Privacy Policy

Flourish Florist ('we', 'us', 'our') is the data controller for personal data collected through flourishflorist.co.uk. This policy explains what we collect, why, and your rights under UK data protection law.

1. What we collect

Name, email address, phone number, delivery/billing address, and order details when you place an order, make an enquiry, or sign up to our newsletter. Payment card details are entered directly with our payment provider, Stripe, and are never seen or stored by us.

2. How we use it

To fulfil and deliver your order, respond to enquiries, and send order updates (which may include order-related SMS and email notifications). Where you've opted in, to send our newsletter. We rely on 'contract' as our legal basis for order-related processing, and 'consent' for marketing communications.

3. Who we share it with

We share the minimum necessary data with trusted service providers who help us run our business: Stripe (payments), Supabase (secure order and account storage), and providers used to send order and marketing messages by email and SMS. We do not sell your personal data.

4. How long we keep it

We keep order records for as long as required for accounting and tax purposes. If you've signed up to our newsletter, we keep your email address until you unsubscribe.

5. Your rights

Under UK GDPR you can ask to access, correct, or delete your personal data, object to or restrict our use of it, and withdraw consent to marketing at any time. To exercise any of these rights, email hello@flourishflorist.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.

6. Cookies

This site uses only essential cookies needed for it to function (such as remembering items in your cart). We'll update this section if we add analytics or marketing cookies in future, along with a way to manage your preferences.