This Privacy Policy explains how Bloom Boutique processes personal data when you use the website, make an inquiry, request a consultation, or place an order for floral services. It also describes the main categories of data, the purposes of processing, sharing practices, retention, and your rights under applicable law.
We use personal data to respond to inquiries, arrange consultations, prepare custom quotes, confirm deposits and dates, coordinate final details, and carry out preparation, delivery, and setup for floral projects. We also use data to manage payments, maintain records, improve site operation, handle customer communication, and meet legal and accounting obligations.
We may share personal data with service providers that support website operation, communication handling, payment processing, delivery coordination, or technical maintenance. Where a project requires venue delivery or setup, relevant details may be shared with parties involved in fulfilling that service. These recipients may process data only for the agreed purpose and under appropriate confidentiality or data protection terms.
We may disclose personal data when required by law, court order, or a lawful request from public authorities. We may also share information where necessary to establish, exercise, or defend legal claims, or to comply with recordkeeping and accounting obligations.
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, or our legitimate interests in operating and improving the business. Consent is used where required, and it may be withdrawn without affecting processing already carried out lawfully.
Where applicable, you may request access, rectification, erasure, restriction, objection, and data portability. You may also withdraw consent where processing relies on consent. Some requests may be limited by legal duties, contractual needs, or the need to retain records for legitimate business purposes.
Data handling overview
We may process contact details, event and order information, communication content, payment-related records, delivery and setup details, and technical data such as device and usage information. Where a client provides event specifications, we also process the details needed to prepare a quote, confirm dates, and carry out the requested floral service.
We receive data directly from you when you submit an inquiry, request a consultation, place an order, or communicate with us by phone or form. We may also collect information generated during website use, such as basic technical logs, and information needed to complete delivery, setup, or payment processing through the selected method.
We may use cookies that are necessary for site operation, cookies that help remember preferences, and cookies that support basic analytics or performance review. Necessary cookies are used to maintain core functions, while other cookies are used only to the extent permitted by your settings and applicable law.
Where cookies or similar tools are used, you may manage them through your browser settings and, in some cases, by changing the preferences available on the site. Disabling certain cookies may affect basic site functions or limit the accuracy of usage measurement.
Depending on your location and the way your data is processed, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction or portability. We assess each request against the legal basis for processing and any retention duties that apply.
To exercise a privacy right, submit a clear request using the contact details in this policy and include enough information to identify the relevant data. We may ask for additional details to verify identity or to understand the request before responding.
We retain personal data for the period needed to handle inquiries, prepare quotes, manage orders, complete delivery or setup, and maintain business records. When data is no longer required, we delete it, anonymize it, or store it only where retention is necessary for legal, accounting, or dispute-handling purposes.
If we make material changes, we will update the policy text and may provide additional notice where appropriate. The version in effect is the one published on the site at the time of your visit or interaction.
