You can contact us to ask us to correct any information we hold about you that you believe is inaccurate. We’ll endeavour to correct this information within a reasonable time, at no expense to you.

Objections to automated decision-making

We may use your data to determine what services and content are relevant to you (for example, tailoring communications based on your business type or quiz results). We may use automated tools to analyse usage patterns or segment audience data to improve our services. These tools don’t make decisions that have legal or similarly significant effects on individuals.

Right to erasure

You have the right to request that your data be erased. This means we’ll delete all information we hold about you, except for any information we’re required to keep due to our legal obligations.

Right to make a complaint

If you have any complaints about how your data is handled, contact us at support@digitalbloom.com.au. If you’re not satisfied with our response, you may seek a review by contacting the Office of the Australian Information Commissioner (OAIC).

You can exercise these rights at any time by contacting us at support@digitalbloom.com.au.

Data security

We know our clients trust us to protect their personal information, including the brand materials and business information shared with us during an engagement. We take that seriously and maintain reasonable and appropriate physical, electronic and procedural safeguards, including:

Password and multi-factor access controls on accounts and systems.
Storing electronic data with reputable third-party storage providers who have appropriate security protections.
Limiting access to personal information to individuals who need to know.
Regular security assessments and updates.

While we take all commercially reasonable steps to protect your Personal Information, you should be aware that there are inherent risks associated with transmission of information via the internet, and we can’t guarantee absolute security.

Data breach notification

Where the Notifiable Data Breaches scheme under the Privacy Act applies to us, we’ll comply with its requirements. In the event of a data breach likely to result in serious harm, we’ll take appropriate steps to assess, contain and respond, and where required or appropriate, we’ll notify affected individuals and the OAIC.

If you suspect any misuse, loss or unauthorised access, modification or disclosure of your personal information, contact us immediately at support@digitalbloom.com.au.

Payment security

Payments for our services are processed through reputable third-party payment providers. All direct payment gateways adhere to the standards set by PCI-DSS (Payment Card Industry Data Security Standard) as managed by the PCI Security Standards Council.

Your payment transaction data is stored only as long as necessary to complete your transaction and meet our accounting obligations. After that, your transaction information is deleted according to our data retention schedule.

Data retention

We’ll keep your data for as long as we need it, and this period depends on your interactions with us:

If you’ve engaged our services, we’ll keep records for the period necessary for invoicing, tax purposes and to provide ongoing support.
Website usage data is typically retained for analytical purposes for up to two years.
Marketing data is retained until you unsubscribe or we determine it’s no longer relevant.
Legal and compliance data is retained according to Australian business record-keeping requirements.

When we no longer need to keep your information, we’ll delete it securely.

Cookies and how to block them

We use cookies to help us improve the products and services we provide and enhance your experience on our Website.

What are cookies?

“Cookies” are data files placed on your device or computer that often include an anonymous unique identifier. For detailed information about cookies and how to disable them, visit allaboutcookies.org. Your browser’s help function will tell you how to restrict or block cookies.

Age restrictions

By using this Website, you represent that you’re at least 18 years old or the age of majority in your state or territory. Our Website shouldn’t be used by anyone under the age of majority, and we don’t knowingly collect data from anyone under this age.

Policy updates

This Privacy Policy may change. If we change our Privacy Policy, we’ll display notice of changes on our Website and update the effective date. Please check for updates regularly. If you object to any changes, you may discontinue your use of the Website and our services.

Contact us

For any questions about this Privacy Policy, to access your personal information, correct or update your information, be de-identified or have your information deleted, or to make a complaint or discuss privacy concerns:

The Privacy Officer
Email: support@digitalbloom.com.au
Post: PO Box 130, Upper Coomera, Queensland 4209

If you’re not satisfied with our response to your complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.