This Privacy Policy explains how Blossom Boutique handles personal data when visitors use the website, make an inquiry, or engage us for floral services. It applies to our appointment-based studio operations, including wedding bouquets, event decoration, delivery, and setup arrangements in Malaysia.
We use personal data to respond to inquiries, arrange consultations, prepare quotes, confirm deposits and dates, coordinate design details, deliver and set up floral arrangements, process payments, maintain records, improve website performance, and manage security and legal compliance.
We may share personal data with trusted service providers that help us operate the website, process payments, manage communications, support delivery and setup, or maintain records. We may also share information with professional advisers where needed for business administration or compliance.
We may disclose personal data when necessary to comply with legal obligations, respond to lawful requests, protect our rights, or address fraud, security, or similar concerns. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
These contact details are used for privacy questions and requests relating to personal data.
Data handling overview
We may collect identification and contact details, event and order information, consultation notes, delivery and setup instructions, payment-related records, and website usage data. Where needed for a floral project, we may also process preferences shared by the customer, such as style, colour palette, venue details, and timing requirements.
We receive personal data from contact forms, phone calls, consultation appointments, and messages sent in connection with a project. We may also obtain limited technical data automatically when the website is used, such as device and browser information, log data, and cookie-related identifiers.
We may use essential cookies to support site operation, preference cookies to remember basic settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their function and duration.
We use standard browser-based controls and similar settings to manage cookies and related technologies. Users may block or delete cookies through their browser, and may also choose to limit non-essential cookies where such controls are offered on the site.
Subject to applicable law, individuals may request access to their personal data, ask for correction of inaccurate information, or raise concerns about how their data is handled. In some cases, we may need to keep certain records for business or legal reasons.
To protect privacy, we may ask for information needed to verify a request before responding. If a request is accepted, we will act within a reasonable period and explain any part of the request that cannot be fulfilled because of legal or operational limits.
Personal data is retained for the period needed to manage inquiries, complete projects, maintain business records, and meet legal, accounting, or dispute-handling requirements. When data is no longer required, it is deleted, anonymised, or otherwise handled in a secure manner.
When this policy is updated, the revised version will be posted on the website and will apply from the stated effective date. If a change materially affects how personal data is handled, we will take reasonable steps to draw attention to the update.
