This privacy policy explains how Bloom Craft Studio processes personal data in connection with its website, consultations, and floral services for weddings and events.
We may process contact details, inquiry content, consultation notes, order and project details, event dates, venue access information, payment-related records, communication history, and technical data such as device and usage information. Where relevant, we also process preferences for floral style, colour palette, delivery, and setup arrangements.
We receive data from website forms, email or other direct communications, consultation discussions, order confirmations, payment handling, and information supplied during preparation, delivery, and on-site setup. Some technical data is collected automatically when the website is used.
The website may use essential cookies for core functions, preference cookies to remember settings, and analytics cookies to understand general site use. Cookies may be session-based or persistent depending on their purpose.
You may block or delete cookies through your browser settings. If you do so, some parts of the website may not function as intended. Where the site provides a cookie preference tool, it can be used to manage non-essential cookies.
We process personal data as a controller for the purposes described in this policy. Where GDPR applies, processing is based on a lawful ground such as consent, contract performance, legal obligation, or legitimate interests, depending on the context.
Where GDPR applies, individuals may have rights to access, rectification, erasure, restriction, objection, and data portability. Where processing is based on consent, that consent may be withdrawn for future processing without affecting prior lawful processing.
We use personal data to respond to inquiries, arrange consultations, prepare quotes, confirm deposits and event dates, manage project details, coordinate delivery and on-site setup, process payments, maintain records, improve the website, and comply with legal obligations. We may also use data to communicate about changes to an order or service arrangement.
We may share personal data with payment processors, website and hosting providers, communication tools, and other operational partners that support our business. These parties may process data only for the services they provide to us and are expected to protect it appropriately.
We may disclose personal data where required by law, court order, or a lawful request from a public authority. We may also share information when necessary to establish, exercise, or defend legal claims.
Depending on the circumstances, you may ask us to confirm whether we process your personal data, obtain a copy of it, correct inaccurate information, or object to certain processing. Some requests may be limited where we must keep information for legal or contractual reasons.
To make a rights request, use the contact details in this policy and describe the data or processing activity concerned. We may ask for information needed to verify the request and to protect against unauthorised disclosure.
We keep personal data only for as long as it is needed for the relevant purpose, including inquiry handling, project administration, accounting, legal compliance, and dispute resolution. When data is no longer needed, it is deleted or anonymised in a reasonable manner.
The updated version will apply from the date stated in the revised policy. If a change is material, we will take reasonable steps to make it known through the website or other appropriate communication channels.
