Swansea Flower Studio
Privacy Policy
Version: 1.0
Effective Date: 29 July 2026
Last Reviewed: 29 July 2026
Document Owner: Swansea Flower Studio
1. Introduction
Swansea Flower Studio (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website or purchase our products.
This policy has been prepared in accordance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
By using our website, you acknowledge that you have read this Privacy Policy.
2. Data Controller
The Data Controller responsible for your personal data is:
Swansea Flower Studio
862 Carmarthen Road
Fforestfach
Swansea
SA5 8HR
Email: info@swanseaflorist.online
Website:
https://swanseaflorist.online/
3. Personal Information We Collect
Depending upon how you use our website we may collect:
Identity Information
- Full name
- Title
- Username
- Account details
Contact Information
- Billing address
- Delivery address
- Email address
- Telephone number
Order Information
- Products purchased
- Order history
- Delivery instructions
- Gift messages supplied by customers
Payment Information
Payments are processed securely by Square.
We do not store:
- Full payment card numbers
- CVV security codes
- Bank account details
Payment information is handled directly by Square in accordance with their own privacy and security policies.
Technical Information
We may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Referring website
- Pages visited
- Date and time of access
Communications
If you contact us we may retain:
- Emails
- Contact form submissions
- Customer service enquiries
- Complaint correspondence
4. How We Collect Information
Information may be collected when you:
- Visit our website
- Create a customer account
- Place an order
- Subscribe to newsletters
- Contact us
- Request customer support
- Participate in promotions
- Leave reviews
Certain information is collected automatically using cookies and similar technologies.
5. Lawful Basis for Processing
Under UK GDPR we process personal information under one or more of the following lawful bases:
Contract
To:
- Process orders
- Deliver products
- Provide customer support
- Process refunds
Legal Obligation
To comply with:
- Tax legislation
- Accounting requirements
- Consumer protection law
- Fraud prevention obligations
Legitimate Interests
To:
- Improve our website
- Prevent fraud
- Maintain website security
- Improve customer service
- Manage business operations
Consent
Where required, we rely on consent for:
- Marketing emails
- Optional cookies
- Promotional communications
Consent may be withdrawn at any time.
6. How We Use Your Information
Your personal information may be used to:
- Process customer orders
- Deliver flowers and gifts
- Contact you regarding your order
- Verify payments
- Prevent fraudulent transactions
- Manage customer accounts
- Improve our website
- Respond to enquiries
- Meet legal obligations
- Maintain accounting records
7. Sharing Personal Information
We only share personal information where necessary.
This may include:
Payment Providers
Square processes payment information on our behalf.
Delivery Providers
Courier or delivery services used to fulfil customer orders.
Website Service Providers
Our website hosting provider.
Website maintenance providers.
Cloud service providers.
Professional Advisers
Where required:
- Accountants
- Solicitors
- Insurers
- Regulatory authorities
We never sell your personal information.
8. International Transfers
Where any service provider processes personal information outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR.
These safeguards may include:
- UK International Data Transfer Agreement (IDTA)
- UK Addendum to EU Standard Contractual Clauses
- Adequacy Regulations
9. Data Security
We use appropriate technical and organisational measures including:
- SSL encryption
- Secure hosting
- Password protection
- Access controls
- Regular software updates
- Malware protection
- Secure payment processing
- Staff confidentiality obligations where applicable
No internet transmission can be guaranteed to be completely secure.
10. Data Retention
We retain personal information only for as long as necessary.
Typical retention periods include:
| Information | Typical Retention |
|---|---|
| Customer accounts | Until deleted by customer or no longer required |
| Orders | Minimum 6 years |
| Financial records | Minimum 6 years |
| Customer correspondence | Up to 6 years |
| Marketing records | Until consent withdrawn |
Longer retention may apply where required by law.
11. Marketing
We may send marketing communications where:
- You have consented; or
- We are permitted to do so under applicable law.
You may unsubscribe at any time by:
- Clicking the unsubscribe link
- Contacting us directly
12. Cookies
Our website uses cookies.
These help us:
- Keep the website secure
- Remember shopping basket contents
- Maintain customer logins
- Improve website performance
- Analyse website usage
Further information is available in our Cookie Policy.
13. Customer Rights
Under UK GDPR you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent
- Lodge a complaint
Requests should be sent to:
14. Complaints
If you are dissatisfied with how we process your information, please contact us first.
You also have the right to complain to:
The Information Commissioner’s Office (ICO)
Website:
Telephone:
0303 123 1113
15. Children’s Privacy
Our website is not intended for children under the age of 13.
We do not knowingly collect personal information from children.
If we become aware that such information has been collected, we will delete it promptly unless we are legally required to retain it.
16. Automated Decision Making
We do not make decisions that produce legal or similarly significant effects solely through automated processing.
17. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for their privacy practices.
Users should review the privacy policies of those websites.
18. Changes to this Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
19. Contact Us
For any questions regarding this Privacy Policy or your personal information please contact:
Swansea Flower Studio
862 Carmarthen Road
Fforestfach
Swansea
SA5 8HR
Email: info@swanseaflorist.online
Website:
https://swanseaflorist.online/
Document Control
| Version | Date | Changes |
| 1.0 | 29 July 2026 | Initial Release |
© Swansea Flower Studio. All rights reserved.