This notice explains how Bloom Haven processes personal data in connection with its florist workshop website and local flower order services. It follows the data lifecycle from collection through use, sharing, retention, and deletion, and is intended for users in South Africa and other visitors who interact with the site.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
We may process name, email address, phone number if provided, inquiry message, and service preferences from contact and order interactions. We also process technical data such as server request metadata and browser and device information to keep the site operating securely and to support delivery of the service.
Most data comes directly from you when you use the contact form, place a bouquet request, communicate by phone, or provide details in store. Technical data is generated automatically when the site is accessed, including information needed for security, troubleshooting, and basic technical delivery.
The site uses essential cookies for operation and cookies that store privacy preferences. We do not confirm the use of analytics cookies or marketing cookies, and tracking is not enabled on the site based on the information provided.
We use essential cookies for core site functions and cookies that remember privacy preferences. Browser settings may be used to block or remove cookies, but some site features may not function properly if essential cookies are disabled.
We use personal data to respond to enquiries, confirm bouquet requests, discuss budget and colour preferences, check availability, arrange payment, and coordinate studio pickup or local delivery. Data is also used to operate the website, maintain security, and support technical delivery. Where needed, we may use information to keep records of completed interactions and to manage follow-up communication about the same request.
Personal data may be shared with service providers that support contact handling, technical hosting, security, and order-related administration. Where a third party processes data on our behalf, it is expected to use the information only for the assigned function and to keep it confidential. We do not state that international delivery or unrelated marketing partners are involved.
We may disclose personal data when required to comply with law, court process, or a lawful request from a public authority. Disclosure may also occur where it is necessary to protect our rights, prevent fraud or misuse, or respond to a security incident. We do not share personal data for unrelated purposes beyond those operational or legal needs.
Depending on applicable law, you may ask to access, correct, delete, or object to certain processing of your personal data, and you may also raise concerns about how your information is handled. We assess each request against the legal basis for processing, the need to keep records, and any obligations that require us to retain information.
To make a rights request, provide enough information for us to locate the relevant record and understand the change you want. We may ask for additional details where needed to protect privacy and prevent unauthorised disclosure. If a request cannot be fully actioned, we will explain the reason in general terms and, where possible, describe the available alternative.
We retain personal data for the period needed to handle enquiries, confirm orders, complete delivery or pickup arrangements, maintain security, meet recordkeeping duties, and resolve disputes. When data is no longer required for those purposes, it is deleted, anonymised, or otherwise removed from active use according to our internal lifecycle practices.
If this policy is updated, the revised version will apply from the stated effective date. Material changes may be highlighted through the site or through direct communication where appropriate, so that users can review the updated data practices before continuing to use the service.
Use the contact details below for questions about this notice, data handling, or a rights request.
