Privacy policy

1. Data controller

Euforstern Studio
Korte Jansstraat 24, 3512 GD Utrecht, Netherlands
KvK: 82345671
Email: [email protected]
Phone: +31 30 234 56 78

2. Personal data we process

• Contact details: name, email, phone, delivery address
• Order information: event dates, venue, bouquet preferences, payment records
• Communication: messages sent via forms or email
• Technical data: IP address, browser type via cookies (see Cookie policy)
• Wedding planning notes and photographs you share for reference

3. Legal basis (GDPR Art. 6)

• Contract: Processing needed to fulfil floral orders and subscriptions.
• Legitimate interest: Customer service, fraud prevention and service improvement.
• Consent: Marketing emails and non-essential analytics cookies.
• Legal obligation: Tax and accounting records under Dutch law.

4. Purposes

Data is used to process orders, arrange delivery, issue invoices, respond to enquiries, manage wedding timelines and maintain website security.

5. Retention

• Enquiries without order: 18 months
• Order and invoice data: 7 years ( statutory accounting period )
• Wedding reference files: 3 years after event unless deletion is requested earlier
• Analytics cookies: up to 14 months

6. Processors and sharing

We use hosting, email and payment providers under data processing agreements. We do not sell personal data. Delivery partners receive name and address only for fulfilment.

7. International transfers

Primary systems are within the EEA. Transfers outside the EEA use Standard Contractual Clauses or adequacy decisions where applicable.

8. Security

TLS encryption, access controls on order systems, staff training on data handling and regular review of processor compliance.

9. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing. Contact [email protected]. We respond within one month.

10. Complaints

You may contact the Autoriteit Persoonsgegevens (AP): autoriteitpersoonsgegevens.nl.