This Privacy Policy explains how Petal Craft processes personal data when you use the website, make an inquiry, request a consultation, or place an order for floral services.
We may process contact details, inquiry content, order and project details, event dates, delivery or pickup instructions, payment-related records, and communication history. Where needed for a floral project, we may also process preferences such as style, colour palette, venue details, and other information you choose to provide.
We receive data from contact forms, phone calls, consultation appointments, and direct messages related to service requests. We may also generate internal records from scheduling, quotation, deposit confirmation, preparation, delivery, setup, and follow-up communications.
We may use essential cookies to support site operation, preference cookies to remember settings, and analytics cookies to understand general site use. Cookies may be session-based or persistent, depending on their purpose.
You can manage cookies through your browser settings and, where available, through on-site preference controls. Some cookies are necessary for basic site functions and may not be fully disabled without affecting the operation of the website.
We use personal data to respond to inquiries, arrange consultations, prepare quotations, confirm deposits and dates, coordinate design details, carry out preparation, delivery, and setup, manage payments and records, maintain service quality, and meet legal or accounting obligations. We may also use limited technical data to operate and secure the website.
We may share personal data with service providers that support website hosting, communication handling, scheduling, payment processing, accounting, or delivery and setup coordination. These parties may process data only for the services they provide to us and are expected to handle it under appropriate confidentiality and security obligations.
We may disclose personal data where necessary to comply with legal obligations, respond to lawful requests, establish or defend legal claims, or protect the rights, property, or safety of our business, customers, or others.
Where GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken before entering into a contract, compliance with legal obligations, or our legitimate interests in operating and improving the website and services. Consent is used where required, including for certain cookies or optional communications.
If you are in the European Economic Area, GDPR may apply to our processing of your personal data.
Where GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to request data portability in appropriate cases. You may also withdraw consent where processing relies on consent, without affecting prior lawful processing.
Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion in appropriate cases, restriction of processing, or objection to certain processing activities. Where processing is based on consent, you may withdraw that consent for future processing.
To exercise your rights, use the contact details in this policy and describe the request clearly. We may ask for information needed to verify your identity and to understand the scope of the request. If a request cannot be fully granted, we will explain the reason where permitted by law.
We keep personal data only for as long as needed for the relevant inquiry, quotation, project, transaction, or legal obligation. After that period, data is deleted, anonymised, or archived where required for accounting, dispute handling, or compliance purposes.
The updated version will apply from the date stated in the revised policy. If a change materially affects how we process personal data, we will take reasonable steps to make the update visible on the website or through direct communication where appropriate.
