The Booking Scorecard: Privacy Policy

Effective date: 29 September 2026

Provider: Lunaria Pty Ltd (ABN 90 638 168 028) trading as Wildflower Academy, Newcastle, New South Wales, Australia

1. Introduction

1.1 This Privacy Policy explains how We collect, hold, use and disclose Personal Information in connection with the App and the Sales Page.

1.2 We are committed to handling Personal Information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles in Schedule 1 of the Privacy Act (APPs).

1.3 By creating an Account or using the App or the Sales Page, You acknowledge that You have read and understood this Privacy Policy.

1.4 Summary of key commitments. We never sell Your User Data or Personal Information. We never share Your enquiry log with any third party except the service providers listed in clause 7 and where required by law. The App contains no third party advertising or analytics trackers.

2. Definitions

2.1 In this Privacy Policy:

Account means the account created for You to access the App.
App means The Booking Scorecard web application at scorecard.wildfloweracademy.co.
Anonymous Combined Statistics means aggregated numerical data drawn from the User Data of multiple Accounts, as described in clause 6.
Client Data means Personal Information about Your clients (including couples) and other third parties that You enter into the App.
GDPR means the General Data Protection Regulation (EU) 2016/679 and, where applicable, the UK General Data Protection Regulation and the Data Protection Act 2018 (UK).
Personal Information has the meaning given in the Privacy Act and, where the GDPR applies, includes "personal data" as defined in the GDPR.
Sales Page means the web page on which We offer the App for sale.
Terms means Our Terms of Use for the App, published at wildfloweracademy.co/scorecard-terms.
Usage Data means information about how You use the App, as described in clause 3.6.
User Data means the data You enter into or import into the App, including Client Data.
We, Us and Our mean Lunaria Pty Ltd (ABN 90 638 168 028) trading as Wildflower Academy.
You and Your mean the individual who holds an Account or visits the Sales Page.

3. Personal Information We collect

3.1 Account information. Your email address and password. You should use the email address with which You purchased access. Passwords are handled by the App's authentication system and are not visible to Us.

3.2 Purchase information. When You purchase through Kajabi, We record Your email address, the date of purchase, and the offer through which You obtained access (including any case study or introductory offer, the standard offer, or complimentary access as an Academy member or gift recipient). We do not receive or store Your payment card details.

3.3 User Data. All information You enter into the App, including couple names, enquiry dates, wedding dates, enquiry source, venue, planner or stylist, whether a consultation occurred, quote date, budget, quote, final invoice, status, loss reason, date booked, right fit score (1 to 5), green and red flags, and notes.

3.4 Imported data. Where You import data from a customer relationship management system or spreadsheet, the file is read within Your browser. Only names, dates, source, venue, status and monetary values are imported. Email addresses, phone numbers, postal addresses and notes are excluded. Before any import or use of the Clear all function, We save a copy of Your log so that You may restore it within 30 days.

3.5 Goals and business details. The goals You set, and the information You enter under About your business: country, state or region, year of establishment, whether You use a calendar or financial year, and Your minimum spend (including the dates on which it changed).

3.6 Usage Data. The date You first opened the App, each date on which You open it, the number of couples You have logged, whether You have set goals, which Easter eggs You have found, and when You last exported a backup.

3.7 Correspondence and survey responses. Your replies to Our emails and Your answers to any case study survey, which We keep with Your Account.

3.8 Technical information. Our hosting and authentication providers keep standard technical records, such as login times and IP addresses, to operate the service and keep it secure.

3.9 Sales Page interaction data. On the Sales Page only, Microsoft Clarity records how visitors scroll, click and move through the page.

3.10 How We collect it. We collect Personal Information directly from You when You purchase, create an Account, use the App, or correspond with Us, and from Kajabi when You complete a purchase.

4. Cookies and browser storage

4.1 Within the App. The App uses Your browser's local storage and similar technologies to keep You logged in between visits. The App does not use third party advertising or analytics cookies or trackers.

