Privacy Policy
We take your privacy seriously and we are committed to protecting your privacy. We follow the procedures set out in this policy when using your information.
By using this Website to give us your information you accept the terms of and consent to us using your information in accordance with this policy.
Information Collected
For the purpose of the Data Protection Act 2018 the data controller is Petal & Stem whose contact details are set out at the end of this document. We will use the information we collect about you lawfully and to process your order and to provide you with the best possible service.
If you use the Services or if you contact us with an enquiry we will collect personal information such as your name, contact details, phone number, email address and address and only use them to respond to your enquiry.
We will never collect sensitive information about you without your consent. We may contact you by telephone, post or email.
Use of Information
The contact information you provide, such as your name, contact details, phone number, email address and address, will be held on a database in the UK and may be accessed by our staff and by those who provide support services to us. We may also share it with third parties such as banking / merchant services such as Paymentsense and Paypal where necessary, to process your order payments.
We do not hold any of your credit / debit card or financial details. At the point of payment you will be redirected to the banking / merchant services secure websites, to take and process the payment of your order for us.
Where you permit it we may use your personal information to contact you by email, mail, telephone or other means. We will not share your information with any third party for marketing purposes.
We may pass aggregate information on the usage of our Website to third parties but this will not include information that can be used to identify you.
We do our best to ensure that all information held relating to you is kept up-to-date, accurate and complete. However we also rely on you to notify us if your information requires updating or deleting. We will respond to requests from you to update or delete your information in an efficient and timely manner.
Use of Cookies
Unless you have indicated your objection when disclosing your information to us, our system will issue cookies to your computer when you log on to the Website.
Cookies are small amounts of information regarding your browsing habits which we store on your computer. Cookies make it easier for you to log on to and use the Website during future visits. They also allow us to monitor Website traffic and to personalise the content of the Website for you.
You may have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but if you prefer you may be able to modify your browser settings to decline all cookies, or to notify you each time a cookie is tendered and permit you to accept or decline cookies on an individual basis. If you choose to decline cookies, however, that may hinder the performance of the web Website. For specific details about how to configure your browser you should refer to its supplier or manufacturer.
Security
We employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage, however, transmission of information via the internet is not completely secure. We will use reasonable endeavours to protect your personal data but we cannot guarantee the security of it.
We will retain your information for a reasonable period or as long as the law requires. We will only disclose your personal data in the event that we sell any or all of our business or assets, if we are acquired by a third party or where we are required or permitted to by law.
You are entitled to receive a copy of your personal data by contacting us.
We may amend this Privacy Policy at any time. If we make any substantial changes in the way we use your Personal Information we will notify you by posting them on the Website.
All comments, queries and requests relating to our use of your information are welcomed and should be emailed to us, Petal & Stem, at petalandstemflowers@gmail.com or through our contact form on our website www.petalandstem.co.uk.
- Visit our website at https://petalandstem.co.uk, or any website of ours that links to this privacy notice
- Engage with us in other related ways, including any sales, marketing, or events
- phone numbers
- email addresses
- names
- billing addresses
- contact preferences
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called 'crash dumps'), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To fulfil and manage your orders. We may process your information to fulfil and manage your orders, payments, returns, and exchanges made through the Services.
- To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see 'WHAT ARE YOUR PRIVACY RIGHTS?' below.
- To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
- Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
- Send users information about special offers and discounts on our products and services
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Category | Examples | Collected |
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | NO |
B. Protected classification characteristics under state or federal law | Gender and date of birth | NO |
C. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
D. Biometric information | Fingerprints and voiceprints | NO |
E. Internet or other similar network activity | Browsing history, search history, online behaviour, interest data, and interactions with our and other websites, applications, systems, and advertisements | NO |
F. Geolocation data | Device location | NO |
G. Audio, electronic, visual, thermal, olfactory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
H. Professional or employment-related information | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | NO |
I. Education Information | Student records and directory information | NO |
J. Inferences drawn from collected personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | NO |
K. Sensitive personal information | NO |
L. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information |
NO |
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- whether we collect and use your personal information;
- the categories of personal information that we collect;
- the purposes for which the collected personal information is used;
- whether we sell or share personal information to third parties;
- the categories of personal information that we sold, shared, or disclosed for a business purpose;
- the categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose;
- the business or commercial purpose for collecting, selling, or sharing personal information; and
- the specific pieces of personal information we collected about you.
- You may object to the processing of your personal information.
- You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
- You can designate an authorised agent to make a request under the CCPA on your behalf. We may deny a request from an authorised agent that does not submit proof that they have been validly authorised to act on your behalf in accordance with the CCPA.
- You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.