Privacy Policy

This Privacy Policy explains how Bloom Craft processes personal data when you visit the website, submit an inquiry, request a consultation, or place an order for floral services.

Effective Date
As stated in this policy
Scope
All users of our services
Questions?

Contact Information

Privacy email
Privacy phone
+90 501 008 67 14
Postal address
Çiftehavuzlar, 2. Çeyiz Sokak 2, 16140, Bursa, Bursa
Privacy contact

Data handling overview

How information is collected and how cookies are managed

01 · Collection

Data We Collect

We may collect identification and contact details, event and order information, consultation notes, delivery and setup details, payment-related records, and technical data such as device, browser, and usage information. Where relevant, we also process preferences shared for bouquet design, color palette selection, and event arrangements.

The data we collect depends on the inquiry, consultation, or order process.
02 · Sources

Sources of Data

We receive personal data from website forms, email or other direct communications, consultation requests, order confirmations, payment and scheduling steps, and information entered during service planning. We may also generate limited technical data through the operation of the website and related systems.

Most information is provided directly by the user during normal service interactions.
03 · Cookies

Cookie Types

Cookies may include strictly necessary cookies that support site security and form use, preference cookies that remember settings, and analytics cookies that help us understand site performance and visitor activity. Cookie duration may be session-based or persistent, depending on the function.

We use a limited set of cookies for operation, preferences, and analytics.
04 · Controls

Cookie Controls

You may manage cookies through your browser controls and, where available, through site settings. Disabling some cookies may affect basic site functions, form handling, or preference storage.

Browser settings can be used to limit or remove non-essential cookies.
User Rights

Your Rights

You may request access to your personal data, correction of inaccurate information, deletion where permitted, restriction of certain processing, or objection to processing in limited cases. You may also ask for clarification about how your data is used.

Available rights depend on the applicable law and the nature of the request.
Requests

How to Make a Request

To exercise a privacy right, submit a clear request using the contact details in this policy and include enough information for us to verify your identity and locate the relevant records. We may ask for additional details before responding.

Requests are handled after we confirm identity and review any legal exceptions.
Data Retention

Data Retention

Personal data is retained for the period needed to manage inquiries, consultations, orders, payments, delivery coordination, and related records. When the retention period ends, data is deleted, anonymized, or archived where required by law or for legitimate business recordkeeping.

We keep data only for as long as needed for the stated purpose or legal recordkeeping.
Policy Updates

Policy Changes

If we make material changes, we will update the policy on the website and may provide additional notice where appropriate. The revised version applies from the stated effective date.

We review this policy when our practices or legal obligations change.
01 · Purpose

How We Use Data

Personal data is used to respond to inquiries, arrange consultations, prepare quotes, confirm dates, manage deposits and payments, coordinate preparation and on-site setup, communicate about orders, maintain business records, improve website performance, and meet legal obligations.

We limit processing to operational, contractual, and compliance purposes.
02 · Sharing

Service Providers and Partners

We may share personal data with payment processors, website hosting and technical support providers, communication tools, and delivery or setup partners involved in fulfilling an order or consultation. These parties may process data only for the services they provide to us and under appropriate confidentiality obligations.

Service providers receive only the information needed to perform their tasks.