Privacy policy

Last updated 18 October 2026

Dellro is a service that wedding studios use to deliver films and photographs to their couples. It is operated by Bloomworks (“we”, “us”), a South African business. This policy explains what personal information we handle, why we handle it, who we share it with and the rights you have. It is written to meet the Protection of Personal Information Act, 2013 (POPIA) and, where it applies, the EU and UK General Data Protection Regulation (GDPR).

1. Who we are

Operator: Bloomworks
Email: hello@bloomworks.tech

For any privacy question or request, including anything you would raise with our Information Officer, contact us at hello@bloomworks.tech.

2. Our two roles

The law treats us differently depending on whose information it is.

Studio account data. For the details of studios that sign up (names, emails, billing and how the account is used), we are the responsible party under POPIA and the controller under the GDPR. This policy covers that information in full.
Content studios upload. For the films, photos and client details a studio uploads to deliver to its couples (including couples’ and guests’ names and emails, access lists and viewing activity), the studio is the responsible party or controller. We are its operator or processor and act only on the studio’s instructions, under our data processing agreement.

If you are a couple or a guest viewing a gallery, the studio that sent it to you decides what is shared and with whom. Please contact that studio first about your gallery. If you cannot reach them, write to us and we will help where we can.

3. What we collect

From studios:

Account details: names, email addresses, studio name, team members and their roles, branding, and the website and social links you add.
Billing records: plan, payments and invoices. Card details are handled by PayFast and never reach our servers.
Usage of the service: galleries created, storage used and settings chosen.
Support messages and feedback you send us.
Security records: sign-in attempts, recognised devices and the network (IP) address requests come from.

From couples and guests who view galleries (on the studio’s behalf):

The films, photos, music and captions the studio uploads, which may show you.
Names, email addresses and personal access codes a studio adds to share a private gallery.
Favourites you heart and send to the studio.
Viewing activity: views, plays and downloads, counted with an anonymous viewer cookie rather than your name.
Network (IP) addresses and basic device information, used for security and to stop abuse.

4. Why we use it, and our lawful bases

To provide the service under our contract with the studio: storing, processing and streaming films and photos, sending gallery and sign-in emails, keeping protected copies of files, and billing.
Our legitimate interests: keeping accounts and galleries secure, preventing abuse, fixing faults, answering support requests and improving the service. We weigh these against your interests and do not use them to override your rights.
Legal obligation: keeping financial and tax records, and responding to lawful requests.
Consent, where relevant: where we ask for your permission for something, we rely on it only for that purpose, and you can withdraw it at any time.

For content studios upload, the studio chooses its own lawful basis and is responsible for having its couples’ and guests’ consent where needed. We do not sell personal information, and we do not use studios’ or couples’ content to advertise to anyone.

5. Cookies

We use only cookies the service needs to work. There are no advertising or third-party tracking cookies.

Studio sign-in session: keeps a studio signed in.
Known device: remembers a browser that has signed in before, as a security check.
Gallery access: remembers that you have unlocked a private gallery.
Anonymous viewer: counts gallery views and plays without identifying you.

Our marketing website uses Vercel Web Analytics, which does not use cookies.

6. Who we share it with

We use these service providers (sub-processors). Each one gets only what it needs to do its job.

Vercel Inc. (USA): website hosting and serverless functions.
Neon Inc. (USA, AWS us-east-1): database for account, gallery and billing data.
Backblaze Inc. (USA, us-east): file storage, including live, locked and vault copies, media renditions and encrypted database backups.
Hetzner Online GmbH (server in Ashburn, USA): video processing.
PayFast, part of Network International (South Africa): card and EFT payments.
Resend Inc. (USA): transactional email, such as gallery invitations and sign-in codes.
Google: Google Fonts, which galleries load for their typefaces, and the Google Cast SDK in the film player for casting to a TV.

We also use Anthropic to help write our public blog. It never receives customer data. We may disclose information where the law requires it or to protect our rights, users or the public.

7. Cross-border transfers

Several of our providers store or process information in the United States, so personal information leaves South Africa and, for studios in the EU or UK, is transferred to the USA. Under section 72 of POPIA and the GDPR’s transfer rules, we rely on contractual protections: each provider’s data protection terms, which bind it to protect information to an adequate standard, to use it only to provide its service to us and to keep it secure.

8. Security

Passwords are stored only as scrypt hashes, never in readable form.
Sessions are held in signed, httpOnly cookies, and sign-in attempts are rate-limited.
A strict content security policy limits what can run on our pages.
Original files are never public: they are reached only through short-lived signed links.
Galleries are never indexed by search engines.
Every file is kept in three copies, one of them under Object Lock so it cannot be deleted or changed during its lock period.
Database backups are taken nightly and encrypted with a key held offline.
The video processing server is hardened: key-only access, no root logins and minimal secrets.

No system is perfectly secure. If a breach affects your information, we will notify you and the relevant regulator as the law requires.

9. How long we keep it

While a studio is a member, its galleries and original files are kept for life, in three copies.
On the Photo and Photo Pro plans, galleries stay online for 3 years from creation. They are then archived: viewing copies are removed and the originals are kept in our protected archive copy, from which a studio can ask us to restore them.
After 12 months, the live copy of an original is archived; it stays in the locked and vault copies and galleries keep playing.
Couples can download originals for 12 months from when a gallery is created, then 1080p films and web-size photos. Streaming continues for at least three years.
If a membership ends, galleries stay online for at least 12 months afterwards and never less than three years from creation. We email the studio 60 and 14 days before removal, and renewing keeps everything.
When a studio deletes a gallery, its viewing copies are removed. Locked copies expire at the end of their lock period; nobody, including us, can delete them early. Backups expire on a schedule.
Billing records are kept for as long as tax and accounting law requires.

A studio can ask us by email to close its account and export its data.

10. Your rights

Under POPIA and, where it applies, the GDPR, you can ask us to:

confirm whether we hold information about you and give you access to it;
correct information that is wrong or incomplete;
delete information, or restrict how it is used, where there is no longer a reason to keep it;
stop using it, if you object to processing based on our legitimate interests or to direct marketing;
give you information you provided in a portable, machine-readable form.

Write to hello@bloomworks.tech. We may need to confirm who you are before acting. Studios can edit or delete most of their information themselves. If your request is about a gallery, we will pass it to the studio that controls it, or help them answer it.

You may complain to the Information Regulator of South Africa (inforegulator.org.za). If you are in the EU or UK, you may also complain to your local data protection authority. We would appreciate the chance to put things right first.

11. Children

Dellro is a service for businesses and is not directed at children. Galleries may contain images of children, uploaded by studios. The studio is responsible for obtaining the consent of a parent or guardian where it is needed.

12. Changes to this policy

We may update this policy as the service or the law changes. The date at the top shows the latest version. If a change is significant, we will tell studios by email or in the app before it takes effect.

13. Contact

Questions, requests or concerns about privacy: hello@bloomworks.tech.