Privacy Policy
Last updated: 16 August 2026
The Petal Boutique is committed to protecting your privacy. This policy explains what personal information we collect, why we collect it, what we do with it and what rights you have over it. We have written it in plain English rather than legal language, and we would rather you asked us a question than guessed at an answer.
Who we are
The Petal Boutique is a florist based at The Fairground Craft and Design Centre in Weyhill, Andover. For the purposes of UK data protection law we are the "data controller" of the information described in this policy, which means we decide how and why it is used.
- Trading name: The Petal Boutique
- Registered company: DJSJ Floral Limited, registered in England and Wales, company number 17243036
- Address, and where to write to us: 6 The Fairground Craft and Design Centre, Weyhill, Andover, Hampshire, SP11 0QN
- Telephone: 01264 771382 or 07977 458569
- Email: [email protected]
- VAT number: GB521682794
- ICO registration number: ZC223898
If you have any question about your information, or you want to make one of the requests described further down this page, please contact us using any of the details above.
What information we collect
When you place an order
- Your name, billing address, email address and telephone number
- The delivery address, and the name and telephone number of the person receiving the flowers
- Any message you would like written on a card
- Delivery instructions and the date you would like the order delivered or collected
- Details of what you ordered and what you paid
We do not see or store your full card details. Payments are handled by our payment provider, and we only receive confirmation that a payment succeeded along with the last few digits of the card.
When you contact us
If you call us, email us, message us on social media or fill in a form on the website, we collect the contact details and the content of your message so that we can reply and keep a record of what was agreed. This includes wedding, event, funeral and workshop enquiries.
When you use the website
Our website collects standard technical information such as your IP address, browser type, the pages you visited and how you arrived at the site. Some of this is necessary for the site to work and to keep it secure. The rest is analytics, and we only collect it if you agree to it through the cookie banner.
Flowers sent as a gift
If you send flowers to someone else, you are giving us that person's name, address and often their telephone number. We use those details only to deliver the order and to contact them if there is a problem with the delivery. We do not add them to any mailing list, we do not market to them, and we do not use their details for anything other than getting the flowers to them.
If you are the recipient of an order and would like to know what we hold about you, or would like it removed, please contact us and we will deal with it.
Why we use your information, and our lawful basis
Data protection law requires us to have a valid reason, called a "lawful basis", for everything we do with your information. Ours are set out below.
| What we do | Why | Lawful basis |
|---|---|---|
| Take, prepare and deliver your order | To provide what you have paid for | Performance of a contract |
| Contact you about your order, including confirmations, delivery updates and any problem with a delivery | To keep you informed about your own order | Performance of a contract |
| Reply to your enquiry or quote for a wedding, funeral, event or workshop | To answer your question and arrange the work | Steps taken at your request before entering a contract |
| Ask you how your order went, and invite you to leave a review | To find out whether we got it right and to improve what we do | Our legitimate interests in understanding and improving our service |
| Send you marketing emails about promotions, new products and services | To tell you about things we think you would like | Your consent, given by ticking the box at checkout |
| Keep accounting and VAT records | Because HMRC requires it | Legal obligation |
| Analytics, to understand how the website is used | To improve the website | Your consent, given through the cookie banner |
| Keep the website and our business secure, and prevent fraud | To protect you and us | Our legitimate interests in security |
Emails you will and will not get from us
We think it is worth being specific about this, because it is the thing customers ask about most.
You will get emails about your order. Confirmations, delivery updates, and anything we need to tell you about an order you have placed.
We may occasionally ask you for feedback. After an order, we may send you one short message asking how it went and inviting you to leave a review. It will not contain offers or advertising, and it will always include a link to opt out of any further feedback requests.
You will only get marketing emails if you have asked for them. Promotions, new products and seasonal offers are sent only to people who have ticked the box asking for them. If you have not ticked it, we will not send them. Every marketing email has an unsubscribe link, and you can also tell us by phone or email at any time.
We do not sell, rent or share your details with other companies for their own marketing.
Who we share your information with
We use a small number of trusted suppliers who process information on our behalf. They can only use it to provide their service to us, and they cannot use it for their own purposes.
- floristPro, who provide and host our website and online ordering system
- Our payment provider, who processes card payments
- Google, for website analytics, embedded maps and web fonts
- Cloudflare, for security checks on our forms
- Cognito Forms, for enquiry and booking forms
- Our accountants and bookkeeping software, for our financial records
- Couriers and delivery drivers, where an order is not delivered by us directly
We may also share information where we are legally required to, for example with HMRC, or where it is necessary to establish or defend a legal claim.
Sending information outside the UK
Some of the suppliers listed above are based outside the UK, or store information outside the UK. Where that happens, we rely on the safeguards approved under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision covering the country concerned. If you would like more detail about a particular supplier, please ask.
How long we keep your information
| Information | How long we keep it |
|---|---|
| Order and payment records | Six years after the end of the financial year they relate to, because HMRC requires it |
| Delivery recipient details | Kept as part of the order record, and not used for anything else |
| Enquiries that did not lead to an order | Two years from your last contact with us |
| Marketing preferences | For as long as you are subscribed, and a record of your unsubscribe afterwards so that we do not contact you again by mistake |
| Website analytics | No more than 14 months |
Cookies
Cookies are small files stored on your device. We use them in four categories, and you can choose which you accept through the banner shown when you first visit the site.
- Necessary cookies make the site work, including remembering what is in your basket. These cannot be turned off.
- Analytics cookies tell us how the site is used, so we can improve it.
- Preferences cookies remember choices you have made.
- Marketing cookies would be used to measure advertising.
You can change your mind at any time through the cookie settings on the site, and you can also block or delete cookies through your browser settings. Blocking necessary cookies may stop parts of the site working.
Your rights
Under UK data protection law you have the following rights over your information. They are free to use.
- Access. You can ask for a copy of the information we hold about you.
- Correction. You can ask us to correct anything that is wrong or incomplete.
- Erasure. You can ask us to delete your information, although we may need to keep order records for the tax reasons above.
- Restriction. You can ask us to pause using your information while a question about it is resolved.
- Objection. You can object to us using your information where we rely on legitimate interests, including our feedback requests.
- Portability. You can ask for the information you gave us in a machine-readable format.
- Withdraw consent. Where we rely on your consent, such as marketing emails or analytics cookies, you can withdraw it at any time.
- Direct marketing. You can tell us to stop sending you marketing at any time, and we will.
To use any of these, contact us using the details at the top of this page. We will respond within one month. We may ask you to confirm your identity first, so that we do not give your information to somebody else.
Complaints
If you are unhappy with how we have handled your information, please tell us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office, which regulates data protection in the UK.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
Changes to this policy
We review this policy from time to time and will update it if what we do with your information changes. The date at the top shows when it was last updated.