4.2 On the Sales Page. Microsoft Clarity uses cookies and similar technologies on the Sales Page to record interaction data. You can block or delete cookies through Your browser settings. Doing so will not affect Your use of the App.

5. How We use Personal Information

5.1 We collect, hold and use Personal Information for the following purposes:

(a) Providing the App: to authenticate You, store Your User Data, synchronise it between Your devices, and display Your results to You;
(b) Evaluating and supporting use of the App: to review how each Account uses the App and its summary figures (such as the number of couples logged, booking rate and goals) in order to assess whether the App is working, to support You, and to improve the App. We do not use couple names or notes for this purpose;
(c) Onboarding assistance: to send You a helpful email if You have not opened the App within 48 hours of purchase, or have logged fewer than five couples after one week. You may stop these emails at any time by emailing [email protected];
(d) Aggregate reporting: to calculate totals across all Accounts, such as the number of florists taking part in the case study shown on the Sales Page. These totals are numbers only and never identify You;
(e) Anonymous Combined Statistics: as described in clause 6;
(f) Communication: to respond to Your enquiries and requests;
(g) Sales Page improvement: to understand how visitors use the Sales Page; and
(h) Protection and legal compliance: to keep technical records of access to and use of the App, to include an identifying mark linked to Your Account in the copy of the App delivered to You, and to receive an automatic report (containing only that mark, the website address and the time) if a copy of the App is opened anywhere other than Our website, in order to detect, investigate and prevent unauthorised access, copying or disclosure; to enforce the Terms; and to comply with Our legal obligations, including tax record keeping.

5.2 Case study results and quotes. We will only publish Your name, a quote from You, or results attributed to You with Your express consent.

5.3 Legal bases under the GDPR. Where the GDPR applies, We rely on the following legal bases: performance of Our contract with You (clauses 5.1(a) and 5.1(f)); Our legitimate interests in supporting users and improving the App and Sales Page (clauses 5.1(b), (c), (d), (e) and (g)); compliance with legal obligations and Our legitimate interests in protecting the App (clause 5.1(h)); and Your consent (clause 5.2).

6. Anonymous Combined Statistics

6.1 Anonymous Combined Statistics are enabled by default. We combine numerical data from Your User Data with that of other users, including booking rates, budgets, quote values, lead times, enquiry and wedding months, enquiry sources, country and state or region, and years in business.

6.2 We use Anonymous Combined Statistics to improve the App, develop new tools, and publish general statistics about the wedding floristry industry.

6.3 Anonymous Combined Statistics never include couple names, notes, venue names, planner or stylist names, or any information that identifies a wedding or a florist.

6.4 Any statistics We publish are drawn from groups of at least 10 florists, so that no individual can be identified. We never sell Anonymous Combined Statistics.

6.5 Opting out. You may opt out at any time by emailing [email protected] from the email address associated with Your Account. From the date We action Your request, Your data will be excluded from Anonymous Combined Statistics.

6.6 Data already included in Anonymous Combined Statistics cannot be traced back to You and will remain in those totals after You opt out or close Your Account.

7. Disclosure of Personal Information

7.1 Access by Us. We can access Your Account and User Data in order to provide support, resolve problems and improve the App.

7.2 Service providers. We disclose Personal Information to the following service providers, who hold or process it on Our behalf so that the App and Sales Page can operate:

(a) Lovable and Lovable Cloud (Supabase): hosting of the App, its authentication system and its database;
(b) Kajabi: processing of purchases and delivery of Our emails to You; and
(c) Microsoft Clarity: recording of visitor interactions on the Sales Page only. Clarity does not operate within the App.

7.3 No sale or sharing. We never sell, rent or trade Your User Data or Personal Information, and We never share Your enquiry log with any person other than the service providers listed in clause 7.2.

7.4 Required by law. We may disclose Personal Information where required or authorised by law, including under a court order or at the request of a regulatory or law enforcement authority.

8. Overseas disclosure (APP 8)

8.1 Your Account and User Data are stored with Lovable Cloud (Supabase). Lovable, Supabase, Kajabi and Microsoft may store or process Personal Information outside Australia, including in the United States.

