Sunnybank Flowers – Privacy Policy
Your privacy is extremely important to us. This Privacy Policy explains how Sunnybank Flowers (“we”, “our”, “us”) collects, uses, stores, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We collect the following types of personal data:
- Identity information – name, order details
- Contact information – phone number, email address, delivery address
- Payment information – processed securely by Stripe (we do not store card data)
- Order notes – card messages, special instructions
- Technical data – IP address, browser type, device info, cookies
- Usage data – pages visited, time on site, referring links
2. How We Use Your Information
We process personal data for the following purposes:
- To process and fulfil your flower order
- To contact you regarding delivery or order updates
- To improve our website and customer experience
- To send marketing messages if you have opted in
- To comply with legal obligations
3. Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Contract – processing your order
- Consent – marketing emails or texts
- Legitimate interests – preventing fraud, improving customer experience
- Legal obligation – accounting, tax, or regulatory requirements
4. Sharing Your Information
We do not sell or rent your personal data.
We may share your information with:
- Stripe – secure payment processing
- Delivery partners – to complete your order
- IT service providers – website hosting and security
- Law enforcement – where legally required
5. Cookies
Our website uses cookies to improve functionality and user experience. Cookies may collect browsing behaviour, preferences, and device information. You can disable cookies in your browser settings.
6. How We Store Your Data
Your information is stored securely on encrypted servers. We retain data only as long as necessary for operational, legal, or accounting purposes.
7. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to marketing
- Request data portability
To exercise any of these rights, please contact us at:
8. Marketing Preferences
We will only send marketing communications if you have given explicit consent. You may opt out at any time by clicking “unsubscribe” or contacting us directly.
9. Data Retention
We keep order information for accounting and legal purposes. Other personal data is retained only as long as necessary.
10. Children’s Data
We do not knowingly collect or store information from children under 16.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
12. Contact Us
If you have any questions about this policy or how we handle your personal information, please contact us at:
Sunnybank Flowers
107 Parr Lane, Unsworth, Bury
Email: [email protected]