This Privacy Policy explains how Petal Palette processes personal data when you use the website, request consultations, or engage us for floral services and event decoration. It also describes the main categories of data, the purposes of processing, and the rights available to users under applicable law.
Where GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, legitimate interests, or consent where required. We limit processing to what is necessary for the relevant purpose and apply appropriate safeguards.
Where the GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing, and to request data portability in suitable cases. If processing is based on consent, you may withdraw consent at any time without affecting prior processing. You may also lodge a complaint with the competent supervisory authority.
We may collect identification and contact details, event and order information, communication content, payment-related records, delivery and setup details, and technical data such as device and usage information. For wedding and event projects, we may also process preferences that are necessary to prepare quotations, confirm dates, and coordinate arrangements.
We receive personal data directly from users through forms, messages, consultations, and order communications. We also collect limited technical data automatically when the website is accessed, and we may receive information from payment, delivery, or service providers involved in fulfilling a request.
We may use essential cookies to support basic site operation, preference cookies to remember settings, and analytics cookies to understand how the website is used. Cookies may be session-based or persistent depending on their purpose.
You may block or delete cookies through your browser settings. If the website provides a cookie banner or preference tool, you may use it to manage non-essential cookies. Disabling some cookies may affect site functionality or the availability of certain features.
Depending on your location and the applicable law, you may have rights relating to access, correction, deletion, restriction, objection, and portability of your personal data. Some requests may be limited where we must retain information for legal, contractual, or security reasons.
To exercise a privacy right, please provide enough information for us to identify the relevant data and confirm your identity. We may ask for additional details before responding. If a request is complex or repetitive, we may respond within the period allowed by law and explain any lawful limitation that applies.
We keep personal data only for as long as needed for the purpose for which it was collected, including consultation handling, quotation preparation, contract performance, accounting, dispute management, and legal compliance. When data is no longer required, we delete it or anonymize it where appropriate.
We may update this Privacy Policy from time to time to reflect changes in our processing practices, services, or legal requirements. The revised version will apply from the date it is made available on the website, unless a different effective date is stated.
We use personal data to respond to inquiries, arrange consultations, prepare custom quotes, confirm deposits and dates, coordinate floral design and event setup, manage payments and records, maintain the website, improve service quality, and comply with legal and accounting obligations. Where permitted, we may also use data to communicate about the status of a request or order.
We may share personal data with service providers that support website operation, communications, payment processing, accounting, technical maintenance, and delivery or event coordination. These parties may process data only for the services they provide to us and are expected to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when necessary to comply with applicable law, lawful requests from public authorities, court orders, or other legal obligations. We may also share information where disclosure is needed to establish, exercise, or defend legal claims.
