This Privacy Policy explains how Floral Studio processes personal data when visitors use lenssunexhibit.forum, make an inquiry, request a consultation, or place an order for floral services.
This section introduces how personal information, user rights, and support pathways are addressed in the document below.
We may process contact details, inquiry content, consultation notes, order and quote information, event dates, delivery and setup details, payment-related records, and limited technical data such as device or browser information. Where relevant, we also process preferences shared for floral design, colour choices, and event planning.
We receive personal data from website forms, email or other direct communications, consultation discussions, order confirmations, and payment or delivery arrangements. Some technical data is collected automatically when the website is used, and some information may be created internally to manage quotations, scheduling, and service delivery.
We may use essential cookies to support site operation, preference cookies to remember basic settings, and analytics cookies to understand how the website is used. Cookies may be session-based or persistent depending on their purpose. We do not use cookies to collect more information than is needed for the stated purpose.
Where cookies are used, users can usually block, delete, or restrict them through browser settings. Some cookies may be necessary for basic site functions, and disabling them may affect how the website works. If consent-based cookies are used, preferences should be managed through the available site controls where provided.
Depending on applicable law, individuals may have rights to know whether we process their data, request access or correction, ask for deletion in appropriate cases, object to certain processing, and request restriction or portability where available. These rights are not absolute and may be limited by legal obligations or legitimate business needs.
To exercise a privacy right, a person should provide enough information for us to identify the relevant record and assess the request. We may ask for additional details to verify identity and to understand the scope of the request. If a request is refused in whole or in part, we will explain the reason where required by law.
We keep personal data only for as long as needed for the relevant inquiry, order, consultation, accounting, or legal recordkeeping purpose. When data is no longer needed, it is deleted, anonymised, or archived in a limited form where retention is required or justified.
We may update this Privacy Policy from time to time to reflect changes in our processing, services, or legal requirements. The revised version will apply from the stated effective date, and we may provide additional notice where a change is material.
Where the GDPR applies, we process personal data only on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. The specific basis depends on the context, including inquiries, quotations, bookings, delivery arrangements, and website use.
Where the GDPR applies, individuals may have rights to access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing is based on consent. A request may require verification of identity and may be limited where another legal ground applies or where retention is required by law.
We use personal data to respond to inquiries, arrange consultations, prepare quotations, confirm dates, manage deposits and payments, coordinate delivery and setup, communicate about design details, maintain business records, and meet legal or accounting obligations. We also use limited technical data to operate and secure the website and to understand basic site performance.
We may share personal data with trusted service providers that support website hosting, communications, administration, payment handling, delivery coordination, or similar operational functions. These parties may process data only on our instructions and for the limited purpose of providing their services.
We may disclose personal data where required by law, court order, or a lawful request from a public authority. We may also share information when necessary to establish, exercise, or defend legal claims, or to comply with accounting, tax, or recordkeeping obligations.
