Privacy Policy

Belle Bouquets LLC ("Belle Bouquets," "we," "us," or "our") operates belleoftheballbouquets.com and provides custom wedding and event floral design services. This Privacy Policy explains what personal information we collect, how we use it, when we share it, and how you can contact us about your privacy choices.

This policy applies to this website, quote requests, consultation communications, proposals, invoices, payments, delivery coordination, and related customer service.

When you request a quote, use live chat, contact us, approve a proposal, or place an order, we may collect your name, email address, phone number, event date, event type, venue or delivery location, floral preferences, budget, guest count, chat or message details, proposal details, billing details, and payment status.

We collect only the information reasonably needed to respond to your request, prepare a quotation, confirm and fulfill the order, provide support, and keep required business records.

Approved order payments may be processed through Stripe-hosted payment pages. We may receive limited transaction details such as payment status, amount, date, customer name, contact details, billing information, receipt information, and dispute or refund status.

Card details are entered with Stripe. We do not receive or store full payment card numbers, card security codes, or full bank account numbers on our own website servers.

Like most websites, our site may collect basic technical information such as IP address, browser type, device type, pages viewed, referring page, approximate location derived from IP address, and timestamps. This information helps operate the site, protect against abuse, troubleshoot errors, and understand site performance.

This is a marketing and inquiry website and does not require customer accounts. When the optional tawk.to live-chat widget is active, tawk.to may process technical, page, session, and approximate-location information to connect the visitor with the chat service, maintain the conversation, monitor active chat sessions, and protect or troubleshoot the service. Termly controls the widget according to the applicable consent choice.

For inquiry notifications and customer confirmations, we record limited Resend delivery events such as the provider message ID, delivery outcome, event time, affected inquiry reference, message stage, and any bounded failure reason. We use these records to identify delivery problems, avoid duplicate processing, and support follow-up.

This website uses Termly as its consent management platform. Termly presents region-aware notices, stores browser-level choices, and uses AutoBlocker to prevent non-essential technologies from loading before the applicable choice permits them.

You can reopen Termly's preference center at any time through Cookie Settings in the footer. Available categories and choices may vary by region and by the technologies actually used on the site.

This site does not currently use targeted advertising or sell personal information. If those practices change, we will update our disclosures and configure the applicable opt-out controls before enabling them.

We use personal information for the following purposes:

• Responding to inquiries and checking availability for event dates.
• Preparing consultations, proposals, invoices, order records, and design notes.
• Processing approved order payments, refunds, disputes, and receipts.
• Delivering and setting up florals, coordinating with venues or event contacts, and providing customer support.
• Answering live-chat questions, maintaining the requested conversation, and following up on an inquiry when the visitor provides contact details.
• Maintaining tax, accounting, legal, fraud-prevention, and security records.
• Improving our website, services, workflows, and customer communications.
• Sending service-related messages and, only where allowed, optional marketing communications that you can opt out of.

Where privacy laws require a legal basis, we process information because it is necessary to take steps at your request before entering into a contract, perform an approved proposal or order, comply with legal obligations, protect our legitimate business interests, prevent fraud, secure the website, or because you gave consent.

You may withdraw consent for optional communications or non-essential cookies at any time, without affecting prior lawful processing.

We do not sell personal information. We share information only when needed for the purposes described in this policy, including with:

• Consent-management providers, including Termly, to present privacy choices, apply cookie controls, and maintain browser-level consent records.
• Live-chat and customer-support providers, including tawk.to, to deliver chat, maintain conversations, and provide associated visitor-session and service-security functions when the widget is active.
• Map and business-profile providers, including Google Maps, to display our approved business listing and directions when you permit the optional embedded map or choose the external Google Business Profile link.
• Payment, fraud-prevention, invoicing, receipt, and dispute-service providers.
• Website hosting, email, form, scheduling, storage, security, analytics, and customer-support providers.
• Venue contacts, delivery contacts, subcontractors, or event professionals when needed to fulfill a confirmed order.
• Tax, accounting, insurance, legal, banking, and professional advisors.
• Government, law-enforcement, or regulatory authorities when required by law or to protect rights, safety, and security.
• A successor organization if Belle Bouquets is involved in a merger, acquisition, restructuring, or sale of business assets.

We set retention by the kind of record and review records at least annually. We may keep a record longer when reasonably necessary for an active dispute, legal hold, fraud or security investigation, or another legal requirement. When a record is no longer needed, we delete or de-identify it where practical.

