Privacy notice

This notice explains what information Sophia Lee Floristry keeps about you, why, and what you can ask us to do with it. Sophia Lee Floristry is responsible for your information. You can contact us through the contact form or at sophia@sophialeefloristry.com.

What we keep and why

• When you order flowers: your name, email address and phone number, and the recipient's name, address, phone number and your card message. We need these to make and deliver your order and to contact you about it.
• When you book a workshop: your name, email address and phone number, so we can hold your places and tell you about any changes.
• When you send a message: your name, email address and what you wrote, so we can reply.
• The internet (IP) address an order, booking or message came from, for a short while, so one connection cannot hold many unpaid orders or send floods of messages. It is cleared once an order is paid or has lapsed, and from a message after a month.
• Payments are handled by SumUp. We never see or store your card number; we keep the payment reference SumUp gives us, so we can match it to your order and refund it if needed.

Who else handles it

• SumUp takes card payments.
• Microsoft Azure hosts this website and its database, and sends our emails.
• Google Fonts supplies the website's typefaces: your browser fetches them from Google, which sees your internet (IP) address, as any website you load from does.
• The home page shows recent posts from Sophia's Instagram account. Those pictures are copied to our own storage, so viewing this site does not connect you to Instagram unless you follow a link to it.

We do not sell your information or use it for advertising.

Cookies

This site uses only the cookies it needs to work: one that remembers your basket, one that remembers a payment in progress, and sign-in cookies for Sophia's own console. There are no analytics or advertising cookies.

How long we keep it

Order and booking records are kept for six years, because tax rules require business records to be kept. Orders that were never paid for are deleted after 90 days. Messages are kept for as long as they are needed to deal with what you asked, and no longer than two years.

Your rights

Under UK data protection law you can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it (unless we must keep it, for example for tax records), and object to how we use it. Contact us and we will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.