PRIVACY POLICY

Blooms Floristry is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services.

​

This policy is written in accordance with the UK GDPR and the Data Protection Act 2018.

​

1. Who we are (Data Control)

Kate Keenan trading as Blooms Floristry is the data controller responsible for your personal data.

Business name: Blooms Floristry
Email: info@bloomsfloristry.com
Phone: 07872 615140

​

2. Data We Collect

We may collect and process the following personal data:

​

• Name

• Email address

• Phone number

• Wedding details (e.g. date, venue, preferences)

• Home address for payment validation

• Delivery address for flower orders

• Information provided via contact forms, emails, or consultations

• Guest list details

• Technical data (e.g. IP address, browser type, website usage via cookies)

​

We do not intentionally collect special category data (such as health data). However, if you provide information such as dietary requirements, this will only be processed where necessary and handled securely.

​

3. Data Collected Via Social Media

We may collect personal data when you contact us via social media platforms, including Meta. This may include your name, username, contact details, and any information you provide in messages or enquiries. Please note that your use of Instagram, Facebook and WhatsApp is also subject to the privacy policy of Meta Platforms: https://www.facebook.com/privacy/policy

​

How We Use Your Data - We use your personal data to:

• Respond to enquiries

• Provide information about our services

• Arrange consultations or bookings

• Provide and manage wedding planning services

• Communicate with you regarding your booking

• Coordinate with suppliers involved in your event

• Improve our website and services

• Comply with legal and regulatory obligations

​

​

4. Lawful Basis For Processing

We process your data under the following lawful bases:

• Consent – when you submit an enquiry or agree to receive communications

• Contract – where processing is necessary to provide wedding planning services

• Legal obligation – to comply with tax, accounting, or legal requirements

• Legitimate interests – to operate and improve our business, respond to enquiries, and maintain client relationships, provided your rights do not override these interests

​

​

5. Data Sharing

We do not sell your personal data.

​

We may share your data with:

• Wedding suppliers (e.g. venues, caterers, photographers) where necessary to deliver your event

• Service providers (e.g. email providers, website hosting services, Dubsado, Google Analytics)

• Professional advisers (e.g. accountants) where required

• Legal or regulatory authorities where required by law

​

All third parties are required to respect the security of your personal data.

​

6. International Transfers

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or equivalent protections.

​

7. Data Retention

We retain personal data only as long as necessary:

• Client data: up to 6 years after completion of services (for legal and tax purposes)

• Marketing data: until you withdraw consent

​

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Secure systems and password protection

• Restricted access to personal data

• Secure communication methods

​

9. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Object to processing

• Restrict processing

• Withdraw consent at any time

• Request transfer of your data to another provider (data portability)

​

To exercise any of these rights, please contact us using the details above. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://www.ico.org.uk

​

10. Failure To Provide Data

If you do not provide certain personal data, we may be unable to provide our services or respond to your enquiry.

​

11. Updates To This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.