This Privacy Policy explains how Blooming Elegance processes personal data in connection with its website, consultations, and floral services for weddings and events.
We use personal data to answer inquiries, arrange consultations, prepare custom quotes, confirm deposits and dates, coordinate floral design and event setup, manage payments and records, maintain website security, improve site performance, and comply with legal obligations. We may also use data to handle disputes, enforce agreements, and keep business records consistent with applicable law.
We may share personal data with trusted processors and operational partners that help us host the website, manage communications, process payments, maintain records, or support delivery and setup coordination. These parties are expected to use the data only under our instructions and for the agreed service purpose.
We may disclose personal data to public authorities, courts, or other parties when required to comply with law, respond to lawful requests, protect our rights, or address fraud, security, or similar issues. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
We may process identification and contact details, event and order information, communication content, consultation notes, payment-related records, and technical data such as device and usage information. Where a customer provides details about an event, we also process information needed to prepare quotes, confirm dates, and coordinate delivery or setup.
We receive data from website forms, email or other direct communications, consultation meetings, booking and payment steps, and records created during service delivery. We may also collect limited technical information automatically when the website is used.
Cookies may include strictly necessary cookies for core site functions, preference cookies to remember settings, and analytics or performance cookies that help us understand how the site is used. Where required, non-essential cookies are used only with the appropriate consent or control setting.
Users can manage cookies through their browser settings and, where available, through on-site preference tools. Disabling some cookies may affect site functionality, form handling, or preference storage, but it should not prevent access to basic information about our services.
Depending on the legal basis and the circumstances, individuals may have rights to access their data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction or portability. These rights are exercised in line with applicable data protection rules and any lawful exceptions.
To protect personal data, we may ask for information needed to verify the requester and understand the request. We will respond within the period required by applicable law and may request clarification if the request is incomplete or unclear.
We keep personal data only for as long as needed for the relevant inquiry, booking, service, accounting, legal, or dispute-handling purpose. When data is no longer required, it is deleted, anonymized, or archived only where retention is necessary under law or for legitimate business records.
The updated version will apply from the date it is published unless a later effective date is stated. If a change is material, we will take reasonable steps to draw attention to it through the website or other suitable communication channels.
Where the GDPR applies, we rely on lawful bases such as performance of a contract, steps taken before entering into a contract, compliance with legal obligations, legitimate interests, and consent where it is required. We process personal data only to the extent needed for the relevant purpose.
For users in the European Economic Area, the GDPR may apply to our processing of personal data when we act as controller or otherwise determine the purposes and means of processing.
Where applicable, individuals may request access, rectification, erasure, restriction, portability, or objection, and may withdraw consent where processing is based on consent. If a request cannot be fully granted, we will explain the legal reason to the extent permitted.
