This Privacy Policy explains how Petal Palette processes personal data for the florist workshop website and related local order services. It covers collection, use, disclosure, retention, deletion, and the rights available under applicable privacy law.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
Data handling overview
This section outlines the categories of personal information we may process, where that information comes from, the types of cookies used on the site, and the controls available to you.
We may process the name, email address, phone number if provided, inquiry message, and service preferences submitted through forms or other direct contact. We also process limited technical data such as server request metadata and browser and device information to keep the website functioning and secure.
Data is collected when you submit a contact form, send a message, make an order request, arrange a consultation, or use the website. Technical data is generated automatically when the site is accessed and may be used for security, delivery, and troubleshooting purposes.
The website uses essential cookies needed for core operation and cookies that store privacy choices. No confirmed use of analytics or marketing cookies is described in this policy. Cookie behavior may vary depending on browser settings and the features you choose to use.
We use essential cookies for site operation and cookies that remember privacy preferences. Because tracking is not enabled, we do not state that analytics or advertising cookies are in use. You can manage cookies through your browser, but disabling essential cookies may affect basic site functions.
We use personal data to respond to contact requests, confirm bouquet preferences, check availability, arrange payment, coordinate studio pickup or local delivery, and provide customer support. Technical data is used to operate the website, maintain security, diagnose issues, and support reliable delivery of the service.
We may share personal data with service providers that support website operation, technical delivery, communication handling, or order-related administration. These recipients are expected to use the data only for the assigned task and to apply appropriate confidentiality and security measures.
We may disclose personal data to public authorities, courts, or other parties when required to comply with legal obligations, respond to lawful requests, protect rights, or address security and fraud concerns. Any such disclosure is limited to what is necessary for the specific purpose.
You may have rights to access your data, correct inaccurate details, request deletion, object to certain processing, or ask for restriction or portability where applicable. We assess each request in context and may decline or limit it when the law allows or requires that result.
To exercise a privacy right, provide enough information for us to identify the relevant records and confirm the request. We may need to verify identity, clarify the scope of the request, and explain any legal reason that prevents full action. Completed requests are handled through the same service channels used for privacy inquiries.
We retain personal data for the period needed to answer inquiries, complete orders, manage service records, resolve disputes, maintain security, and meet legal obligations. When the relevant purpose ends, data is deleted, anonymized, or otherwise removed from active use according to the applicable lifecycle stage.
If this policy is updated, the revised version will describe the new processing terms from the effective date shown on the site or communicated through a suitable notice. We expect users to review the policy periodically so they remain informed about how their data is handled.
Under GDPR, we process personal data on a limited and documented basis, using the information needed to respond to requests, manage orders, maintain the website, and meet legal obligations. Processing is kept proportionate to the service requested and is reviewed across the data lifecycle from collection to deletion.
Where GDPR applies, this policy explains how Petal Palette processes personal data for users in the European Economic Area and related jurisdictions covered by EU privacy rules.
Where GDPR applies, you may request access, correction, deletion, restriction, objection, or portability of your personal data, subject to legal limits and the nature of the request. We may ask for information needed to verify identity and to locate the relevant records before responding.
