Privacy Policy — Cuffley Flowers

Effective Date: 25 July 2026

Operating Location: Cuffley, Hertfordshire, United Kingdom

E-Commerce Platform: Squarespace

At Cuffley Flowers ("we," "us," or "our"), respecting and protecting your personal privacy is fundamental to how we operate. This Privacy Policy details how we collect, use, store, and safeguard personal information obtained when you visit our website (www.cuffleyflowers.co.uk), order floral arrangements, sign up for marketing updates, or interact with our services.

This document is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are (Data Controller)

For the purposes of applicable UK data protection legislation, Cuffley Flowers is the Data Controller of your personal information.

  • Business Name: Cuffley Flowers

  • Operating Area: Cuffley, Hertfordshire, United Kingdom (EN6 and surrounding areas)

  • Website: www.cuffleyflowers.co.uk

  • Privacy Enquiries Email: cuffleyflowers@hotmail.com

2. What Information We Collect

Because we operate a retail and e-commerce floral delivery service, we collect personal data relating to both buyers (the order placer) and recipients (the person receiving the flowers).

A. Customer & Purchaser Information

  • Contact Details: Full name, billing address, contact phone number, and email address.

  • Payment Data: Payment details (credit/debit card numbers) processed securely via integrated third-party payment gateways (Stripe or PayPal). Cuffley Flowers does not store raw credit card numbers on our servers.

  • Order & Transaction History: Details of items purchased, delivery preferences, dates of service, and order communications.

  • Account Credentials: Username and password (if you register an account on our Squarespace store).

B. Recipient Information

When you purchase flowers or gifts for delivery to another individual, we collect:

  • Recipient Details: Recipient full name, delivery address, delivery contact phone number, and access notes (e.g. gate codes, safe-place requests).

  • Gift Card Messages: Personal messaging supplied by you to accompany floral deliveries.

C. Automatically Collected Technical Data

  • Device & Usage Data: IP address, browser type, operating system, time zone, referral URLs, page interaction logs, and device parameters collected via standard log files and analytics.

  • Cookies: Essential, functional, and performance cookies placed by Squarespace and analytics tools.

3. Legal Bases for Processing Data

Under UK GDPR, we process your personal data using the following legal bases:

  1. Contractual Necessity: To process, assemble, and fulfill floral orders, process payment transactions, send order/delivery confirmations, and handle delivery logs.

  2. Legitimate Interests: To deliver recipient orders accurately, protect against fraudulent transactions, improve site functionality and florist offerings, and deliver local customer support.

  3. Legal Obligation: To retain financial records, invoicing, and VAT/tax records as required under UK tax laws (HMRC rules).

  4. Consent: To send promotional newsletters, seasonal arrangement updates, or workshop invites via email where you have expressly opted in.

4. Third-Party Data Sharing & Sub-Processors

We strictly do not sell, rent, or trade personal data to external third parties for marketing purposes. We share data only with necessary third-party service providers to facilitate our online store and delivery services:

  • Squarespace, Inc.: Our web hosting and e-commerce platform provider. Squarespace processes data securely on our behalf to power customer accounts, shopping carts, and checkout flows.

  • Payment Processors (Stripe / PayPal): Secure handling of payment processing.

  • Couriers & Local Drivers: Delivery personnel (including in-house drivers or contracted local couriers) are provided recipient delivery names, addresses, access notes, and contact phone numbers purely to carry out flower deliveries.

  • Analytics Tools: Google Analytics or Squarespace Analytics (in anonymised/aggregated formats) to assess store navigation and performance.

5. Data Transfers Outside the UK

Where third-party service providers like Squarespace store or access data outside the UK (e.g. in the United States), we ensure appropriate transfer mechanisms are in place, such as Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements (IDTAs), ensuring your data receives an equivalent standard of protection.

6. Cookies & Tracking Technologies

Our website uses cookies to function smoothly and enhance your shopping experience:

  • Strictly Necessary Cookies: Required for shopping cart retention and secure checkout processing.

  • Performance & Analytics Cookies: Help us measure how visitors navigate our site so we can optimize layout and user experience.

When visiting our site, you can manage your cookie preferences via our Squarespace Cookie Banner. You can also adjust your web browser settings to reject non-essential cookies.

7. Data Retention

  • Order & Billing Records: Retained for 6 years following the end of the relevant accounting tax year in compliance with UK HMRC regulations.

  • Recipient Messages & Address Logs: Anonymised or deleted after order delivery confirmation, except where stored within archived accounting invoices.

  • Marketing Data: Retained until you unsubscribe or request deletion.

8. Your Legal Rights Under UK GDPR

As a UK resident, you hold the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Request correction of inaccurate or incomplete information.

  • Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer required for legal or contractual reasons.

  • Restrict or Object to Processing: Object to processing based on legitimate interest or direct marketing.

  • Withdraw Consent: Unsubscribe from marketing communications at any time via the link in our emails or by contacting us directly.

9. Contact Us & ICO Complaints

If you wish to exercise your legal rights or have questions regarding this policy, please contact Cuffley Flowers:

  • Email: cuffleyflowers@hotmail.com

  • Address: Cuffley Flowers, Station Road, Cuffley, Hertfordshire, EN6

If you are unsatisfied with how we handle your privacy query, you have the right to lodge a formal complaint with the UK data regulator:

  • Information Commissioner's Office (ICO)

    Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

    Helpline: 0303 123 1113 | Website: www.ico.org.uk