Acceptable Use Policy

1. Permitted Use

BLUME is designed for florists and floral businesses to manage events, clients, orders, and operations. You may use BLUME only for lawful business purposes related to your floral business.

2. Prohibited Activities

You must not use BLUME to:

2.1 Illegal Activity

• Violate any applicable law, regulation, or court order
• Engage in fraud, deception, or misrepresentation
• Process or store data in a way that violates applicable privacy laws (including the NZ Privacy Act 2020)
• Infringe any third party's intellectual property, privacy, or other rights

2.2 Harmful Content

• Upload, transmit, or store malicious code, viruses, or other harmful software
• Upload content that is unlawful, defamatory, harassing, abusive, or obscene
• Store or process data belonging to individuals without their consent or a lawful basis

2.3 System Integrity

• Attempt to gain unauthorised access to BLUME systems, databases, or other accounts
• Conduct security testing, penetration testing, or vulnerability scanning without prior written consent
• Use automated tools (bots, scrapers) to access or extract data from BLUME beyond normal use
• Interfere with or disrupt the service, its servers, or connected networks
• Attempt to reverse-engineer, decompile, or disassemble any part of BLUME

2.4 Misuse of the Platform

• Resell, sublicense, or provide access to BLUME to third parties without our written consent
• Use BLUME for any purpose other than managing your own floral business operations
• Impersonate another user, business, or entity within the platform

3. Client Data Responsibilities

When you store client information in BLUME (names, contact details, event details), you are acting as the data controller for that information. You are responsible for:

• Ensuring you have a lawful basis to store and use your clients' personal information
• Complying with the New Zealand Privacy Act 2020 and any other applicable privacy legislation
• Responding to any requests from your clients regarding their personal data
• Not uploading sensitive personal data (e.g. health information, financial records) beyond what is necessary for your business operations

4. Third-Party Integrations

When using integrations (Google Calendar, Xero), you must also comply with those providers' terms of service and acceptable use policies. You must only connect accounts and data that you are authorised to access.

5. Enforcement

We reserve the right to investigate any suspected breach of this AUP. If we determine a breach has occurred, we may take action including:

• Issuing a warning
• Temporarily suspending your account
• Permanently terminating your account without refund
• Reporting activity to relevant authorities where required by law

6. Reporting a Violation

If you become aware of any activity on BLUME that may breach this AUP, please report it to us at admin@blumequote.com.

7. Changes to This Policy

We may update this AUP from time to time. We will notify you of material changes by email. Continued use of BLUME after changes are posted constitutes acceptance of the updated policy.