Privacy Policy
This Privacy Policy explains how Petal Palette processes personal data when you use the website, request floral services, or communicate with us about wedding bouquets and event decoration.
Data We Collect
We may process identification and contact details, event and order information, communication content, preference details such as color palette or floral style, payment-related records, and technical data collected through the website. Where relevant, we also process information needed to prepare quotes, confirm dates, arrange delivery and setup, and manage service follow-up.
How We Collect Data
We receive data from website forms, email or other direct communications, consultation discussions, quote and order requests, and payment or scheduling interactions. Some technical data is generated automatically when the website is used, such as device and usage information needed for security and basic operation.
Types of Cookies
The website may use essential cookies for security and core functionality, preference cookies to remember basic settings, and limited analytics cookies to understand site performance. Cookies may be session-based or persistent depending on their purpose and retention period.
Cookie Controls
We use standard cookie controls to manage essential site functions and, where applicable, preference or analytics features. Non-essential cookies may be limited or blocked through browser settings, but some parts of the site may not function as intended if essential cookies are disabled.
Your Rights
Subject to legal limits, users may request access to their data, correction of inaccurate information, deletion in appropriate cases, restriction of processing, or objection to certain processing activities. Where processing is based on consent, that consent may be withdrawn for future processing.
How to Make a Request
To exercise a privacy right, submit a clear request using the contact details in this policy and include enough information to identify the relevant data or interaction. We may ask for additional details to verify the request and will respond within the timeframe required by applicable law.
Data Retention
We keep personal data only for as long as needed to manage inquiries, quotations, bookings, event preparation, accounting, dispute handling, and legal compliance. When the relevant purpose ends, data is deleted, anonymized, or archived only where retention is required or permitted by law.
Policy Updates
If we make material changes, we will update the policy text and, where appropriate, provide a notice through the website or another reasonable channel. The version in effect is the one published at the time the data is processed.
GDPR Overview
When GDPR applies, personal data is processed on a lawful basis such as performance of a contract, steps taken at the user’s request before entering a contract, compliance with legal obligations, legitimate interests, or consent where required. We limit processing to what is necessary for the stated purpose and apply appropriate safeguards to the data we handle.
GDPR Rights
Where GDPR applies, users may have rights of access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing relies on consent. If a request cannot be fully granted, we will explain the legal reason to the extent required by law.
How We Use Data
We use personal data to respond to inquiries, prepare custom quotes, manage consultations, confirm deposits and dates, coordinate floral design and event setup, process payments, maintain records, improve website reliability, and meet legal or accounting obligations. We may also use data to communicate about changes to a booking or to resolve service issues.
Service Providers
We may share personal data with trusted service providers that support website hosting, communications, payment processing, scheduling, delivery coordination, or administrative tasks. These parties are expected to use the data only for the services they perform for us and to maintain appropriate confidentiality and security measures.
Legal Disclosures
We may disclose personal data to public authorities, courts, or other parties when required by law, to respond to lawful requests, to protect our rights, or to support the handling of a complaint, claim, or similar legal matter.