Greensleeves Florist (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or place an order with us.

1. Information We Collect

We collect information you provide directly to us, including:

Contact information: Your name, email address, and phone number when you create an account, place an order, or subscribe to our newsletter.
Billing and delivery information:Your billing address and the recipient's name, address, and phone number for delivery purposes.
Order details: Products ordered, special instructions, card messages, and order history.
Payment information: Credit or debit card details are transmitted securely to our payment processor (Stripe) and are never stored on our servers. We only retain the last four digits of your card number for reference.
Communications: Records of any correspondence you send us, including support enquiries, feedback, and reviews.

We also collect information automatically when you use our website:

Log data: IP address, browser type, pages visited, time spent on pages, and referring URLs.
Cookies and tracking technologies: See Section 4 for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

Order fulfilment: Processing your orders, arranging delivery, and sending order confirmations and delivery notifications.
Customer service: Responding to enquiries, resolving disputes, and providing support.
Communications: Sending you transactional emails and, with your consent, marketing emails including seasonal promotions, new products, and delivery updates. You may unsubscribe at any time.
Personalisation: Remembering your preferences, saved delivery addresses, and order history to make future orders faster and easier.
Website improvement: Analysing usage patterns to improve our website, product offerings, and customer experience.
Legal compliance: Meeting our obligations under applicable law, preventing fraud, and enforcing our Terms of Service.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following circumstances:

Service providers: We share data with trusted third-party vendors who help us operate our business, including our payment processor (Stripe), email service provider, SMS notification service, and hosting platform. These providers are contractually obligated to protect your information and use it only as directed by us.
Delivery partners:When arranging delivery, the recipient's name, address, and phone number are shared with our delivery personnel.
Legal requirements: We may disclose your information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring party, subject to the same privacy protections.

4. Cookies and Analytics

We use cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand how visitors use our site.

Essential cookies: Required for the website to function correctly, including maintaining your shopping cart and login session.
Analytics cookies: We use anonymous analytics tools to understand page performance, popular products, and visitor behaviour. This data is aggregated and does not personally identify you.
Preference cookies: Store your preferences such as notification dismissals and theme settings.

You can control cookies through your browser settings. Disabling cookies may affect certain features of our website, including the shopping cart.

5. Third-Party Services

We use the following third-party services in delivering our products and operating our website:

Stripe:All payment processing is handled by Stripe, Inc. Stripe's handling of your payment data is governed by their own Privacy Policy, available at stripe.com/privacy.
Email service: Transactional and marketing emails are delivered via our email service provider. Your email address is shared with them solely for this purpose.
SMS notifications: Order and delivery notifications sent by SMS are delivered through our SMS provider. Your phone number is shared with them solely for this purpose.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements.

Order records: Retained for a minimum of seven years for accounting and legal compliance.
Account information: Retained for as long as your account is active, or as needed to provide services to you.
Marketing preferences: Retained until you withdraw consent or request deletion.

When information is no longer required, we securely delete or anonymise it.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct any inaccurate or incomplete information.
Deletion: Request that we delete your personal information, subject to certain legal exceptions.
Opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting us.
Data portability: Request your data in a machine-readable format in certain circumstances.

To exercise any of these rights, please contact us using the details in Section 9.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted HTTPS connections. Payment data is handled exclusively by PCI-DSS compliant Stripe and never passes through our servers.

While we take reasonable precautions, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to keeping your data safe.

9. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a privacy-related concern, please contact us:

Greensleeves Florist

We will respond to all enquiries within 30 days.