This Privacy Policy explains how Petal & Bloom handles personal data when users visit the site, make an inquiry, request a consultation, or place a floral order. It applies to our appointment-based studio operations and to wedding and event services arranged through the site or by direct contact.
We use personal data to respond to inquiries, arrange consultations, prepare custom quotes, confirm deposits and dates, coordinate design details, manage delivery and setup, process payments, maintain records, improve site functionality, and meet legal, accounting, and security obligations. We may also use limited technical data to diagnose problems and understand how the site is used.
We may share personal data with service providers that help us operate the site, manage communications, process payments, support scheduling, or arrange delivery and setup. These parties are expected to use the data only for the services they provide to us and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when required to comply with applicable law, lawful requests from public authorities, court orders, or similar legal obligations. We may also share data where disclosure is necessary to protect our rights, investigate misuse, or support the establishment, exercise, or defense of legal claims.
We may collect contact details, inquiry content, event preferences, order and consultation details, delivery instructions, payment-related records, and technical data such as device and browser information. Where a user submits information about a wedding or event, we process the details needed to prepare a quote, confirm dates, and complete the requested floral service.
We receive personal data directly from users through contact forms, consultation requests, phone-based inquiries, and appointment arrangements. We also obtain limited technical data automatically when the site is used, and we may record information created during the course of a project, such as quote notes, scheduling records, and delivery or setup instructions.
We may use essential cookies to support site functions, preference cookies to remember basic settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose. We do not use cookies to collect more information than is reasonably needed for operation and review of site performance.
Users can usually control cookies through their browser settings, including blocking some or all cookies, deleting stored cookies, or setting alerts before cookies are placed. If cookies are disabled, some site functions may not operate as intended.
Subject to legal limits, users may ask whether we hold their personal data, request correction of inaccurate details, object to certain processing, or ask for deletion where the data is no longer needed. Some records may need to be kept for contract, accounting, or compliance reasons.
To protect privacy, we may ask for information needed to verify a request before acting on it. Once verified, we will review the request and respond within a reasonable period under applicable law.
We retain personal data for the period needed to manage inquiries, complete projects, maintain business records, resolve disputes, and meet legal or tax obligations. When data is no longer required, we delete it or anonymize it where appropriate, subject to any lawful retention duty.
We may update this Privacy Policy from time to time to reflect changes in our data practices, site features, or legal requirements. The revised version will apply from the date it is posted, and users should review it periodically to stay informed of the current terms.
