Privacy Policy
This Privacy Policy explains how Petal Palette processes personal data when you use the website, make an inquiry, request a consultation, or arrange florist services for weddings and events.
This summary highlights how to navigate the information provided in this policy.
Data We Collect
We may process identification and contact details, event and order information, communication content, consultation notes, payment-related records, delivery and setup details, and technical data such as device and usage information. Where relevant, we also process preferences shared for floral design, venue setup, and scheduling.
How We Collect Data
We receive data from website forms, phone or consultation communications, booking and quote requests, payment and confirmation steps, and from basic technical interactions with the website. We may also receive limited information from service providers involved in payment processing, hosting, or site operation.
Cookie Types
We may use essential cookies needed for basic site operation, preference cookies that remember settings, and analytics or performance cookies that help us understand how the site is used. Non-essential cookies are used only where permitted by applicable law and, where required, after consent.
Cookie Controls
You may block or delete cookies through your browser, but some site functions may not work as intended if essential cookies are disabled. Where the website offers cookie preferences, those settings should be used to adjust non-essential cookies.
How We Use Data
We use personal data to respond to inquiries, arrange consultations, prepare quotes, confirm dates, manage deposits and service details, coordinate delivery and on-site setup, communicate about orders, maintain business records, operate and secure the website, and comply with legal obligations. We may also use limited technical data to understand site performance and improve functionality.
Service Providers
We may share personal data with hosting, website maintenance, communication, payment, and other operational providers that support our business. These parties act on our instructions or as independent controllers where required by law, and they may process data only for the agreed purpose and subject to appropriate confidentiality and security measures.
Legal Disclosures
We may disclose personal data where necessary to comply with applicable law, lawful requests from public authorities, court orders, or obligations connected with accounting, recordkeeping, fraud prevention, or the establishment, exercise, or defence of legal claims.
Contact Details
Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion where appropriate, restriction of processing, objection to certain processing, and a copy of data in a portable format where applicable. You may also raise concerns with the competent supervisory authority.
To exercise your rights, provide enough information for us to identify the relevant data and assess the request. We may ask for additional details where needed to confirm identity, protect confidentiality, or determine whether an exception applies. We will respond within the period required by law.
We keep personal data only for as long as needed for the relevant inquiry, booking, service, accounting, or legal purpose. After that, data is deleted, anonymised, or archived where retention is required by law or necessary to resolve disputes and maintain records.
The updated version will apply from the stated effective date. If a change is material, we will take reasonable steps to draw attention to it through the website or another suitable channel before or when the change takes effect.
GDPR Overview
Under GDPR, we process personal data only where we have a lawful basis, such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We apply data minimisation and limit processing to what is necessary for the relevant purpose.
Where GDPR applies, this policy explains how Petal Palette processes personal data for users in the European Economic Area and related situations covered by EU data protection law.
GDPR Rights
Where GDPR applies, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to request data portability where applicable. If processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.