Legal
Privacy policy.
What we collect, why, how long we keep it and how to ask us about it.
What we collect
When you use the order form we collect your name, phone number, email address and postcode, what you would like and when, and anything you write, which may include the recipient's name and address and a card message. The form also records the time it was sent and your IP address, used only to block automated submissions.
When you order we hold the order, the recipient's name, address and phone number (which we use only to deliver and, if needed, to arrange a safe place), the card message, and your payment, which is taken by phone or in the shop through our card terminal; we do not store card numbers. For weddings we hold the consultation notes, the mood board and the quote. For subscriptions we hold the schedule and the recurring payment mandate with our payment provider. For funeral orders we hold the funeral director and date so the flowers arrive on the morning.
Why we use it
- To make and deliver what you ordered and to take payment (contract).
- To contact the recipient only if a delivery cannot be made (legitimate interest).
- To remind you of an anniversary or date you have asked us to remember, which you can stop at any time (consent).
- To ask for a review a week after delivery through an independent platform (legitimate interest).
How long we keep it
Enquiries that do not become an order are deleted after three months. Order records, including recipient details and card messages, are kept for two years and then deleted; payment records for six years as HMRC requires; wedding records for two years after the wedding. Recipients' details are never used for marketing and are not added to any list.
Who sees it
The three of us. Beyond that, only our card payment provider, the review platform (your email, once), and a partner florist if you ask us to arrange flowers outside the Vale (the recipient's details and the order only). The form is delivered by email to us; we do not use third-party marketing platforms and we never sell or share your details.
Cookies
This site sets a single session cookie to limit repeat form submissions. It contains no personal data and expires when you close the browser. The embedded map on the find-us page is served by Google and may set cookies under Google's own policy.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete what we are not required to keep, or object to how we use it. Email hello@bloomlane.co.uk or write to the address above. You can also complain to the Information Commissioner's Office at ico.org.uk.