Privacy and Cookie Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.thehandmadeflorist.com (the “Site”).

PERSONAL INFORMATION WE COLLECT
When you visit this Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. This information is collected using the following technologies:

Cookies. These are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. By continuing to use this site you are agreeing to the use of cookies.

Log files. These track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

Web beacons, tags and pixels. These are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect your name, billing address, shipping address, email address, phone number, along with payment card details (see below regarding payment details).

If you submit an enquiry through our online contact form, we collect your name and email address.

WHY WE NEED YOUR INFORMATION AND HOW WE USE IT
Personal data is only processed for the purpose for which it was originally intended.

Information that you provide when placing an order will be used for contractual purposes to fulfil your order, including arranging for shipping and to communicate with you regarding your purchase. Additionally, this information is used by our website provider (Shopify) to screen orders for potential risk or fraud. Shopify also uses the device information collected to help screen for potential risk and fraud (in particular, your IP address) and more generally to help us improve and optimise our Site, for example by generating analytics about how customers browse and interact with our site.

Information collected through our online contact form is used only to respond to your enquiry and to provide any support required.

Finally, we may also use any information collected as necessary to comply with applicable laws and regulations, to protect our rights and to comply with any legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law. 

PAYMENT DETAILS
The Handmade Florist does not access or store your payment card details. Payments are processed either by PayPal or by Shopify.

SHARING YOUR PERSONAL INFORMATION
Information about our customers is important to our business. We share your personal information for very limited reasons and in limited circumstances, as follows:

Shopify. We use Shopify to power our online store and to securely process your payments. You can read more about how Shopify uses your Personal Information here:  https://www.shopify.com/legal/privacy.

PayPal. If you choose to use PayPal for making a payment, the details you enter when placing an order will be passed to PayPal to process your order. You can read more about how PayPal uses your Personal Information here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev  

Google. When you submit an enquiry through our online contact form, your information will be passed to us via Google email.

Service providers. We engage certain trusted third parties to perform functions and provide services to our shop, such as delivery companies. We share your personal information with these third parties, but only to the extent necessary to perform these services.

Compliance with laws. We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.

TRANSFERS OF PERSONAL INFORMATION OUTSIDE THE EU
We may store and process your information through third-party hosting services in the US and other jurisdictions. When doing so we will take reasonable steps to ensure that the country, territory or organisation in question has been deemed by the Information Commissioner’s Officer (ICO) to have an adequate level of protection, for example the EU-US Privacy Shield for transfers to the US.

DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

DATA RETENTION
Data will be retained for processing in line with the original purpose it was collected. After that it may be held if there is a legal or operational reason to do so. For example, order information is generally kept for six years. Correspondence submitted via the online contact form may be held for two years in case of follow up enquiries, subsequent orders or queries regarding an original enquiry.

YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you. To make a subject access request please contact us at the address or email address at the bottom of this page. You also have the right to ask that your personal information be corrected, updated, or deleted. For more information about your rights, visit www.ico.org.uk. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. 

You also have the right to make a complaint by contacting the Information Commissioner’s Office. You can find out more by visiting www.ico.org.uk.

CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hannah@thehandmadeflorist.com or at The Handmade Florist, 39 Blackthorn Road, Attleborough, NR17 1YJ, United Kingdom