Customer data protection

Privacy Policy

Your privacy matters. This policy explains what personal data Conway Floral collects, why we collect it, and how we keep it safe when you order flowers, ask about a design, or contact our Heswall studio.

  • Effective date: 21 February 2025
  • Applies to customers in the UK
  • Read our terms
Personal information

What We Collect

We ask for details that help us take an order, prepare flowers, make a delivery, or reply to a genuine enquiry. We do not sell personal data.

Contact details

Your name, email address, telephone number and preferred way to hear from us. This lets us answer a question or confirm an arrangement.

Order details

Items ordered, card messages, consultation notes, event dates and details needed to make wedding, sympathy or everyday flowers accurately.

Delivery information

The recipient's name, delivery address, access notes and requested date. We use this only to arrange and complete the delivery.

Payment information

Payments are handled by our payment provider. We do not keep complete card numbers or security codes on our own systems.

Communication choices

We record whether you have asked to receive seasonal news or product updates. Marketing messages are sent only where the law allows.

Website activity

Cookies and similar technologies may record basic browser activity, such as pages viewed and preferences saved on this website.

  • How we receive itYou provide information through website forms, email, telephone conversations and checkout. Some technical information is created when you browse the site.
Clear purpose

How We Use Your Data

Each use has a practical reason and a lawful basis under UK GDPR.

What happens after you contact us

We use your details to confirm an order, prepare the right flowers, arrange delivery and provide customer support. Consultation notes help us remember choices for a wedding or event.

We may use information to meet accounting, tax, fraud prevention or other legal duties. We do not use your order history to make decisions that have a legal or similarly serious effect on you.

Marketing is separate. We send seasonal updates only with your consent, and you can change your mind at any time.

Our lawful bases

  • Contract: processing an order or preparing a requested consultation.
  • Legal duty: keeping records required by tax and business law.
  • Consent: sending marketing where you have chosen to receive it.
  • Legitimate interests: answering service messages, protecting our systems and improving the website.

How long we keep it

Order and financial records are kept for the period required by UK law. Enquiry details are normally removed when they are no longer needed. Event notes are kept only while they help us provide the requested service.

Limited access

Access is restricted to people and providers who need the information for orders, deliveries, payment, email or legal administration. We review access when a service is no longer needed.

Services and cookies

Sharing and Cookies

Some parts of an order need trusted service providers. They receive only the information needed for their task and must protect it.

Cookie type Purpose Choice
Essential Remembering basic settings and supporting checkout or contact forms. These may be needed for the site to work.
Functionality Keeping preferences so the site feels consistent when you return. You can manage these in your browser.
Analytics Showing which pages are useful by using aggregated website activity. We ask for permission where required.
Manage cookie preferences

You can block or remove cookies through your browser settings. Blocking essential cookies may affect checkout or form features. Your browser provider's help pages explain the available controls.

Who may receive information

Payment providers process transaction details. Delivery partners may receive the recipient's name, address and access instructions. Email and website providers may process information to operate their services. We do not sell or rent customer data.

Keeping information secure

We use sensible safeguards, secure accounts and limited access. No online service can promise absolute security, so please contact us quickly if you think your information has been used incorrectly.

Your choices

Your Rights Under GDPR

You can ask how we use your information and request changes. We may need to verify your identity before responding.

  1. AccessAsk for a copy of the personal data we hold about you.
  2. RectificationAsk us to correct information that is inaccurate or incomplete.
  3. ErasureAsk us to remove information where there is no good reason for us to keep it.
  4. RestrictionAsk us to limit how we use your information while a concern is checked.
  5. Portability and objectionAsk for certain data in a usable format, or object to processing based on legitimate interests or direct marketing.

How to make a request

Email [email protected] with "Privacy request" in the subject line. Tell us what you need and the details used to contact you. We aim to respond within one month.

If you remain unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.

Questions about your personal data?

Conway Floral is based at 5 Mill Lane, Heswall, Wirral, CH60 2TE. Contact us about this privacy policy, an order record or a data request.

Email Conway Floral