Privacy policy
Last updated: 13 September 2026
1. Who we are
The controller of the personal data collected through bloomflora.ro is BLOOM EVENTS STUDIO S.R.L., CUI 54434726, Trade Registry no. J2026022945006, registered office Șoseaua Olteniței 40-44, Bl. 6A, Sc. 5, Et. 7, Ap. 177, camera 2, Sector 4, București. You can reach us atvladadecor2026@gmail.com.
The site presents the products and services of two studios, Bloom Event Studio and Floralab, working together. Whichever studio you order from, your data is processed by the controller above.
2. What we collect and why
- Product orders (the "Order" form): your name, one way to reach you (Instagram, WhatsApp, phone or e-mail), the options you picked and your message. We use them to contact you and settle the details of the order. Legal basis: steps at your request prior to a contract (art. 6(1)(b) GDPR).
- Decoration, greening and private-workshop requests (the forms on those pages): your name, contact and a description of the project. Same purpose and basis.
- Workshop bookings: your name, contact and number of seats, used to confirm your place and tell you about changes. Basis: performance of the contract (art. 6(1)(b)).
- Reviews: the name you choose, your text and any photos you upload. They are published on the site. Basis: your consent (art. 6(1)(a)), which you can withdraw at any time by asking us to delete the review.
- Site usage data (Google Analytics 4, Microsoft Clarity, Meta Pixel): pages visited, device type, anonymised interactions. Collected only if you accept analytics cookies in the banner shown on your first visit. Basis: your consent. Details in the Cookie policy.
We collect no payment data: payment is settled directly with you (cash on delivery or bank transfer).
3. Who we share data with
- Supabase (the site's database, hosted in the European Union, Frankfurt).
- Vercel (site hosting).
- Telegram: every order, request or booking is forwarded as a notification to the studio owners so they can answer quickly.
- Google (Google Analytics), Microsoft (Clarity) and Meta (Pixel, to measure our ads), only after consent.
- Google Maps, for the map on the contact page.
We do not sell or rent your data. We make no automated decisions with legal effects on you.
4. How long we keep it
- Orders, requests and bookings: 3 years from the last interaction (the general limitation period).
- Reviews: for as long as they are published; deleted on request.
- Analytics data: per the providers' settings, up to 14 months (GA4), 13 months (Clarity) and 3 months (Meta Pixel).
5. Your rights
You have the right to access, rectify, erase, restrict processing, port your data, object, and withdraw consent. Write to vladadecor2026@gmail.com; we answer within 30 days. If you are not satisfied you can complain to the Romanian supervisory authority, ANSPDCP,dataprotection.ro.
6. Children
The site is not aimed at people under 16 and we do not knowingly collect their data.
7. Changes
We may update this policy; the current version and its date are shown at the top of the page.