8.2 Where Personal Information is disclosed to a recipient outside Australia, We take reasonable steps, in accordance with APP 8, to ensure that the recipient does not breach the APPs in relation to that information.

8.3 Where the GDPR applies and Personal Information is transferred outside the United Kingdom or the European Economic Area, We rely on appropriate safeguards made available by Our service providers, such as standard contractual clauses or adequacy decisions.

9. Client Data

9.1 Client Data forms part of Your business records. You are responsible for ensuring that You have a lawful basis to collect, record and store Client Data, and for meeting any privacy obligations You owe to Your clients.

9.2 We handle Client Data only on Your behalf and in accordance with this Privacy Policy and the Terms. Where the GDPR applies, You are the controller of Client Data and We act as Your processor.

10. Security (APP 11)

10.1 We take reasonable steps to protect Personal Information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include password authentication, database access controls that restrict each Account to its own User Data, and encrypted connections.

10.2 No method of transmission or storage is completely secure. If We become aware of a data breach that is likely to result in serious harm, We will notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

11. Retention and deletion

11.1 We retain Your Account and User Data while Your Account remains open.

11.2 If You obtained access as an Academy member and Your membership ends, We retain Your User Data so that it is available if You rejoin the Academy or purchase access to the App, unless You request deletion.

11.3 If You request deletion of Your Account, We will delete Your Account and User Data within 30 days of Your request.

11.4 We retain purchase records for as long as required by Australian taxation law.

11.5 Correspondence and survey responses are retained with Your Account and deleted with it, except where We have Your consent to keep a published quote or result.

11.6 Data already included in Anonymous Combined Statistics is not deleted, because it cannot be linked to You.

12. Access and correction (APPs 12 and 13)

12.1 You may access and correct Your Personal Information as follows:

(a) Export: You may export Your enquiry log as a CSV file from within the App at any time;
(b) Correction: You may correct Your User Data by editing it within the App;
(c) Deletion of entries: You may delete individual enquiries, or clear Your entire log using the Clear all function. A cleared log may be restored within 30 days;
(d) Account deletion: You may request deletion of Your Account and all associated data by emailing [email protected];
(e) Opt out: You may opt out of Anonymous Combined Statistics and onboarding emails by emailing [email protected]; and
(f) Access request: You may request details of the Personal Information We hold about You by emailing [email protected].

12.2 We will respond to access and correction requests within a reasonable period, and in any case within 30 days. We may need to verify Your identity before acting on a request. If We refuse a request, We will give You written reasons, as required by the APPs.

13. Rights under the GDPR

13.1 If You are located in the United Kingdom, Ireland or the European Economic Area, You have additional rights under the GDPR, including the right to:

(a) access Your personal data;
(b) rectify inaccurate personal data;
(c) erasure of Your personal data;
(d) restrict the processing of Your personal data;
(e) object to processing based on Our legitimate interests;
(f) data portability; and
(g) withdraw consent at any time, where We rely on consent.

13.2 To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with Your local data protection supervisory authority.

14. Children

14.1 The App and the Sales Page are intended for businesses and are not directed at persons under 18 years of age. We do not knowingly collect Personal Information from persons under 18. If We become aware that We have done so, We will delete that information.

15. Complaints

15.1 If You have a complaint about how We have handled Your Personal Information, please contact Us at [email protected] with details of Your complaint. We will acknowledge Your complaint and respond within 30 days.

15.2 If You are not satisfied with Our response, You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

16. Changes to this Privacy Policy

16.1 We may amend this Privacy Policy from time to time. We will publish the amended Privacy Policy with a new effective date.

16.2 If an amendment affects how We use Your Personal Information, We will notify You by email before the amendment takes effect.

17. Contact

17.1 For questions, requests or complaints about this Privacy Policy, contact:

Lunaria Pty Ltd (ABN 90 638 168 028) trading as Wildflower Academy

Newcastle, New South Wales, Australia

Email: [email protected]