Privacy Policy

1. Who we are

The Green Loft is a floristry and floral workshop business based at Unit 1, The Wiend, Great Eccleston, Preston PR3 0ZU. For the purposes of UK data-protection law, The Green Loft is the controller of the personal information described in this policy.

2. Information we may collect

• Contact details such as your name, email address, telephone number, billing or delivery address.
• Order, enquiry and booking information, including products, tribute details, messages, workshop choices, delivery dates and special instructions.
• Account, loyalty, voucher and referral information where those services are offered.
• Payment status and transaction references. Card details are handled by our payment provider and are not stored by us in full.
• Messages, reviews, images or other content you choose to send or upload.
• Technical information such as IP address, browser or device type, app version, security logs and cookie or similar identifiers.
• Marketing preferences and records of your communications with us.

3. How we use information

• To answer enquiries and provide quotations.
• To process and fulfil orders, bookings, deliveries, vouchers and refunds.
• To provide customer accounts, loyalty or referral features.
• To take payments and prevent fraud.
• To send essential service messages about an order or booking.
• To improve, secure and administer our website, shop, app and business.
• To meet legal, tax, accounting and regulatory obligations.
• To send marketing where you have consented or where otherwise permitted by law. You may opt out at any time.

4. Our lawful bases

Depending on the circumstances, we process information because it is needed to perform a contract or take steps at your request, because we have a legal obligation, because we have a legitimate business interest that does not override your rights, or because you have given consent. You may withdraw consent at any time, although this will not affect earlier lawful processing.

5. Payments and service providers

Online payments may be processed by Stripe. Stripe processes payment information under its own privacy terms. We may also use trusted suppliers for website hosting, cloud storage, email, delivery, analytics, security, accounting and technical support. They may process only the information needed to provide their services and must protect it appropriately.

6. Sharing information

We do not sell personal information. We may share it with service providers, delivery partners, professional advisers, regulators or law-enforcement bodies where necessary. We may also disclose information in connection with a business sale, reorganisation or legal claim.

7. International transfers

Some providers may store or process information outside the United Kingdom. Where this happens, we use an appropriate legal safeguard, such as an adequacy regulation or approved contractual protections.

8. How long we keep information

We keep information only as long as reasonably necessary for the purpose collected, including customer service and legal, tax and accounting requirements. Enquiries that do not become orders are normally reviewed and deleted when no longer needed. Transaction records may be retained for the period required by applicable law. Security backups may remain for a limited additional period.

9. Cookies, analytics and app permissions

Our website or app may use essential cookies or local storage to keep the service working, remember choices, maintain a basket or session and protect accounts. Optional analytics or marketing technologies should be used only with the appropriate choice or consent. An app may request access to features such as photos or camera only when needed for a feature you choose to use; you can manage permissions in your device settings.

10. Security

We use reasonable technical and organisational measures to protect information. No online service can guarantee absolute security, so please use a strong password and contact us if you suspect unauthorised access.

11. Children

Our online services are not directed at children under 13. A parent or guardian should make purchases, bookings or submissions on behalf of a child. If you believe a child has provided information without appropriate permission, please contact us.

12. Your rights

Subject to UK data-protection law, you may have rights to request access, correction, deletion, restriction, objection, data portability and withdrawal of consent. You may also complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

13. Links and policy changes

Other websites and services have their own privacy policies, and we are not responsible for their practices. We may update this policy when our services or legal obligations change. The latest version will be published on this page with its updated date.

14. Contact us