Privacy Policy

This Privacy Policy explains how Petal House processes personal data in connection with its website, consultations, and floral services for weddings and events. It applies to inquiries, bookings, delivery and setup arrangements, and related communications.

Use of information
Handled under this policy framework
User rights
Requests and access options are described below
Support channel
Processing category

Purposes of Processing

We use personal data to respond to inquiries, arrange consultations, prepare quotes, confirm deposits and dates, coordinate design details, manage delivery and setup, process payments, maintain records, improve website performance, and meet legal or accounting obligations. Where needed, we also use data to communicate about changes to an order, venue access, or other operational details.

Processing is limited to purposes connected with the website and the floral services offered.
Third-party sharing

Service Providers and Partners

We may share personal data with payment processors, website and hosting providers, communication tools, delivery or logistics support, and other operational partners involved in handling inquiries or orders. These parties are expected to use the data only for the services they provide and to apply appropriate confidentiality and security measures.

Service providers receive only the information needed to perform their assigned functions.
01 · Collection

Data We Collect

We may process identification and contact details, event and delivery information, consultation notes, order specifications, payment-related records, and website usage data. For wedding and event projects, this may include dates, venue details, style preferences, guest counts, and access information needed to plan delivery and setup.

The data we collect depends on the inquiry, order, or consultation requested.
02 · Sources

Sources of Data

We receive data from website forms, messages, consultation discussions, payment and booking steps, and follow-up communications. We may also collect technical data automatically when the website is used, such as device and browser information, log data, and cookie-related identifiers.

Most information is provided directly by the person making the inquiry or order.
03 · Cookies

Cookies Used

We may use essential cookies to support site operation, preference cookies to remember choices, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their function. We do not use cookies to collect more information than is needed for the stated purpose.

Cookie use is limited to standard website functions and basic analytics where enabled.
04 · Controls

Cookie Controls

Users may manage cookies through their browser controls and, where available, site settings. Blocking some cookies may affect basic site functions, form handling, or preference storage. We do not rely on cookie settings to override legal obligations or essential operational needs.

Browser settings and similar tools can be used to limit non-essential cookies.
User Rights

Your Rights

Subject to applicable law, individuals may request access to their data, correction of inaccurate information, deletion in appropriate cases, restriction of certain processing, or objection where permitted. Some requests may be limited where we must keep information for legal, contractual, or operational reasons.

Available rights depend on the nature of the data and the legal basis for processing.
Requests

How to Make a Request

To exercise a privacy right, a person should provide enough information for us to identify the relevant record and assess the request. We may ask for additional details where needed to protect confidentiality and prevent unauthorized disclosure. If a request cannot be fully granted, we will explain the reason where required by law.

Requests are reviewed before action is taken to confirm identity and scope.
Data Retention

Retention of Data

Personal data is retained for the period necessary to manage inquiries, prepare quotations, complete orders, maintain business records, and meet legal, accounting, or dispute-handling obligations. When data is no longer needed, it is deleted, anonymized, or otherwise handled in a secure manner consistent with our retention practices.

We keep data only for as long as needed for the relevant purpose or legal requirement.
Policy Updates

Policy Updates

The updated version will apply from the date it is posted unless a different effective date is stated. Where a change is material, we will take reasonable steps to draw attention to it through the website or other appropriate communication channels.

We may revise this policy when our practices, services, or legal obligations change.

Contact Information

Privacy email
Privacy phone
+55 11 96221-8507
Mailing address
Avenida Brasil, 735, 25086-171, Duque de Caxias
Privacy contact

Use the contact details below for questions about this policy or the handling of personal data.