This Privacy Policy explains how Petal Haven processes personal data in connection with its website, consultations, quotations, and floral services for weddings and events.
Under the GDPR, personal data must be processed lawfully, fairly, and transparently, and only for specified purposes. We rely on appropriate legal bases depending on the context, such as performance of a contract, legal obligations, legitimate interests, or consent where required.
Where GDPR applies, it governs our processing of personal data for users in the European Economic Area and, in relevant cases, users whose data is otherwise handled under EU data protection rules.
Where GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to receive a copy of certain data in a portable format. If processing is based on consent, you may withdraw consent without affecting prior lawful processing.
Depending on your location and the applicable law, you may be entitled to request access, correction, deletion, restriction, objection, or portability of your personal data. You may also raise concerns with the competent data protection authority if you believe your rights have been affected.
To exercise a privacy right, send a clear request describing the data or action concerned and provide enough information for us to verify your identity. We will review the request and respond within the period required by applicable law, unless an extension is lawfully permitted.
We keep personal data only for as long as needed for the relevant inquiry, contract, accounting, dispute handling, or legal compliance. When data is no longer required, it is deleted, anonymized, or otherwise handled in a secure manner consistent with applicable law.
If we make material changes, we will update the policy text and may provide additional notice where appropriate. The version in force is the one published on the website at the time of your visit or interaction.
We may process identification and contact details, event and design preferences, order and payment information, communication records, delivery and setup details, and technical data such as device and usage information when you visit the website.
We receive data from website forms, email or telephone communications, consultation requests, quote and order discussions, payment and confirmation steps, and from limited technical collection when the site is used.
We may use essential cookies for site operation, preference cookies to remember choices, and analytics cookies to understand basic site use. Non-essential cookies are used only where permitted.
You may block or delete cookies through your browser, but some site functions may not work as intended if essential cookies are disabled. Where consent is used for non-essential cookies, you may withdraw it through the available settings.
We use personal data to respond to inquiries, arrange consultations, prepare quotes, confirm bookings, manage deposits and payments, coordinate design details, plan delivery and setup, maintain records, operate the website, improve service quality, and meet legal or accounting obligations.
We may share personal data with service providers that support website hosting, communications, payment handling, accounting, and event-related logistics, as well as with professional advisers where needed. These recipients may process data only for the purposes we specify and under appropriate confidentiality or contractual safeguards.
We may disclose personal data to public authorities, courts, or other recipients when necessary to comply with legal obligations, respond to lawful requests, establish or defend legal claims, or protect rights and security.
