This Privacy Policy explains how Bloom Atelier handles personal data in connection with its website, consultations, and floral services for weddings and events. It describes the types of data we collect, the purposes of processing, sharing practices, retention, and the choices available to users.
Data handling overview
We may collect contact details, inquiry content, event and order preferences, consultation notes, payment-related records, delivery and setup instructions, and technical data such as device, browser, and access logs. Where needed for a wedding or event project, we may also process information provided by planners or hosts about dates, venue details, and design preferences.
We collect data from form submissions, consultation requests, messages, booking and payment steps, and from records created when we prepare quotes, confirm dates, arrange delivery, or manage on-site setup. Technical data may be collected automatically through the website and related systems.
We may use essential cookies to support site operation, preference cookies to remember settings, and limited analytics cookies to understand general site performance. We do not rely on cookies to collect more information than is reasonably needed for these purposes.
We use standard browser and device controls to manage cookies and similar technologies. Users can usually block, delete, or restrict cookies through their browser settings. If cookies are disabled, some parts of the site may not remember preferences or operate correctly.
We use personal data to respond to inquiries, prepare design consultations and custom quotes, confirm deposits and event dates, coordinate floral planning, manage delivery and on-site setup, process payments, maintain records, improve website performance, and meet legal or administrative requirements. We may also use data to communicate about changes to a project or to resolve service issues.
We may share personal data with service providers that support website hosting, communications, payment processing, record management, delivery coordination, or on-site setup. These parties are expected to use the data only for the services they provide to us and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data if required by law, court order, or other lawful process, or if disclosure is necessary to protect our rights, property, users, or the integrity of our services. We may also share information to comply with tax, accounting, or recordkeeping obligations.
Depending on the circumstances, users may request access to their personal data, correction of inaccurate information, deletion where permitted, or restriction of certain processing. Some requests may be limited where we must keep records for legal, contractual, or operational reasons.
To protect privacy and prevent misuse, we may ask for information needed to verify a request before taking action. We will review the request and respond within a reasonable period under applicable law.
We retain personal data for the period needed to handle inquiries, prepare quotes, complete projects, maintain business records, and meet legal, accounting, or dispute-related requirements. When data is no longer needed, we delete it or anonymize it where appropriate.
We may revise this policy to reflect changes in our services, legal requirements, or data handling practices. The updated version will apply from the date it is posted unless a different effective date is stated. Users should review the policy periodically for the latest information.
