This privacy policy explains how Petal Craft processes personal data in connection with its website, enquiries, and local flower order services. It follows the data lifecycle from collection to retention and deletion, and it applies to the website operated under the questrangekit.digital domain.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
We process the information you submit through our contact form or other direct communications, including your name, email address, phone number if provided, inquiry message, and service preferences. We also process technical data such as server request metadata and browser or device information when you visit the website.
We receive personal data from you when you send an inquiry, request a bouquet, confirm budget or color preferences, arrange availability, make payment, or choose studio pickup or local delivery. Some technical data is generated automatically by the website and hosting environment during normal use.
Confirmed cookie uses are limited to essential site operation and storing privacy preferences. Essential cookies support functions such as page delivery and form handling, while preference cookies help remember your selected privacy choices. No active analytics or advertising cookie use is confirmed in this policy.
We use essential cookies needed for site operation and cookies that remember privacy preferences. Because tracking is not enabled, we do not confirm analytics or marketing cookies as active. You can limit cookies through your browser, but essential cookies may still be needed for basic functionality.
We use personal data to respond to bouquet requests, confirm budget and color preferences, check availability, arrange payment, and coordinate studio pickup or local delivery. We also use technical data to operate the website, maintain security, diagnose issues, and support the delivery of submitted forms and messages.
We may share personal data with service providers that support website operation, technical delivery, message handling, or local acknowledgement of form submissions. Any such recipient is expected to use the data only for the service it performs and to apply appropriate confidentiality and security measures.
We may disclose personal data when required to comply with law, a court order, or another binding request from a public authority. We may also share information where disclosure is necessary to protect our rights, prevent misuse, or address security incidents in a lawful manner.
You may have rights to access your personal data, correct inaccurate information, request deletion where appropriate, object to certain processing, or ask for restriction or portability in applicable cases. We assess each request in light of the data involved, the purpose of processing, and any legal duties that require us to keep information.
To exercise a privacy right, send a clear request through one of the contact channels listed in this policy and describe the data or action you are asking about. We will review the request, confirm whether any verification is needed, and respond within the timeframe required by applicable law.
We retain personal data for the period needed to handle the enquiry, complete the requested service, maintain business records, resolve disputes, and meet legal or accounting obligations. When the relevant purpose ends, data is deleted, anonymised, or otherwise removed from active use according to our internal lifecycle review.
If we make material changes, we will update the policy text on the website and use reasonable steps to draw attention to the update when appropriate. The version in effect is the one published at the time of your visit or interaction, unless a later version is stated to apply.
For GDPR purposes, Petal Craft acts as the controller for the personal data described in this policy. Processing is based on the operation of the website, handling of enquiries, service coordination, security, and compliance with legal obligations. Where a lawful basis is required, we rely on the basis appropriate to the specific processing activity.
Where GDPR applies, it governs our processing of personal data for individuals in the European Economic Area and, in relevant cases, related cross-border activity.
Where GDPR applies, you may request access, rectification, erasure, restriction, portability, or objection, depending on the circumstances and legal limits. If consent is used for a specific processing activity, you may withdraw it for future processing. We may ask for information needed to verify identity before responding.
