This Privacy Policy explains how Blossom Atelier processes personal data in connection with its website, inquiries, consultations, quotations, orders, and floral event services. It applies to users who contact us or use the website for bridal bouquet design, wedding party flowers, ceremony arrangements, reception table arrangements, venue delivery, and related services.
This overview highlights the principal topics addressed in this notice and directs readers to the relevant support path when further clarification is needed.
We use personal data to respond to inquiries, arrange consultations, prepare quotations, confirm dates, manage deposits and payments, coordinate delivery and setup, maintain customer records, handle accounting and legal obligations, and operate the website. We also use limited technical data to support security, troubleshooting, and basic site functionality.
We may share personal data with service providers that support website operation, communication handling, scheduling, payment processing, delivery coordination, and on-site setup. These parties may process data only for the purposes we instruct and are expected to handle it under appropriate confidentiality and security obligations. We do not sell personal data.
We may disclose personal data to public authorities, courts, or other parties when required to comply with law, enforce our rights, respond to lawful requests, or protect against fraud, misuse, or security incidents. We may also share information where necessary to document transactions or meet accounting and recordkeeping obligations.
Depending on your location and the processing involved, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction of processing. Where processing is based on consent, you may withdraw that consent for future processing. Some requests may not be granted if we must keep the data for legal, contractual, or security reasons.
To exercise a privacy right, please provide enough information for us to identify the relevant record and assess the request. We may ask for additional details to confirm identity or clarify the scope of the request. If a request is refused in whole or in part, we will explain the reason where required by law.
We keep personal data only for as long as needed for the relevant inquiry, contract, accounting, documentation, or legal compliance purpose. After that period, data is deleted, anonymized, or archived where retention is required by law or justified by a legitimate business need. The exact period may vary depending on the type of record and the relationship with the customer.
The current version applies from the date it is published on the website. If we make material changes, we will update the policy text and may provide a separate notice where appropriate. Continued use of the website after an update does not waive any rights available under applicable law.
We may process contact details, inquiry content, event and order preferences, consultation notes, quotation details, deposit and payment records, delivery and setup information, and limited technical data such as device or browser information. Where relevant, we also process communication records and information needed to confirm dates, prepare arrangements, and complete the requested service.
We receive data from contact forms, phone calls, consultation appointments, and direct messages. We may also generate internal records from our own communications, quotation handling, scheduling, preparation, delivery, and on-site setup activities, as well as from basic website and device interactions.
We may use strictly necessary cookies to support site operation, session cookies to maintain form or navigation continuity, and limited preference or analytics cookies where enabled. These cookies help with security, basic functionality, and understanding how the website is used. We do not use cookies to make decisions with legal or similarly significant effects.
You may control cookies through your browser settings and, where available, through any on-site preference tools. Disabling some cookies may affect form submission, session handling, or other basic website functions. We do not rely on cookies for purposes beyond those described in this policy.
Where GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken before entering into a contract, legal obligation, legitimate interests, or consent where required. The specific basis depends on the context, including inquiries, consultations, quotations, deposits, delivery, setup, and website use.
Where GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing is based on consent. A request may require verification of identity and may be limited where legal retention duties or other lawful grounds apply.
