This Privacy Policy explains how Bloom Haven processes personal data in connection with its florist workshop services, including wedding bouquets, event decoration, consultations, orders, delivery, and website use.
We may process identification and contact details, event and order information, communication content, consultation notes, payment and billing records, delivery and setup details, and technical data such as device and usage information. Where relevant, we also process preferences shared for floral design, event timing, and service coordination.
We receive data directly from you when you submit an inquiry, arrange a consultation, place an order, confirm event details, or communicate with us by phone or form. We also collect certain data automatically when you use the website, such as basic technical and usage information, and we may receive payment or delivery-related information from service providers involved in completing your request.
We may use essential cookies to support site functionality, preference cookies to remember basic settings, and analytics cookies to understand how the website is used. Cookies may be session-based or persistent, depending on their purpose and duration.
You may block or delete cookies through your browser settings. If the website provides a cookie preference tool, you may use it to manage non-essential cookies. Some cookies are necessary for basic site functions and may not be fully disabled without affecting the website's operation.
Use the contact details below for privacy questions, rights requests, or policy-related correspondence.
Depending on applicable law, you may have rights relating to access, correction, deletion, restriction, objection, and portability of your personal data. You may also have the right to lodge a complaint with a competent supervisory authority if you believe your data has been handled unlawfully.
To exercise your rights, provide enough information to identify the relevant data and the request you are making. We may ask for additional details to verify identity or clarify the request before responding. If a request cannot be fully granted, we will explain the reason where permitted by law.
We keep personal data only for as long as needed to handle inquiries, manage bookings, complete services, maintain business records, resolve disputes, and meet legal obligations. When data is no longer required, we delete it or anonymize it where appropriate.
We may update this Privacy Policy from time to time to reflect changes in our processing practices, website functions, or legal requirements. The revised version becomes effective when posted unless a different effective date is stated.
Our processing is based on applicable GDPR grounds, which may include performance of a contract, steps taken before entering into a contract, legal obligation, legitimate interests, and consent where required. We limit processing to what is necessary for the relevant purpose and apply appropriate safeguards.
Where GDPR applies, you may have the right to access your data, request rectification, request erasure, restrict processing, object to processing, and receive data portability in applicable cases. If processing is based on consent, you may withdraw consent for future processing without affecting prior lawful processing.
We process personal data to respond to inquiries, arrange consultations, prepare quotes, confirm deposits and dates, coordinate floral design details, prepare and deliver arrangements, manage payments and records, maintain the website, improve service quality, and comply with legal and accounting obligations.
We may share personal data with service providers that support website hosting, communication tools, payment processing, accounting, delivery coordination, and similar operational functions. These parties may process data only to perform services for us and are expected to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when required to comply with law, a binding request, or a lawful order, and when necessary to establish, exercise, or defend legal claims. We may also share information to protect our rights, property, customers, or the security of our systems.
