Privacy Policy
This Privacy Policy explains how Petal Dreams processes personal data when users contact us, request a consultation, arrange a floral project, or use the website. It applies to enquiries and service interactions connected with wedding bouquets, event decoration, delivery, and setup in Andria and nearby areas.
GDPR Overview
Petal Dreams acts as a controller for personal data processed through the website and related service communications. GDPR applies where we determine the purposes and means of processing for users in the European Economic Area. Processing is carried out on a lawful basis that may include performance of a contract, steps taken before entering into a contract, legal obligations, legitimate interests, or consent where required.
GDPR Rights
Where GDPR applies, individuals may request access, rectification, erasure, restriction, portability, or objection, and may withdraw consent where processing relies on consent. If a request concerns data needed for booking, fulfilment, accounting, or legal compliance, some information may need to be retained or limited rather than deleted immediately.
Data We Collect
We may process identification and contact details, event and order information, communication content, consultation notes, payment-related records, delivery and setup details, and technical data such as device and usage information. Where a user asks for a custom floral project, we may also process preferences relevant to design, timing, venue coordination, and service fulfilment.
Sources of Data
Data is collected from contact form submissions, phone or appointment enquiries, consultation exchanges, quote and booking requests, payment and confirmation steps, and from technical logs generated when the website is used. We may also receive limited information from third parties involved in arranging payment, delivery, or venue coordination, where necessary for the service.
Types of Cookies
Essential cookies support core site functions such as page navigation and form handling. Preference cookies remember limited settings where applicable. Analytical or performance cookies help us understand how the site is used and whether pages and forms operate correctly. We do not use cookies to collect more information than is reasonably needed for these purposes.
Cookie Controls
We use cookies and similar technologies only to the extent needed for operation, security, and basic analytics. Users may block or delete cookies through browser settings, but some site functions may not work properly if essential cookies are disabled. Preference settings, where offered, should be reviewed periodically because they may not apply after browser changes or device resets.
Your Rights
Depending on the circumstances, users may have rights to receive information about processing, access their data, correct inaccurate data, request deletion, limit certain processing, object to processing based on legitimate interests, and obtain a copy of data they provided in a structured form where applicable. These rights are not absolute and may be limited by legal or operational requirements.
How to Make a Request
To protect privacy, we may ask for information needed to verify the requester before acting on a rights request. We will review the request, respond within the period required by law where applicable, and explain any refusal, limitation, or partial response that is necessary because of legal obligations or the nature of the data.
Retention of Data
We retain personal data for as long as necessary to manage enquiries, prepare quotes, confirm bookings, complete services, handle payments, maintain business records, and meet legal, accounting, or dispute-related obligations. When data is no longer needed, it is deleted, anonymised, or otherwise handled in a secure manner consistent with our retention practices.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our services, website functions, data handling practices, or legal requirements. The revised version will apply from the date it is made available on the website, unless a different effective date is stated. Users should review the policy periodically to remain informed about current practices.
Purposes of Processing
We use personal data to answer enquiries, arrange consultations, prepare custom quotes, confirm dates and deposits, coordinate design details, manage delivery and setup, process payments, maintain records, improve website performance, and comply with legal obligations. We may also use limited technical data to secure the website, prevent misuse, and diagnose operational issues.
Sharing with Service Providers
We may share personal data with service providers that support website hosting, communications, payment processing, record keeping, delivery coordination, and similar operational tasks. These parties may process data only for the services they provide to us and are expected to handle it under appropriate confidentiality and security obligations. We do not sell personal data.
Legal Disclosure
We may disclose personal data where required to comply with law, court orders, tax or accounting duties, or lawful requests from public authorities. We may also share information when needed to establish, exercise, or defend legal claims, or to protect the rights, property, or safety of the business, users, or others.