This Privacy Policy explains how Bloom & Blossom processes personal data when you visit the website or use our florist workshop services for wedding bouquets and event decoration.
We may process identification details, contact details, event and order information, consultation notes, payment-related information, communication content, and technical data such as device and usage information. For wedding and event projects, this may include preferences, dates, venue details, guest count ranges, and delivery or setup instructions.
We collect data when you submit an inquiry, request a consultation, ask for a quote, confirm a booking, communicate with us, or arrange delivery and setup. We also receive limited technical information through the website and may generate internal records from consultations, order handling, and service coordination.
Cookies may include strictly necessary cookies for site functionality, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose and duration.
You may block or delete cookies through your browser settings. If the browser is configured to reject certain cookies, some site functions may not operate as intended. Where a cookie preference tool is provided, your selections will be applied to the extent technically possible.
Subject to applicable law, you may have rights to access your data, request correction, ask for deletion, object to certain processing, and request restriction in appropriate cases. You may also raise concerns about how your data is handled through the contact details in this policy.
To protect privacy and security, we may ask for information needed to verify your identity and understand your request. We will assess each request under applicable law and respond within the period required for the request type.
We keep personal data only for as long as needed for the relevant inquiry, consultation, project, accounting, recordkeeping, or legal purpose. When data is no longer required, it is deleted, anonymized, or archived in a restricted form where retention is necessary.
We may update this policy from time to time to reflect changes in our services, processing practices, or legal requirements. The revised version will apply from its stated effective date, and we may provide additional notice where a change is material.
We use personal data to respond to inquiries, prepare consultations and custom quotes, manage deposits and booking confirmations, coordinate design details, arrange preparation, delivery, and setup, process payments, maintain business records, improve our website and services, and comply with legal obligations.
We may share personal data with service providers that support website hosting, communications, payment processing, bookkeeping, delivery coordination, and other operational functions. These recipients may process data only on our instructions or as otherwise permitted by law.
We may disclose personal data where required to comply with law, a court order, or a lawful request from a public authority, and where needed to establish, exercise, or defend legal claims. We may also share information to protect our rights, customers, or the security of our systems.
When GDPR applies, we process personal data on a lawful basis that may include performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, and our legitimate interests in operating and improving the website and services. Where required, we rely on consent for specific processing activities.
Where GDPR applies, this policy explains how we process personal data of individuals in the European Economic Area.
Where GDPR applies, you may have rights to access, rectify, erase, restrict, object to processing, and receive a copy of certain data in a portable form. You may also withdraw consent where processing is based on consent. Some requests may be limited by legal retention duties or other lawful grounds.
