This Privacy Policy explains how Bloom Rituals handles personal data when you use our website, request floral consultations, or place orders for wedding bouquets and event decoration. It applies to inquiries, quotations, deposits, delivery coordination, and related communications.
We may collect identifiers and contact details, event and service preferences, consultation notes, order details, delivery and setup instructions, payment-related records, and limited technical data such as device and usage information. For wedding and event projects, we may also process information needed to prepare quotes, confirm dates, and coordinate venue access and logistics.
We receive personal data when you submit an inquiry, request a consultation, ask for a quote, place or confirm an order, or communicate with us about an event. We may also obtain information from payment processing, delivery coordination, and basic website analytics or security tools that record how the site is used.
We may use essential cookies to support site operation, session cookies to maintain navigation and form use, and preference cookies to remember basic settings. We may also use limited analytics or security cookies to understand site performance and protect the website from misuse. We do not use cookies to collect more information than is reasonably needed for these purposes.
You may manage cookies through your browser controls, including blocking, deleting, or restricting certain cookies. Some site functions may not work properly if essential cookies are disabled. Where required, we may also present a cookie notice or preference tool for non-essential cookies.
Subject to legal limits, you may request access to your personal data, correction of inaccurate information, deletion of data that is no longer needed, or restriction of certain processing. You may also object to processing based on legitimate interests where that ground applies. If we rely on your consent for a specific activity, you may withdraw it for future processing.
To exercise your rights, provide enough information for us to verify your identity and understand your request. We may ask for additional details where needed to confirm the scope of the request or to locate the relevant records. If we cannot fully comply, we will explain the reason to the extent permitted by law.
We retain personal data for as long as needed to manage inquiries, complete orders, maintain business records, resolve disputes, and meet legal or accounting obligations. When data is no longer required, we delete it or de-identify it where feasible. Some records may be kept longer if necessary for compliance, security, or the establishment or defense of legal claims.
We may update this policy when our practices, services, or legal obligations change. The revised version will apply from the date it is posted unless a different effective date is stated. We encourage you to review this page periodically so you remain informed about how your data is handled.
We use personal data to respond to inquiries, arrange consultations, prepare custom quotes, confirm deposits and event dates, coordinate design details, manage preparation and delivery, process payments, maintain records, support website security, and meet legal or accounting obligations. We may also use limited data to improve service coordination and to communicate about changes affecting an active order or consultation.
We may share personal data with payment processors, website hosting and security providers, communication tools, and delivery or logistics partners that help us operate the business. We may also share event-related details with trusted vendors involved in preparation, transport, or setup when needed to complete a confirmed order. These parties are expected to use the data only for the services they provide to us.
We may disclose personal data when required to comply with law, lawful requests, court orders, or similar legal obligations. We may also share information where needed to protect our rights, enforce agreements, prevent fraud, or address security incidents. Any disclosure is limited to the extent reasonably necessary for the relevant purpose.
