This Privacy Policy explains how Petal Palette processes personal data when you contact us, request floral services, arrange consultations, or use the website. It also describes our use of cookies, data sharing practices, and the rights available under applicable data protection law.
This summary highlights how to navigate the information provided in this policy.
We may process identification and contact details, event and order information, communication content, appointment preferences, delivery or setup instructions, payment-related records, and technical data such as device and usage information. Where relevant, we also process information needed to prepare quotes, confirm dates, and coordinate floral services.
We collect personal data from contact forms, phone calls, consultation appointments, direct messages, and other communications with us. We may also receive information from payment providers, delivery-related interactions, and technical systems that record how the website is used.
The website may use strictly necessary cookies, functional cookies, and basic analytics cookies. Necessary cookies support core site functions, while functional cookies remember preferences and analytics cookies help us understand general site use. We do not use cookies to collect more data than is needed for these purposes.
You can manage or block cookies through your browser settings. If the website provides a cookie notice or preference tool, you may use it to control non-essential cookies. Disabling some cookies may affect site functionality or limit certain features.
Subject to legal conditions, you may request access to your data, correction of inaccurate information, deletion in appropriate cases, restriction of processing, or objection to certain processing activities. Where processing relies on consent, you may withdraw that consent for future processing.
To exercise your rights, send a clear request using the contact details in this policy and describe the data or processing activity concerned. We may ask for information needed to verify your identity and will respond within the period required by law.
We keep personal data only for as long as needed to handle inquiries, manage bookings, complete services, maintain business records, and meet legal or accounting obligations. When data is no longer required, we delete it or anonymize it according to our internal retention practices.
If we make material changes, we will update the policy text on the website and may provide additional notice where appropriate. The date of the latest revision should be reviewed periodically.
We use personal data to respond to inquiries, prepare quotes, schedule consultations, confirm orders, coordinate deposits and final details, arrange delivery or studio pickup, manage payments, maintain records, improve website performance, and comply with legal obligations. We may also use data to handle service issues and communicate about the requested project.
We may share personal data with service providers that support website hosting, communications, payment processing, delivery coordination, and administrative tasks. These recipients act under instructions or contractual obligations appropriate to their role and may process data only for the services they provide to us.
We may disclose personal data to public authorities, courts, or other parties when required by law, to protect our legal rights, or to comply with a valid legal process. We may also share information where necessary to establish, exercise, or defend legal claims.
When GDPR applies, we process personal data on lawful bases such as consent, contract performance, legal obligation, and legitimate interests, depending on the context. The relevant basis may vary by inquiry, booking, payment, website use, or service coordination.
This notice applies to individuals in the European Economic Area and, where relevant, reflects GDPR requirements for personal data processing.
Where GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing is based on consent. They may also lodge a complaint with the competent supervisory authority.
