This privacy policy explains how Petal Craft handles personal data when you use the website, send an enquiry, or place a local flower order. It is written for our florist workshop and covers the information we need to respond, arrange service, and keep the site secure.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
When you contact Petal Craft, we may process your name, email address, phone number if you provide it, your message, and any service preferences you share. We may also process technical data such as server request metadata and browser or device information when you use the website.
We receive personal data when you submit a contact form, write to us, call us, or visit the site. Technical information is generated automatically by the systems that keep the website working and secure.
The site uses essential cookies for basic operation and cookies that store privacy preferences. These cookies support functions such as keeping the site usable and remembering your choices. We do not state that analytics or marketing cookies are active.
We use only essential cookies and cookies that remember your privacy preferences. You can manage cookies through your browser settings, and you can also clear stored preferences from your device. If you block essential cookies, some parts of the site may not work properly.
We process personal data to answer enquiries, confirm bouquet details, check availability, arrange payment, manage studio pickup or local delivery, maintain website security, and support technical delivery of the site. We also use limited data to keep records of requests and to meet legal obligations where required.
We may share data with service providers that help us operate the website, handle communications, support technical delivery, or process payments and local fulfilment where needed. These parties may use the data only for the tasks we assign and under appropriate confidentiality obligations.
We may share personal data with public authorities, courts, or other parties when we are required to do so by law or when disclosure is needed to protect our rights, users, or the security of the website. We limit such sharing to what is necessary for the specific purpose.
You may have rights to access, correct, delete, object to, or limit the use of your personal data, depending on the legal basis and the situation. If we need to keep certain information for legal or operational reasons, we will explain that limitation when we respond.
To exercise your rights, send a clear request using one of the contact methods listed in this policy. We may ask for enough information to verify your identity and understand the scope of the request. If a request is incomplete, we may ask for clarification before taking action.
Enquiry records are kept for the time needed to manage the request and any follow-up. Order-related information is kept for the period needed to complete the service and meet legal, accounting, or dispute-handling needs. Technical logs are kept for a limited period for security and troubleshooting, then removed or anonymised where possible.
If we make material changes to this privacy policy, we will revise the notice on the website and use reasonable steps to make the update visible. The version in force is the one published most recently.
Where the GDPR applies, Petal Craft processes personal data as a controller and relies on lawful grounds such as responding to enquiries, carrying out requested services, meeting legal obligations, and protecting the website and its users. We keep the scope of processing limited to what is needed for those purposes.
Where the GDPR applies, you may ask to access your data, correct inaccurate information, delete data in appropriate cases, restrict or object to certain processing, and request portability where the law allows it. You may also withdraw consent where processing is based on consent. Some requests may be limited by legal or operational requirements.