• Unconverted inquiries and consultation messages: until the inquiry is resolved and for a limited follow-up period based on the event date, last substantive contact, and whether the person asked us to stop contacting them.
• Approved proposals, design notes, delivery details, and customer-service communications: through fulfillment and for the period reasonably needed to answer post-event questions, document the agreed work, or address a claim.
• Invoices, payment-status, refund, dispute, tax, and accounting records: for the period required by tax, accounting, card-network, limitation-period, and other applicable recordkeeping rules.
• Website security and technical logs: for the shortest period reasonably needed for security, abuse prevention, troubleshooting, and provider operations, subject to the hosting or security provider's configured retention.
• Inquiry email delivery events: for the period reasonably needed to reconcile notification delivery, investigate failures, support the related inquiry, and document the communication record.
• tawk.to chat messages and tickets: until the inquiry and any limited follow-up are resolved, then deleted from the provider dashboard when no longer reasonably needed, except when a legal obligation, dispute, fraud or security investigation, or documented business-record need requires longer retention.
• Termly consent records: while needed to apply and demonstrate the browser-level choice and for any additional period required to document compliance.
• Verified privacy-request and incident records: for the period reasonably needed to show the request or incident was handled and to meet applicable legal obligations.

When you make or change a choice, Termly may assign a random anonymous visitor ID and store the selected preferences, applicable region, policy or configuration version, and timestamp. The choice is associated with the browser rather than with a named customer account.

Termly maintains these consent records to apply and demonstrate browser-level choices. Belle Bouquets does not use the Termly visitor ID as an advertising identifier.

Depending on where you live, you may have the right to request access to personal information, correction, deletion, portability, restriction of processing, objection to certain processing, withdrawal of consent, or information about how your data is shared.

To make a request, contact us at hello@belleoftheballbouquets.com, call +1 (636) 324-1107, or write to our operational and customer-service address at 10227 Whitlock Dr, Overland, MO 63114, USA. We verify requests using information reasonably related to the request and do not ask for more information than needed. An authorized agent may submit a request where applicable law permits it.

Where the GDPR portability right applies, after verification we provide eligible information supplied by you and processed by automated means on consent or contract in a structured, commonly used, machine-readable format, ordinarily CSV or JSON, and can transmit it to another controller where technically feasible. We ordinarily respond to GDPR requests within one month; if a lawful extension is needed, we explain it within the first month.

For verifiable California requests, we aim to confirm receipt within 10 business days and respond within 45 calendar days. If reasonably necessary, we may extend once by an additional 45 calendar days and will explain the extension within the first 45 days. Other requests are handled within the period required by the law that applies.

For California and other US state privacy laws, the categories of personal information we may collect include identifiers, customer records, commercial information, internet or network activity, approximate location derived from IP address, and inferences you choose to provide through event preferences.

Eligible residents may request to know or access, correct, or delete personal information, and may use an authorized agent. We will not deny services, charge a different price, provide a different level or quality of service, or otherwise retaliate because a person exercised a privacy right, except as a law expressly permits.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that trigger the California right to limit its use or disclosure. Please do not submit sensitive information in a free-text message unless we specifically request it. If our practices change in a way that triggers an opt-out or limit right, we will provide the required clear control before that change applies.

Belle Bouquets is based in the United States. If you access the site from outside the United States, your information may be processed in the United States or other countries where our service providers operate.

Our current providers include Cloudflare for hosting, storage, and security; Termly for consent management; tawk.to for optional live chat; Google Maps for the optional business-profile map; Resend and Migadu for email delivery and routing; and Stripe for hosted payments and transaction support. tawk.to states that its service data is stored in the United States and delivered through a global content delivery network.

Where a cross-border transfer is subject to GDPR or UK GDPR, we use an available lawful mechanism appropriate to the destination and provider. This may include an adequacy decision, a provider's Data Privacy Framework participation, the European Commission's Standard Contractual Clauses, the UK Addendum, or another legally recognized safeguard. Cloudflare, Google, Resend, Stripe, Termly, and tawk.to publish data-processing terms or transfer safeguards that we review for the services we use. You may contact us for more information about the applicable safeguard, subject to lawful confidentiality limits.

We maintain an internal data-processing register describing our processing activities, purposes, data and data-subject categories, recipients, transfer safeguards, retention criteria, and security measures. We review it when a service or data practice changes and as part of a periodic compliance review.

We also maintain procedures for verified privacy requests and potential personal-data incidents, including escalation and applicable regulatory or individual notification deadlines.

Our website and services are intended for adults planning events. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child provided personal information to us, contact us and we will take appropriate steps to delete it.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is perfectly secure, but we work to limit access, use reputable service providers, and avoid storing full payment card details on our own systems.

For more detail, see our Trust & Security page.

Questions about this Privacy Policy can be sent to hello@belleoftheballbouquets.com, by phone at +1 (636) 324-1107, or by mail to our operational and customer-service address at 10227 Whitlock Dr, Overland, MO 63114, USA.