This privacy policy explains how Petal Palette handles personal data when you contact us, request flowers, or use the website. It is written to help you understand what we collect, why we use it, and how you can exercise your rights.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
You may have rights to know what data we hold, ask for corrections, request deletion in appropriate cases, object to certain processing, or ask for a copy of data that you provided. We will assess each request against the applicable legal requirements and the need to keep records for service, security, or compliance purposes.
To protect your information, we may ask for enough details to verify your identity and understand the scope of your request. Once verified, we will respond within the time required by law or explain if more time is needed because of complexity or volume.
Contact and order-related data are retained for the period needed to respond to your request, complete the service, maintain records, and meet legal or accounting obligations where applicable. Technical data is kept for a limited time for security and troubleshooting, then deleted or anonymized when it is no longer needed.
If we make material changes, we will update the policy text on the website and may use a reasonable notice method for significant changes. The version in effect is the one published at the time you use the site, unless a later effective date is stated.
Depending on how you use the site, we may process your name, email address, phone number if you provide it, inquiry message, service preferences, server request metadata, and browser or device information. We do not ask for more information than is reasonably needed for contact handling, technical delivery, and website security.
We receive personal data when you submit a contact form, send an email, call us, or share details during a consultation or order request. Technical data is generated automatically when you visit the website and is used for security, delivery, and basic site operation.
Confirmed cookie use is limited to cookies needed for essential site operation and cookies that store privacy preferences. We do not confirm analytics or marketing cookies as active on this site. If that changes, the policy will be updated to reflect the actual use.
We use cookies only for essential site operation and to remember privacy preferences. You can manage cookies through your browser settings, and where a preference option is available on the site, your selection will be respected for future visits. Disabling essential cookies may affect how the site works.
We use personal data to respond to bouquet requests, confirm budget and color preferences, check availability, arrange payment, manage studio pickup or local delivery, maintain website security, and support technical delivery of the site. We may also use data to keep records, handle follow-up communication, and meet legal obligations that apply to our business.
We may share data with service providers that help us operate the website, deliver technical functions, or process communications. Any such recipient is expected to use the data only for the assigned task and to apply appropriate confidentiality and security measures.
Personal data may be disclosed if required by law, court order, or a valid request from a public authority. We may also share information when needed to establish, exercise, or defend legal claims, or to protect the security and integrity of the website and our records.
Under the GDPR, we process personal data only where we have a valid basis, such as handling your request, meeting legal obligations, protecting the website, or relying on consent where it is required. The exact basis depends on the context of the interaction and the type of data involved.
Where the GDPR applies, you may have rights to access, correct, delete, restrict, or object to certain processing, and to request portability in some situations. If processing is based on consent, you may withdraw it for future processing. Some requests may be limited where we must keep data for legal, security, or operational reasons.
