LMS Floral Designs respects the information you share with us. This policy explains what the website collects, why we use it, who may process it, and the choices that may be available to you.
Scope and the role of this website
This policy applies to the LMS Floral Designs website and its public floral inquiry form. The site is intended for people exploring wedding, sympathy, corporate, and other floral services in Greater Houston.
You can browse the public website and submit an inquiry without creating an account or signing in. Sign-in is used for restricted staff tools, not as a requirement for public visitors.
Information you choose to submit
When you submit an inquiry, we receive the information you enter so the studio can understand and plan for your request. Depending on the inquiry, this can include the type of inquiry; your name, email address, and optional phone number; event date, venue, and city or area; estimated guest count; floral needs; message or other details; referral source; arrangement type; company name; service or event type; whether the request is recurring; and whether you asked for help choosing an arrangement.
Some fields are optional or appear only for a selected service. Please avoid putting sensitive information in an inquiry unless it is genuinely needed for planning.
The website has no checkout or payment collection. After a non-spam inquiry is saved, the inquiry details are submitted to FormSubmit, a third-party email form-processing provider, so a notification can be routed to LMS Floral Designs at lstroyne@yahoo.com. FormSubmit may process the submitted contact and inquiry fields for that delivery. A provider or network failure leaves the inquiry saved for staff review with notification pending; the website does not promise that an email reached an inbox.
Optional inspiration photos
You may attach one inspiration image to help communicate a style, color palette, or arrangement. The upload accepts JPEG, PNG, or WebP images up to 5 MB.
The browser reads an approved image as base64 data for transport with the inquiry. The server validates the image, saves the decoded bytes in private Google Cloud Storage object storage, and records the object path with the inquiry in the database rather than putting the image bytes in the database.
The image is available only to restricted staff through the staff inquiry tools. The staff photo endpoint requires Clerk-authenticated staff access and marks its response no-store. The image bytes and private storage path are not sent to FormSubmit or exposed in the email; the notification only says that an image is available for admin review. The image is used for reviewing and planning the inquiry, not automatically for public marketing.
How inquiry information is used
We use submitted information to receive and understand your inquiry, consider design needs and possible availability, prepare or discuss a potential proposal, communicate about the request, operate and secure the website, prevent abuse, and maintain business records when needed.
The information submitted through this site is an inquiry, not a booking. A separate written proposal or agreement is required before services, pricing, availability, payments, or other project details are confirmed.
Hosting, database, storage, and staff access
The website and its inquiry functionality depend on hosting, database, private object-storage, and email form-processing infrastructure. Inquiry photos use private object storage, while inquiry details and the photo object path are stored in the application database. FormSubmit processes the non-spam inquiry fields sent for email notification. These providers may process information to host, store, secure, route, and maintain the service.
Restricted staff tools use Clerk for authentication. Access to inquiry records and photos is limited by the staff access controls used by the application, including an administrative role or an approved staff allowlist. Public visitors cannot access those tools merely by knowing an inquiry URL.
Web hosting and security systems may also process request metadata needed to deliver, troubleshoot, protect, and prevent abuse of the site, such as an IP address, browser or device information, requested page, and request time.
Analytics, tags, cookies, and browser controls
The site may use cookies or similar browser storage needed for operation, including Clerk authentication and session cookies for restricted staff tools and a sidebar preference cookie in those staff tools. The cookie-choice acknowledgement and its consent version are stored in localStorage when the browser permits it; that record is used to remember your choice and is not needed to browse the public site.
When the relevant deployment settings are configured, the site may offer Google Analytics 4, Google Tag Manager, and/or the Meta Pixel as optional measurement or advertising tags. Those tools can collect information such as page views, referral information, browser or device details, and interactions, and may set or read cookies or similar identifiers. The site does not load those configured optional tags until you choose to allow them in the cookie banner or Cookie settings. Choosing only necessary storage leaves required site, staff authentication, and session functionality available.
You can clear or block cookies and browser storage through browser settings and may be able to use browser privacy controls or extensions to limit analytics. If localStorage is blocked, the site can apply a choice for the current visit but cannot remember it after a reload, so the banner may appear again and optional tags remain off until a new opt-in. Blocking or deleting cookies can affect staff-tool functionality, and a browser control that blocks one collection method may not stop every form of technical or server-side data collection.
When information may be disclosed
Inquiry information may be accessed by LMS Floral Designs staff who need it for inquiry work and by service providers that host, store, secure, authenticate, or help operate the website, including FormSubmit for the non-spam inquiry fields used to route an email notification, as described above. Analytics providers may receive the data their configured tags collect.
We may also disclose information when reasonably necessary to comply with law or legal process, protect the rights and safety of people or the service, investigate abuse or fraud, enforce an agreement, or support a business transition. We do not make a promise that information will never be shared; disclosures depend on the purpose and the law that applies.
Retention
We retain inquiry records and any associated inspiration photo only for as long as reasonably needed for the inquiry, an ongoing client or business relationship, ordinary operations, security and abuse prevention, or legal, accounting, and dispute-related needs. Retention can also depend on the systems used by our hosting, database, storage, authentication, and other service providers.
When information is no longer needed for those purposes, we may delete it, de-identify it, or securely archive it where appropriate. We do not promise a single fixed retention period for every inquiry or photo.
Privacy requests
Depending on where you live and the law that applies, you may have rights to request access to, correction of, deletion of, or other action concerning personal information. To make a request, use the contact form and describe the request clearly.
We may ask for information needed to verify your identity, locate the inquiry, or clarify its scope. We will evaluate the request under applicable law and its exceptions; this policy does not promise that every request can be granted or a particular response deadline.
Children
This website is not directed to children under 13. People under 13 should not use the inquiry form or submit personal information through the site.
Security
We use reasonable administrative, technical, and physical safeguards appropriate to the information and the way the website is operated. No website, transmission, storage system, or service provider can be guaranteed secure, so please use care when deciding what to include in an inquiry.
External links
The website may link to external websites or services, including venues, vendors, or social platforms. Those sites are not controlled by LMS Floral Designs. Their own terms and privacy notices apply, and a link does not by itself mean that LMS Floral Designs endorses their practices.
Changes to this policy
We may update this policy when the website, services, or applicable requirements change. The revised version will be posted on this page, and your continued use of the website after an update means the revised notice will apply to future use to the extent permitted by law.