This privacy notice explains how Petal Craft handles personal data when you use noveldayrail.help, contact us, or place a flower order. It is written for our florist workshop services in France and should be read together with the way you choose to interact with us.
Data handling overview
This section outlines the categories of personal information we may process, where that information comes from, the types of cookies used on the site, and the controls available to you.
Depending on how you use the site, we may process your name, email address, phone number if you provide it, your message, and your service preferences. We also process limited technical data such as server request metadata and browser or device information.
We receive personal data when you submit a contact form, place or discuss an order, or communicate with us by phone or in person. Technical data is generated when you visit the website and is used to keep the site working and secure.
The site uses essential cookies needed for basic operation and cookies that store your privacy preferences. We do not confirm the use of analytics or marketing cookies on this website.
We use cookies only for essential site operation and to remember privacy preferences. You can manage cookies through your browser settings, and you can clear stored cookies at any time. If you block essential cookies, some parts of the site may not work properly.
Data processing overview
This section outlines the primary purposes for processing personal data, the categories of recipients involved in service delivery, and the legal context that may govern disclosure.
We use personal data to answer enquiries, confirm bouquet preferences, manage availability, arrange payment, organise studio pickup or local delivery, maintain website security, and keep the site functioning properly. We may also use data to meet legal, accounting, or record-keeping duties.
We may share limited data with service providers that help us operate the website, process enquiries, support technical delivery, or manage contact form responses. These recipients are expected to use the data only for the services they provide to us and to protect it appropriately.
We may disclose personal data when required by law, to respond to lawful requests from public authorities, or to protect our rights, customers, staff, or website security. We do not sell personal data.
You may ask us to confirm whether we hold your personal data and to correct information that is incomplete or inaccurate. In some cases, you may also ask us to delete data, limit its use, or object to processing that is based on legitimate interests.
To make a rights request, use one of the contact methods listed in this policy and tell us what you want us to do. We may ask for enough information to verify your identity and to locate the relevant records. If we cannot comply fully, we will explain the reason where the law requires it.
We retain enquiry and order records for the time needed to manage the request, follow up on the service, meet accounting or legal duties, and resolve disputes. When data is no longer needed, we delete it or make it anonymous where that is appropriate.
If we make material changes, we will update this page and may use reasonable means to draw attention to the update when appropriate. The revised notice applies from the date shown on the page.
Where the GDPR applies, we process personal data on a lawful basis such as handling your enquiry, performing a service you request, meeting legal obligations, or relying on our legitimate interests in running and securing the website and business.
Where the GDPR applies, you may have the right to access your data, correct inaccurate information, ask for deletion, object to certain processing, request restriction, and ask for portability where applicable. You may also withdraw consent where processing is based on consent.
