Back to the bouquet builder
BLODAU BLASUS · CUSTOMER INFORMATION

Privacy Notice

How we use the information you send when you enquire about a bouquet.

Updated 12 October 2026

Who is responsible

Ceri Ann Roscoe-Roberts, a sole trader trading as Blodau Blasus, is the controller responsible for your information. Contact blodaublasus@gmail.com about privacy or your rights, or write to Glyn Peris, Llanberis, LL55 4EL. Visits and collection are by prior arrangement only.

What we collect

We collect your name, email address, phone number, bouquet choices, preferred date, collection or delivery choice and delivery address where needed, plus any short gift message or topper wording you request. We also keep the ordinary order details and correspondence you provide when we discuss and confirm your bouquet. Our private Studio Desk records the enquiry reference, price, status, capacity reservation and the owner’s working notes.

The required contact and bouquet details allow us to respond to your enquiry. Without them, we may be unable to check the request or contact you. You are not required to buy anything by sending an enquiry.

Anti-abuse controls use protected identifiers derived from contact details and connection information to limit duplicate or repeated submissions. They are not used to advertise to you. Customer accounts, Google customer sign-in and online card payments are disabled.

Food information and personal health details

Product ingredient and allergen information describes the food. We provide the information for your confirmed choices before an order is agreed and again with the finished product. We are not currently accepting custom allergy-specific website requests. Do not send medical, allergy or intolerance details through the website, including information about a gift recipient.

Why we use your information

We use enquiry details to respond to your request, discuss availability and a quote, arrange fulfilment and deal with questions or problems. Our lawful basis is taking steps you request before a contract and, where an order is agreed, carrying out that contract.

Keeping the service secure, preventing duplicate or abusive submissions, handling ordinary business correspondence and dealing with complaints support our legitimate interests in running the business. Where the law requires us to keep a transaction record, our basis is that legal obligation. Orders are reviewed and confirmed personally; submitting a form does not automatically make a contract.

Newsletter signup is disabled and we are not collecting new subscriptions or sending newsletters. We do not add you to marketing because you enquire. If you previously asked for Studio news, you can withdraw that request by emailing us. We retain only a necessary record of any request not to be contacted so that it is respected.

Studio Desk and email

Enquiries are saved in our private Studio Desk before an email notification is attempted. Its order controls are restricted to the authorised owner by server-side checks. Web3Forms receives a limited notification containing the enquiry reference, your email address for replies, requested date or dates, collection or delivery choice, and a fixed instruction to open Studio Desk. Your name and full structured enquiry remain in Studio Desk. The notification does not include your phone number, gift wording, notes, dietary information, delivery address or instructions, private medical information, payment credentials or internal Studio notes. Failed or unconfirmed email delivery does not remove the saved enquiry.

Web3Forms temporarily delivers these alerts to our Gmail inbox; Studio Desk is our main enquiry and order record. Because the browser sends the notification, Web3Forms also receives connection information and may include the submitting IP address and source page in the alert. Our subsequent ordinary order correspondence is handled in Gmail.

If the website cannot save an enquiry, its fallback prepares a short contact request rather than copying your completed form into email. Nothing is sent by that fallback until you send it through your own email service. Please keep personal health information out of ordinary enquiry emails.

Services involved and international processing

Information may be processed outside the UK and EEA; we do not promise UK-only storage. The ChatGPT Sites processing terms provide contractual transfer safeguards, including standard contractual clauses with the UK Addendum for applicable UK transfers.

Web3Forms operates from India and uses infrastructure in several regions. Its data-processing agreement describes its subprocessors and standard contractual clauses with the UK Addendum where applicable. Its privacy information also explains connection information and spam filtering. Google’s data-transfer framework information describes its worldwide processing and safeguards, including adequacy arrangements, the UK Extension to the EU–US Data Privacy Framework and standard contractual clauses where applicable. Contact us if you want information about the safeguards relevant to your enquiry.

Gift recipients

If you arrange a gift, we may receive the recipient’s name and necessary delivery or contact details from you. We use those details in our legitimate interests in arranging and delivering the gift requested by you, not for marketing. Please provide only what is needed and let the recipient know about this notice where practical.

We provide the recipient with this privacy information at our first contact, before sharing their details with another recipient where required, and no later than one month after receiving them, unless an applicable exception allows otherwise. Please discuss any surprise-gift arrangements with us so we can plan this appropriately. Do not supply another person’s medical, allergy or intolerance details.

How long we keep information

The owner manages the ordinary records below and reviews them for deletion or genuine anonymisation. This is not an automatic deletion service for every Studio Desk or Gmail record.

For confirmed orders, the necessary record may include the reference, relevant dates, customer identity and contact information, agreed goods and price, essential fulfilment evidence, invoice/payment/refund details, agreed terms and essential correspondence. We remove unnecessary delivery instructions, informal notes, gift messages and duplicate copies when they are no longer needed; they do not automatically inherit the six-year period.

These periods do not authorise keeping private health details with accounting records. We may need to keep specific ordinary records longer where a legal requirement, active complaint or legal claim makes that necessary. Any exception is limited to relevant information, with a recorded reason and review date.

Deleting an active record does not necessarily erase every provider backup or security log immediately. The seven-day Web3Forms setting is not a promise that all provider backups and logs disappear within seven days. Browser storage has separate durations, explained in Cookie Information.

Your choices and rights

You can ask for access to your information, correction, deletion, restrictions on its use or a copy in a reusable form where those rights apply. You can object to use based on legitimate interests and withdraw any marketing permission. Some information may need to be kept to meet legal obligations or resolve a claim. We may ask for enough information to verify a request.

If you are concerned, contact us. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Browser storage

See Cookie Information for functional storage used by the website. The website does not collect or store payment-card numbers.

Questions? blodaublasus@gmail.com