This privacy notice explains how Blossom Craft handles personal data when you use the website, submit an inquiry, place a flower order, or communicate with us about local delivery or pickup. It follows the data lifecycle from collection through use, sharing, retention, and deletion.
Depending on how you use the site, we may collect your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser or device information to support delivery, security, and basic site functionality.
Most personal data is received directly from you through the contact form, by phone, or in store when you place a bouquet request or confirm service details. Technical data is generated automatically when you access the website and is used for security, troubleshooting, and service delivery.
We use cookies for essential site operation and to remember privacy preferences. We do not confirm the use of analytics or marketing cookies. Cookie data is handled in a limited way and is not used to build advertising profiles.
You can manage cookies through your browser settings and, where available, adjust privacy preferences on the site. Essential cookies are used to keep the website working, and preference cookies help remember your selected settings. Disabling some cookies may affect basic site functions.
We use personal data to respond to bouquet requests, confirm budget and color preferences, check availability, arrange payment, and coordinate studio pickup or local delivery. We also use data to operate the website, maintain security, improve technical reliability, and keep records needed for business administration and legal compliance.
We may share personal data with service providers that help us operate the website, process communications, support technical delivery, or manage local order handling. These recipients are expected to use the data only for the services they provide to us and to keep it confidential where appropriate.
We may disclose personal data when necessary to comply with legal obligations, respond to lawful requests, protect our rights, or address security and fraud concerns. Any such disclosure is limited to what is reasonably necessary for the relevant purpose.
Privacy rights lifecycle
You may request access to the personal data we hold about you, ask for correction of inaccurate information, or request deletion where retention is no longer required. You may also object to or limit certain processing in situations recognized by law, and we will review each request according to its context.
To protect privacy, we may ask for information needed to verify your identity and understand the scope of your request. Once verified, we will assess the request, respond within a reasonable period, and explain any legal or operational limits that apply.
We retain personal data for as long as needed to respond to inquiries, manage orders, complete delivery or pickup arrangements, maintain business records, and meet legal or operational obligations. When data is no longer needed for those purposes, we delete it or remove identifying details where appropriate.
If we update this policy, we will revise the notice on the website and may provide additional notice when a change is material. The updated version applies from its effective date and replaces earlier wording to the extent stated.
Use the listed service channels for questions about this notice or your data.
