Privacy Policy
Last updated:
This Privacy Policy explains how AVA ZEVEN LLC collects, uses and protects personal information when you use zevenbloom.com, create an account, place an order, subscribe to the Bloom Letter or contact the studio.
1. Information we collect
Account details: your email address or mobile number, name (optional) and a securely hashed password.
Order and delivery details: recipient names, addresses, delivery notes and card messages.
Messages you send us through the contact form, including your name, email, optional phone and company.
Newsletter subscriptions: your email address, optional first name and the page where you subscribed.
Technical data: basic logs such as request identifiers and timestamps used for security and troubleshooting.
2. How we use it
To create and secure your account, fulfil orders and subscriptions, deliver flowers and reply to your messages.
To send service messages such as verification codes and delivery updates.
To send marketing emails or SMS only where you have given consent, which you can withdraw at any time.
3. Legal bases
We process personal data to perform our contract with you, to meet legal obligations, for our legitimate interests in running a secure service, and on the basis of your consent for marketing.
4. Sharing
We share information only with service providers who help us operate — for example our account and messaging platform, payment processors and delivery partners — under contracts that protect your data. We never sell personal information.
5. Retention
Account data is kept while your account is active and deleted within 30 days of account deletion, except where records must be kept longer for tax or legal reasons. Contact messages are kept for up to 24 months.
6. Your rights
You can access, correct, export or delete your personal information, object to processing and withdraw consent. Email support@zevenbloom.com and we will respond within 30 days.
7. Security
Passwords are stored as one-way hashes, sessions use secure, HTTP-only cookies, and data travels over encrypted connections.
8. Children
Our services are not directed to children under 16 and we do not knowingly collect their personal information.
9. Changes
We will post any updates on this page and, for material changes, notify account holders by email.