This privacy notice explains how Petal Palette handles personal data when you use the website, contact us, or place a local flower order. It is written for a florist workshop serving Bouc-Bel-Air and nearby districts.
Depending on how you use the site, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser or device information.
We receive personal data when you submit a contact form, call us, write to us, or share details in store. Technical data is collected automatically when you visit the website and is used for delivery, security, and basic site operation.
The site uses essential cookies for core operation and privacy preference cookies to remember your settings. We do not state that analytics or marketing cookies are active.
You can manage cookies through your browser settings. If you block essential cookies, some parts of the site may not function correctly. Preference cookies are used only to remember your choices on the site.
We process personal data to answer contact requests, confirm bouquet details, manage availability, arrange payment and pickup or local delivery, maintain website security, and support technical delivery of the site. We also use limited data to keep records, handle legal obligations, and improve the reliability of our services.
We may share limited data with trusted service providers that help us operate the website, process messages, support technical delivery, or manage local order handling. These parties are expected to protect the data and use it only for the services they provide to us.
Personal data may be shared with public authorities, courts, or other parties when required by law, to protect our rights, or to respond to a lawful request. We may also disclose limited information where needed to prevent fraud, address security issues, or comply with record-keeping duties.
You can ask us to explain, correct, delete, or limit the use of your personal data. You may also object to certain processing or request a copy of the data we hold about you. If a request cannot be fully granted, we will explain the reason in practical terms.
Please describe your request clearly and include enough information for us to identify the relevant record. We may ask for additional details to confirm your identity and to protect your data from unauthorized disclosure. We aim to respond within the time required by applicable law.
Contact enquiries are kept for the time needed to respond and follow up. Order and service records are kept for the period needed to manage the transaction, handle aftercare, and meet accounting or legal requirements. Technical logs are kept for a limited period unless a longer period is needed for security or incident review.
If we make material changes, we will update this page and may use reasonable means to draw attention to the update when appropriate. The date of the latest revision should be checked before relying on the notice.
Under the GDPR, we process personal data only when we have a lawful basis to do so, such as handling your request, performing a service, meeting legal obligations, or relying on our legitimate interests for security and technical operation.
Where the GDPR applies, you may ask for access, correction, deletion, restriction, objection, or portability of your personal data. You may also withdraw consent where processing is based on consent. Some requests may be limited by legal duties or by the need to keep records for operational reasons.
