Privacy Policy

This Privacy Policy explains how Bloom Haven processes personal data when you visit the website, make an inquiry, book a consultation, or arrange floral services for weddings and events.

Effective Date
As stated in this policy
Scope
All users of our services
Questions?
Contact for Privacy Matters

Contact for Privacy Matters

Privacy email
Privacy phone
+46 70 021 18 81
Postal address
Kvilletorget 15, 41703 Gothenburg
Privacy contact
01

Purposes of Processing

We use personal data to respond to inquiries, arrange consultations, prepare quotes, confirm dates, manage deposits and payments, coordinate delivery and setup, maintain customer records, handle accounting and legal obligations, and improve the operation and security of the website. We may also use limited technical data to diagnose problems and understand general site performance.

Processing is limited to what is needed for the website and floral project workflow.
02

Service Providers and Partners

We may share personal data with service providers that support website hosting, communications, payment handling, bookkeeping, and delivery or setup coordination. These recipients may process data only for the services they provide to us and under appropriate confidentiality and data protection terms.

Operational recipients are limited to what is necessary for the service arrangement.
03

Legal Disclosures

We may disclose personal data if required to comply with law, a court order, tax or accounting obligations, or a lawful request from public authorities. We may also disclose information where necessary to establish, exercise, or defend legal claims.

Legal disclosures are made only when a valid obligation or lawful request exists.
User Rights

Your Rights

You may have rights to know whether we process your data, obtain a copy of it, correct inaccurate information, request deletion in appropriate cases, and object to certain processing. Some requests may be limited where we must keep data for legal, contractual, or security reasons.

Available rights depend on the legal basis and the nature of the processing.
Requests

How to Make a Request

To exercise a privacy right, submit a clear request using the contact details in this policy and describe the data or processing concerned. We may ask for information needed to verify your identity and to locate the relevant records before responding.

Requests are handled after reasonable verification of identity and scope.
Data Retention

Retention of Personal Data

We keep personal data only for as long as needed for the relevant inquiry, booking, project, accounting, or legal purpose. When data is no longer required, it is deleted or anonymised in accordance with our retention practices and applicable law.

Retention is based on the purpose of the record and any legal duty to keep it.
Policy Updates

Policy Updates

We may update this policy from time to time. The revised version will apply from the date stated in the policy, and significant changes will be communicated in a reasonable manner when appropriate.

The policy may be revised to reflect legal, operational, or technical changes.
GDPR
Regulation

GDPR Overview

Bloom Haven acts as a controller for personal data processed through its website, inquiries, consultations, and floral project handling. Processing is based on applicable legal grounds such as consent, contract performance, legal obligation, and legitimate interests, depending on the context.

Regulation
For users in the European Economic Area, this policy is intended to describe processing under the GDPR where that law applies.
This section is relevant to individuals whose personal data is processed under the GDPR.
GDPR aware

Your GDPR Rights

Where the GDPR applies, you may have rights to access, rectify, erase, restrict, object to processing, and receive a copy of certain data in a portable format. If processing is based on consent, you may withdraw consent for future processing without affecting prior lawful processing.

The rights described below apply subject to the conditions and exceptions set out in data protection law.
Data category

Personal Data We Collect

We may process identification and contact details, event and order information, communication content, consultation notes, delivery and setup details, payment-related records, and technical data such as device and usage information. Where relevant, we also process preferences shared for floral design, colour palette, venue setup, and scheduling.

The categories collected depend on the inquiry, booking, or consultation requested.
Collection source

Sources of Personal Data

We receive data from website forms, phone or consultation appointments, direct messages, and payment or delivery interactions. We may also generate internal records from project management, order handling, and website use, including basic technical logs and correspondence history.

Most data is provided directly by the person making the inquiry or booking.
Cookie usage

Types of Cookies

We may use essential cookies for site operation, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their function and lifespan.

Cookie use is limited to operational and measurement purposes appropriate for a small service website.
User control

Cookie Controls

We use browser settings, cookie preferences, and similar controls to manage non-essential cookies. Essential cookies may remain necessary for basic site functions, while analytics or preference cookies can usually be limited or disabled through the browser or device settings.

Cookie choices can be adjusted through browser settings and, where offered, site controls.