Privacy Policy

Last Updated: 11 November 2025

1. Introduction

Welcome to Flowers For You UK Ltd (which we’ll refer to as “we”, “us”, or “our”). We are committed to protecting and respecting your privacy.

This policy explains what personal data we collect from you, how we use it, who we share it with, and your rights regarding your data. This policy applies to your use of our website, https://flowersforyou.uk (the “Website”), and our products and services.

We comply with the UK General Data Protection Regulation (UK GDPR). For the purposes of this law, the “data controller” is Flowers For You UK Ltd.

2. Our Data Protection Contact

You can contact us with any questions about your personal data or this policy:

By Post: Flowers For You UK Ltd, 79 Kings Road, Middlesbrough, TS3 6EY
By Email: hello@flowersforyou.uk

3. What Personal Data We Collect

We may collect and process the following data about you:

• Order Information: When you place an order, we collect your name, email address, phone number, billing address, and any order notes you provide.
• Recipient Information: We collect the recipient’s name, delivery address, and phone number.
• Account Data: If you create an account, we store your username and a hashed (secured) password.
• Payment Data: Your payment is processed by our payment provider, Stripe. We do not store your full credit/debit card details on our servers.
• Contact Form Data: When you contact us using our “Contact Us” form, we collect your name, email address, and the content of your message.
• Review Data: If you leave a review for a product, we collect your name and the content of your review.
• Technical & Security Data: We automatically log technical information, including your IP address, browser type, and device, to help maintain the security of our website and for analytical purposes.
• Usage Data: We collect information about how you use our website, such as which pages you visit, using Google Analytics and internal website analytics.

4. How We Use Your Data (and Our Lawful Basis)

We must have a valid legal reason (a “lawful basis”) to use your data.

• To Fulfil Your Order (Basis: Contract):
  • To process your payment (via Stripe).
  • To prepare your floral arrangement (including any gift message).
  • To arrange delivery of your order to the recipient.
• To Communicate With You (Basis: Contract / Legitimate Interest):
  • To send you order confirmations and delivery updates.
  • To respond to your questions submitted via our contact form.
• To Improve Your Website Experience (Basis: Legitimate Interest):
  • To provide website features like address autocomplete and delivery distance calculation.
  • To show maps and directions.
• To Analyse and Improve Our Business (Basis: Legitimate Interest / Consent):
  • To understand our website traffic and product popularity (via Google Analytics).
  • To ask for product reviews after your purchase.
• To Secure Our Website (Basis: Legitimate Interest):
  • To protect our site from malicious activity by monitoring IP addresses and login attempts.
  • To protect our forms from spam submissions (via reCAPTCHA).
• To Meet Legal Obligations (Basis: Legal Obligation):
  • To retain records of completed and refunded sales for our financial and legal record-keeping (for 7 years).

5. Who We Share Your Data With (Third Parties)

We do not sell your personal data. We only share it with trusted third-party services that help us run our business:

• Payment Provider: Stripe, to process your payments securely. You can review their privacy policy here: stripe.com/gb/privacy.
• Transactional Email Provider: We use a third-party provider to send you essential emails like order confirmations and order updates.
• Analytics, Features & Spam Protection: Google, for website analytics (Google Analytics), to provide website features (Google Maps, Address Autocomplete), and for spam protection (reCAPTCHA).

6. International Data Transfers

We aim to store your data on servers within the United Kingdom or European Economic Area (EEA).

However, some of our third-party service providers (such as Google and Stripe) are global companies. When we transfer data to these providers, we ensure that appropriate legal safeguards are in place, such as Standard Contractual Clauses (SCCs) or adherence to the UK-US Data Privacy Framework, to protect your data to the same standard as in the UK.

7. Cookies

Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and analyse performance to identify what works and where improvements are needed.

How do we use cookies?

Like most online services, our website uses both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function properly and do not collect any personally identifiable data.

The third-party cookies used on our website primarily help us understand how the website performs, track how you interact with it, keep our services secure, and enhance your overall user experience while improving the speed of your future interactions with our website.

Manage cookie preferences

You can modify your cookie settings anytime by clicking the ‘Consent Preferences‘ button on our website. This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately.

Additionally, different browsers offer various methods to block and delete cookies used by websites. You can adjust your browser settings to block or delete cookies. Below are links to support documents on how to manage and delete cookies in major web browsers.

• Chrome: https://support.google.com/accounts/answer/32050
• Safari: https://support.apple.com/en-gb/105082
• Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Internet Explorer: https://support.microsoft.com/en-gb/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

If you are using a different web browser, please refer to its official support documentation.

8. How Long We Keep Your Data

We only keep your personal data for as long as is necessary for the purpose we collected it for.

• Completed and Refunded Orders: We retain these records for 7 years for our legal and accounting obligations.
• Cancelled, Failed, or Pending Orders: We retain these records for 1 year to assist with customer queries.
• Inactive Accounts: We may remove customer accounts after 3 years of inactivity.
• Contact Form Entries: We may remove these after 1 year.

9. Your Data Protection Rights

Under UK GDPR, you have rights over your personal data:

• The right to be informed: This Privacy Policy is to inform you.
• The right of access: You can ask for a copy of the data we hold about you.
• The right to rectification: You can ask us to correct any data you believe is inaccurate.
• The right to erasure: You can ask us to delete your data in certain circumstances.
• The right to restrict processing: You can ask us to stop processing your data.
• The right to data portability: You can ask for your data in a machine-readable format.
• The right to object: You can object to us processing your data.

To exercise any of these rights, please contact us at hello@flowersforyou.uk.

10. How to Complain

If you are unhappy with how we have used your data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK’s data protection regulator. You can find their details at: ico.org.uk.

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page, and the “Last Updated” date will be revised.