Thicket Blooms | Bespoke Floral Design & Workshops in Hampstead, London

Privacy Policy

At Thicket Blooms, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our online platform and services, including fresh cut flower arrangements, bespoke wedding flowers, corporate floral installations, plant sales, floral workshops, and same-day local delivery.

1. Information We Collect

We collect various types of information to provide and improve our services to you.

Personal Information You Provide Directly: This includes details such as your name, email address, postal address for deliveries, phone number, and payment information (processed securely by third-party payment providers) when you place an order, book a workshop, or contact us. For bespoke services like wedding flowers, we may also collect specific preferences and event details.
Recipient Information: If you send a gift, we collect the recipient's name, address, and contact number to facilitate delivery. We assume you have the recipient's consent to provide this information.
Communications: Records of your correspondence with us, including emails and customer service interactions.
Website Usage Data: Information about how you interact with our site, such as your IP address, browser type, operating system, referral source, length of visit, page views, and navigation paths. This helps us understand how our site is used and to improve its functionality.

2. How We Use Your Information

We use your personal data for the following purposes:

Order Fulfilment and Service Delivery: To process your orders, arrange delivery of fresh flowers, plants, and other products, and provide the services you request, such as bespoke floral designs or workshop bookings.
Communication with You: To send order confirmations, delivery updates, respond to your inquiries, and provide customer support.
Personalisation: To tailor our service offerings and communications to your preferences.
Marketing and Promotions: With your consent, to send you newsletters, promotional offers, and information about new products, services, and workshops that may be of interest to you. You can opt-out at any time.
Website Improvement: To analyse user behaviour and site performance, allowing us to enhance the functionality, user experience, and content of our online platform.
Legal and Security Purposes: To comply with legal obligations, prevent fraud, and ensure the security of our services.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Performance of a Contract: When processing is necessary to fulfill an order, provide a service you've requested (e.g., bespoke wedding flowers, workshop booking), or take steps at your request before entering into such a contract.
Legitimate Interests: For purposes such as improving our services, preventing fraud, and sending marketing communications where we have a legitimate interest and these interests are not overridden by your data protection rights.
Consent: Where required by law, we will obtain your explicit consent for specific processing activities, such as sending direct marketing communications. You have the right to withdraw consent at any time.
Legal Obligation: To comply with applicable laws and regulations.

4. Sharing Your Information

We do not sell your personal data. We may share your information with:

Service Providers: Third-party companies who provide services on our behalf, such as payment processors, delivery partners, website hosting, and analytics providers. These providers are obligated to protect your data and only use it for the purposes we specify.
Legal and Regulatory Authorities: When required by law or to respond to valid legal requests, such as a court order or subpoena.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When it is no longer needed, we will securely delete or anonymize it.

6. Your Data Protection Rights (GDPR)

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data about you.
Right to Erasure ( "Right to be Forgotten"): Request the deletion of your personal data, under certain conditions.
Right to Restrict Processing: Request that we restrict the processing of your data, under certain conditions.
Right to Object to Processing: Object to our processing of your personal data, under certain conditions, including for direct marketing.
Right to Data Portability: Request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

To exercise any of these rights, please contact us using the details provided below.

7. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.

8. Cookies

Our site uses cookies to enhance your browsing experience, analyse site traffic, and for targeted advertising. You can control or refuse cookies through your browser settings, but please note that some parts of our site may not function properly without them.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and the "last updated" date will be revised. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Thicket Blooms

14 Beechwood Drive,

Hampstead,

London, NW3 1TL,

United Kingdom