Privacy Policy

Blooming Palette Creations is a luxury event design and planning studio based in Nairobi, Kenya. In this policy, "we", "us" and "our" refer to Blooming Palette Creations, and "you" refers to anyone who visits this website or contacts us through it.

For anything in this policy, or to exercise any of the rights described below, contact us at bloomingpalettecreations@gmail.com or on +254 719 571 411.

We do not require you to create an account, and we do not collect anything about you unless you choose to send it. The information we hold comes from our enquiry form at /contact, which asks for:

• Your details - full name, email address and phone number, plus a WhatsApp number if you choose to give one.
• Your event - event type, approximate date, approximate guest count and venue if known.
• Your brief - budget range, theme or aesthetic, and any notes or inspiration you write for us.
• How you found us - an optional answer such as Instagram, Google or word of mouth.

Only your name, email, phone, event type, date, guest count and budget range are required. Every other field is optional and the form works without them.

If you contact us by phone, WhatsApp or email instead, we hold whatever you choose to tell us in that conversation.

We use your information for these purposes and no others:

• To respond to your enquiry and answer your questions.
• To prepare a quote, proposal or package recommendation for your event.
• To plan, design and deliver your event if you go on to book with us.
• To keep records of work we have done and payments we have received.

We do not use your details for automated decision-making or profiling, and we do not add you to a marketing list from an enquiry alone.

When you send an enquiry, we process your information because it is necessary to take steps at your request before entering into a contract, and because you have consented by choosing to send it. Once you book, we process it to perform our contract with you. Records we keep for tax and accounting purposes are held to comply with a legal obligation.

We never sell your personal data, and we do not share it for advertising. We share it only where it is necessary to do the job:

• Our email provider. Enquiries submitted through this website are delivered to our business mailbox using Resend, a transactional email service. Your enquiry passes through their systems in order to reach us.
• Our website host. This site is hosted on Vercel, which processes standard server request data as described below.
• Event suppliers. If you book with us, we share only what a given supplier needs -- for example a venue needs your event date and guest count, a florist needs your palette. We do not hand over your full brief.
• Where the law requires it. If we are legally obliged to disclose information, we will.

This website does not use advertising or analytics cookies, and runs no third-party tracking or advertising scripts. We do not use Google Analytics, advertising pixels or cross-site trackers, so there is no cookie banner to dismiss.

Your browser may store a small amount of data locally to make the site work correctly. Our hosting provider also keeps standard server logs -- including IP address, browser type and pages requested -- which are used for security and to keep the site running, not to build a profile of you.

If we introduce analytics in future, we will update this page before doing so and will favour a privacy-preserving, cookieless option.

Enquiries that do not lead to a booking are kept for up to two years, so we can pick up the conversation if you come back to us, and then deleted. Records relating to events we have delivered are kept for seven years to meet Kenyan tax and accounting requirements. You can ask us to delete your information sooner -- see your rights below.

This website is served entirely over HTTPS. Enquiries are transmitted over encrypted connections and delivered to a mailbox protected by strong authentication. Our internal tools are restricted to authorised staff and require a password and a one-time code sent by email.

No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of what we hold, and we keep the amount we hold deliberately small.

Under the Data Protection Act, 2019 of Kenya, you have the right to:

• Be informed of how your personal data is being used - which is what this page is for.
• Access the personal data we hold about you.
• Ask us to correct anything inaccurate or incomplete.
• Ask us to delete your personal data where we have no continuing obligation to keep it.
• Object to our processing of your data, or ask us to restrict it.
• Withdraw your consent at any time, without affecting anything done before you withdrew it.

To exercise any of these, email bloomingpalettecreations@gmail.com. We will respond as promptly as we can and in any case within the period the law allows. There is no charge for a reasonable request.

If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at odpc.go.ke. We would appreciate the chance to put things right first.

We often photograph the events we design, and may wish to feature them in our portfolio, on social media or in our marketing. If you would prefer your event not to be used this way, tell us -- before, during or after the event -- and we will respect that without any effect on the service you receive. Where an image identifies you or your guests, we will ask before publishing it. See our Terms of Service for more.

This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. We do design events for children, but in those cases we deal with the parent or guardian who books with us. If you believe a child has sent us personal data, contact us and we will delete it.

Our site links out to third parties such as WhatsApp, Facebook and TikTok. We are not responsible for their privacy practices, and this policy does not cover them. Read their policies before sharing anything with them.

We may update this policy as our services or the law change. The date at the top of this page always reflects the current version. Material changes will be highlighted here, and where we hold your contact details and the change significantly affects you, we will tell you directly.