Flowers are natural products; availability, appearance, and timing depend on season, handling, and logistics, so results may vary and photos remain indicative only.
Home Bouquets Compositions Services FAQ Contact

Privacy policy overview

This policy explains how personal data is handled when people browse the site, send enquiries, or order bouquets and compositions, with a focus on practical safeguards and clear choices.

Purpose and scope of this policy

This privacy policy explains how personal data is collected, used, stored, and shared when people visit this floral website, place orders, or contact the studio. The goal is simple: use only the information needed to provide reliable services, communicate clearly, and meet legal obligations, while avoiding unnecessary collection or opaque practices. The studio operates from Canada and takes into account Canadian privacy requirements alongside international standards such as the GDPR and similar frameworks where they apply.

By using this site or providing personal data, visitors acknowledge that information will be handled according to this policy and any related terms. The studio may update the policy from time to time to reflect changes in services, technology, or regulation. Updated versions are posted on this page with a revised date, and continued use of the site after changes signals awareness of the new wording. For decisions with significant impact, individuals are encouraged to read this policy carefully and raise any questions before submitting detailed information.

How personal data is collected

Personal data is collected when individuals submit enquiries, place orders, subscribe to updates, interact with the site, or communicate with the studio. Some information is provided directly, such as names and contact details, while other data is gathered automatically through technical logs and cookies. Only information that is relevant to providing floral services, managing relationships, and meeting legal obligations is requested or recorded.

Information provided directly

  • Contact details such as name, email address, phone number, and postal address provided when placing an order or making an enquiry.
  • Order-related information including selected products, delivery instructions, notes about recipients, and preferred timing windows.
  • Billing details required to process payments, such as invoicing information and payment confirmations from processors.
  • Preferences and feedback shared about style, palette, or service experience, used to refine future interactions and offerings.
  • Subscription choices for newsletters or updates, including consent records and opt-out actions where applicable.

Information collected automatically

  • Technical details about the device and browser used, such as type, version, and basic configuration settings collected for compatibility and security.
  • Log information including IP address, timestamps, pages visited, and referral sources, used to maintain site stability and investigate potential misuse.
  • Approximate location derived from IP address or similar signals, used in aggregate to understand service reach and plan delivery information.
  • Data about how pages and forms are used, such as clicks, scroll depth, or time on page, which helps refine navigation and content layout.
  • Cookie identifiers or similar technical markers that allow the site to remember sessions, preferences, or consent choices across visits.

How personal data is used

Personal data is used mainly to respond to enquiries, process and deliver floral orders, manage client relationships, and keep the website stable and secure. Additional uses include improving services through aggregated analysis, complying with legal duties, and, where permitted, sending measured updates about relevant offerings. Data is never treated as a commodity and is handled with a focus on necessity and proportionality.

  • Responding to enquiries and requests for information about bouquets, compositions, availability, or pricing in a clear and timely manner.
  • Processing, confirming, and delivering orders, including managing payment, arranging logistics, and coordinating with any involved venues or recipients.
  • Maintaining records needed for accounting, tax, and regulatory compliance, as well as for resolving disputes or questions about past services.
  • Improving the site and services by analysing aggregated usage patterns, such as which pages are visited most or where visitors encounter difficulties.
  • Protecting the security and integrity of the site and systems, including monitoring for suspicious activity, misuse, or attempts at unauthorised access.
  • Sending service messages about orders, important policy updates, or operational changes that affect how clients use the studio’s services.
  • With consent where required, providing occasional updates about services, seasonal availability, or studio news, with an option to opt out at any time.

Data protection commitment: This studio treats personal data as a practical responsibility, not a marketing asset. Information is collected only where needed to handle enquiries, manage orders, and keep the site secure. The team focuses on clear explanations, limited retention, and access controls that match the size and nature of the business. Data is never sold, and any sharing with partners is restricted to what is necessary for payments, delivery, or core technical services.

When personal data is shared

Personal data may be shared with carefully selected service providers that support payment processing, hosting, email delivery, analytics, or logistics. These partners are given only the information needed to perform their tasks and are expected to handle it securely and lawfully. Data may also be shared when required by law, in response to valid legal requests, or to protect the rights, safety, or property of the studio, clients, or others.

Use of service providers

To operate efficiently, the studio works with external providers for services such as hosting, payment processing, email delivery, analytics, and logistics. These providers process personal data only on the studio’s behalf and under instructions, subject to contractual safeguards and their own legal duties. They are selected with care and reviewed periodically to confirm that their practices remain compatible with this policy.

Processing for legal obligations

Some processing is required to meet legal and regulatory duties, such as maintaining tax records, responding to lawful information requests, or complying with consumer protection and privacy rules. In these cases, data is kept only as long as necessary and used strictly for compliance-related purposes.

Anonymous statistics

The studio may use aggregated, anonymized statistics to understand how visitors use the site, such as which pages are popular or which devices are most common. These summaries do not identify individuals and are used only to improve services and plan capacity.

Individual rights and choices

Depending on location and applicable law, individuals may have rights to access, correct, delete, restrict, or object to certain uses of their personal data, as well as to withdraw consent where processing is based on it. Some rights apply only in specific circumstances or to particular data types. The studio aims to honour valid requests promptly while explaining any limits that arise from legal, security, or operational requirements.

  • Individuals can request confirmation about whether their personal data is being processed and obtain a copy in a concise, transparent format.
  • If personal data is inaccurate or incomplete, individuals can request correction so that records stay reliable and up to date.
  • Individuals can request deletion of personal data where it is no longer needed, subject to legal, security, or record-keeping obligations that may require limited retention.
  • Where technically feasible and legally required, individuals can request a copy of certain personal data in a structured, commonly used format for transfer to another service.
  • Where processing is based on legitimate interests or used for direct marketing, individuals may object and ask that their data no longer be processed for those purposes.
  • In certain situations, individuals can request that processing of their personal data be restricted, for example while a concern about accuracy or lawful use is being reviewed.

