This Privacy Policy explains how Floral Haven processes personal data in connection with its website, consultations, quotations, and floral services for weddings and events.
Floral Haven processes personal data as a controller for the purposes described in this policy. When the GDPR applies, processing is based on applicable legal grounds such as consent, contract performance, legal obligation, or legitimate interests, as relevant to the specific activity.
Where the GDPR applies, users in the European Economic Area are entitled to the protections described in this policy.
Where the GDPR applies, users may have rights of access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing is based on consent. Users may also lodge a complaint with the competent supervisory authority.
We use personal data to respond to inquiries, arrange consultations, prepare custom floral proposals, manage bookings and deposits, confirm event details, coordinate delivery and on-site setup, process payments, provide customer support, maintain records, secure the website, and comply with legal obligations.
We may share personal data with external providers that support website hosting, technical maintenance, communication handling, payment processing, and other operational services. These parties act under instructions or contractual arrangements appropriate to their role and may process data only for the services they provide to us.
We may disclose personal data to public authorities, courts, or other parties when required to comply with applicable law, respond to lawful requests, protect our rights, or address security, fraud, or similar concerns. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
Depending on the legal basis and the circumstances, users may request access to their data, correction of inaccurate information, deletion, restriction of processing, or objection to certain processing activities. Where processing is based on consent, consent may be withdrawn without affecting prior lawful processing.
To exercise a privacy right, users should submit a clear request using the contact details in this policy and describe the data or processing activity concerned. We may ask for information needed to verify the requester and to respond appropriately within the time limits required by law.
We keep personal data only for as long as needed for the relevant purpose, including booking management, customer support, accounting, dispute handling, and compliance with legal retention requirements. When data is no longer needed, it is deleted or anonymized in accordance with our internal procedures.
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or operational needs. The updated version will apply from the date indicated in the revised policy, and users should review it periodically.
We may collect identification and contact details, event and order information, communication content, payment-related records, and technical data such as device and usage information. Where relevant, we also process details needed to prepare floral proposals, confirm dates, manage delivery and setup, and handle customer support.
Data is received from website forms, email or other direct communications, consultation requests, order and quote discussions, payment interactions, and basic technical logs generated when the website is used. We may also receive limited information from service providers involved in operating the site or processing transactions.
The site may use strictly necessary cookies to support core functions, preference cookies to remember settings, and analytical cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose and duration.
You may block or delete cookies through your browser settings. If the browser is configured to reject certain cookies, some site functions may not operate as intended. Where the site provides cookie controls, those preferences should be used to manage non-essential cookies.
