Privacy Policy
This Privacy Policy explains how Blossom Creations processes personal data in connection with its florist workshop services, including wedding bouquets, event decoration, consultations, and related website activity. It applies to visitors, prospective customers, and clients who contact us or use our services.
Personal Data We Collect
We may process identification and contact details, event and order information, communication content, payment-related records, service preferences, and limited technical data such as device or browser information. For wedding and event projects, this can include details needed to prepare quotes, confirm dates, coordinate delivery and setup, and record agreed design choices.
How We Collect Data
We receive data when you submit an inquiry, request a consultation, place or confirm an order, communicate with us about an event, or provide payment and delivery details. We also collect certain information automatically when the website is used, such as basic technical and usage data, and we may receive limited information from service providers involved in payment processing or website operation.
Types of Cookies
We may use essential cookies to support site operation, preference cookies to remember basic settings, and analytics or performance cookies to understand how the website is used. Where applicable, cookies may be session-based or persistent. We do not use cookies to collect more information than is needed for the stated purpose.
Cookie Controls
You may block or delete cookies through your browser settings, and you may be able to manage non-essential cookies through the website interface if provided. Disabling some cookies may affect site functionality, form handling, or preference storage. We do not rely on cookie settings to override choices required by law.
Contact Information
GDPR Basis for Processing
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, legitimate interests, or consent where required. The relevant basis depends on the context of the interaction, including inquiries, consultations, bookings, and website use.
GDPR Rights
Where the GDPR applies, you may have rights to access, rectify, erase, restrict, object to processing, and receive a copy of certain data in a portable form. You may also withdraw consent where processing is based on consent. Some requests may be limited by legal retention duties or other lawful grounds.
Why We Use Data
We use personal data to respond to inquiries, arrange consultations, prepare custom quotes, confirm deposits and event dates, coordinate design details, prepare floral arrangements, manage delivery and setup, process payments, maintain business records, and communicate about service changes or follow-up matters. We also use limited technical data to operate, secure, and improve the website and to maintain basic functionality.
Service Providers and Partners
We may share personal data with trusted service providers that support website hosting, communications, payment processing, record keeping, or other operational tasks. Where a third party acts on our instructions, it is expected to use the data only for the agreed purpose and to apply appropriate confidentiality and security measures. We do not sell personal data.
Legal Disclosures
We may disclose personal data when required to comply with applicable law, court orders, tax or accounting duties, or other binding legal processes. We may also share information where necessary to protect our rights, respond to lawful claims, or support the prevention or investigation of fraud or misuse.
Your Rights
Subject to applicable law, you may have rights to know whether we process your data, obtain a copy of it, correct inaccurate information, request deletion, object to certain processing, or ask for restriction of processing. Where processing is based on consent, you may withdraw that consent for future processing. We will assess each request in light of the legal basis, the purpose of processing, and any mandatory retention requirements.
How to Make a Request
To exercise your rights, send a clear request using the contact details in this policy and describe the data or activity concerned. We may ask for information needed to verify your identity and to understand the scope of the request. If a request is complex or if we receive multiple requests, we may need additional time within the limits allowed by law.
Data Retention
We keep personal data only for as long as needed to handle inquiries, manage bookings, complete projects, maintain business records, and meet legal, accounting, or dispute-related obligations. When data is no longer required, we delete it or anonymize it where appropriate. Some records may be retained for a longer period if the law requires it or if they are needed to establish, exercise, or defend legal claims.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our processing practices, services, or legal requirements. The revised version will apply from the date it is published unless a different effective date is stated. We encourage you to review the policy periodically so that you remain informed about how your data is handled.