To exercise any of these rights or raise concerns, individuals can contact the studio using the details in the contact section, explaining which right they wish to exercise and providing enough information to locate relevant records. The studio will respond within legally required timelines, may request reasonable verification, and will explain any situation where a request cannot be fully met due to legal or technical limits.

How personal data is protected

Personal data is protected through a mix of technical and organizational measures designed to reduce the risk of loss, misuse, or unauthorised access. While no system can be perfectly secure, the studio focuses on practical safeguards that fit the scale of operations and the sensitivity of data handled. Security practices are reviewed periodically and adjusted where needed to address evolving risks.

Technical safeguards

  • Using secure protocols such as HTTPS to protect data in transit between browsers and the site.
  • Applying access controls, authentication, and, where appropriate, encryption or pseudonymisation to limit exposure of stored data.
  • Maintaining backups and basic resilience measures to reduce the impact of hardware failures or other technical issues.
  • Monitoring systems for unusual activity and keeping core software components reasonably up to date with security patches.

Organizational safeguards

  • Limiting access to personal data to team members and service providers who need it for defined tasks, under appropriate confidentiality expectations.
  • Providing internal guidance so staff understand how to handle personal data securely and respond to potential incidents or requests.
  • Separating roles and responsibilities for finance, customer service, and technical operations to reduce unnecessary data exposure.
  • Reviewing key partners and processes periodically to ensure they remain aligned with privacy and security expectations.

How long data is kept

Personal data is kept only as long as needed for the purposes described in this policy, including fulfilling orders, handling enquiries, managing relationships, and meeting legal or accounting obligations. Once data is no longer required, it is either securely deleted, anonymized, or stored in a restricted archive where law demands longer retention. Exact periods depend on record type, such as orders, invoices, or communication logs.

  • If account-style features are offered, related data may include login details, saved addresses, order history, and communication preferences.
  • Notes about preferences, style choices, and responses to past projects that help tailor future proposals without making automated decisions.
  • Messages sent by email, phone, contact forms, or other channels, including the content of the communication and any related metadata such as time, date, and participants.
  • Payment-related information processed through external providers, including transaction identifiers and status, but not full card numbers stored by the studio.
  • Information about subscription status, communication preferences, and interactions with messages, used to manage respectful, low-volume updates.

Retention periods are reviewed periodically to align with legal requirements, operational needs, and reasonable expectations of clients and visitors.

International data transfers

Personal data may be processed or stored outside the country of residence when service providers operate in other jurisdictions. In such cases, the studio aims to choose partners that offer appropriate safeguards, such as contractual protections or recognised transfer mechanisms. Where local laws differ, reasonable steps are taken to ensure that privacy and security standards remain consistent with the approach described in this policy.

  • Data may be processed on servers located in different countries where hosting or cloud providers operate, subject to appropriate contractual protections.
  • When using tools based in other jurisdictions, the studio assesses whether recognised transfer mechanisms or equivalent safeguards are in place.
  • Where cross-border transfers create specific legal risks, the studio may adjust configurations, reduce data shared, or avoid certain tools entirely.
  • Individuals can contact the studio to request more information about international transfers relevant to their data, subject to security considerations.

Cookies and tracking technologies

This site uses cookies and similar technologies to keep pages functioning, remember preferences, and understand how visitors interact with content. Some cookies are essential for navigation and security, while others support analytics or limited marketing. Where required by law, non-essential cookies are used only with consent, which can be managed through on-site tools and browser settings. Details are provided in the separate cookie policy.

Cookies and similar tools

  • Essential cookies support core functions such as secure login, navigation, and form submission, and cannot be switched off without affecting service quality.
  • Performance cookies collect anonymized or aggregated information about how visitors use the site, helping to monitor stability and improve content and navigation.
  • Where enabled, personalization cookies remember choices such as preferred sections or display options to present content in a way that better fits visitor interests.
  • Functionality cookies remember preferences such as language, region, or saved form entries during a visit to make the site easier to use.

Visitors can adjust cookie settings through the site’s consent tools where available and through browser controls. Disabling certain cookies may affect functionality, including ordering and contact forms.

Changes to this privacy policy

The studio may update this privacy policy to reflect changes in services, technology, or applicable laws. When updates are made, the new version will be published on this page with an adjusted date. In cases where changes significantly alter how personal data is used, additional notices may be provided through email, banners, or other appropriate channels before the new practices take effect.

  • If this policy changes in a way that materially affects how personal data is used, a clear notice will be posted on the site, and, where appropriate, direct communication will be sent to affected clients.
  • Minor clarifications or structural edits that do not change core practices may be introduced without individual notice, but the updated date will always be adjusted.
  • Where law requires renewed consent for certain processing, updated choices will be requested through suitable channels before continuing those activities.
  • Visitors are encouraged to review this policy periodically, especially before placing new orders or sharing sensitive information, to stay informed about current practices.

Continuing to use the site or services after changes become effective indicates awareness of the updated policy, so visitors are encouraged to review it regularly.

How to contact the studio

Questions about this policy, specific data uses, or how to exercise rights can be sent using the contact details below. When writing, include enough information to identify the interaction, such as approximate dates, communication channel, and any order reference. The studio will review the request, may ask for reasonable verification, and then respond within timelines required by applicable law.

Elunariqo

240 Richmond Street West, Toronto, ON M5V 1V6 Canada

Phone: +1-%53-373-4491

Email: content@elunariqo.world