PRIVACY POLICY – Cherfold Flowers
Last updated: December 2025
1. Introduction
Cherfold Flowers ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website, shop with us, or subscribe to our newsletter.
We are the data controller for the personal information we process. If you have any questions about this policy, please contact us at:
- Email: caroline@cherfoldflowers.com
- Address: The Cottage, St John’s Rd, Hove. BN3 2FB
2. Information We Collect
2.1 Information You Provide Directly
When you interact with our website, we may collect:
- Newsletter sign-up: Your name and email address
- Shop purchases: Your name, email address, delivery address, telephone number, and payment information
- Contact enquiries: Any information you provide when you contact us, including name, email, and the content of your message
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- Technical information such as your IP address, browser type, and operating system
- Information about your visit, including pages viewed, time spent on pages, and navigation patterns
- Information collected through cookies (see Section 5 below)
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Newsletter
- To send you our newsletter with updates about our work, new products, workshops, and artistic projects
- You can unsubscribe at any time using the link in every email
- Legal basis: Your consent
3.2 Shop Orders
- To process and fulfil your orders
- To communicate with you about your order
- To provide customer service
- To maintain records for accounting and tax purposes
- Legal basis: Performance of a contract and legal obligations
3.3 Website Improvement
- To understand how visitors use our website
- To improve our website's functionality and user experience
- Legal basis: Legitimate interests
4. How We Share Your Information
We will never sell, rent, or share your personal information with third parties for their marketing purposes.
We only share your information in the following limited circumstances:
4.1 Service Providers
We work with trusted third-party service providers who help us operate our business. These may include:
- Email marketing platform Squarespace - to send newsletters
- Payment processors Squarespace - to process payments securely
- Shipping providers - to deliver your orders
- Website hosting - to host our website
These service providers are only permitted to process your information on our behalf and are required to protect your data in accordance with GDPR.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
5. Cookies
5.1 What Are Cookies?
Cookies are small text files placed on your device when you visit our website. They help us provide you with a better experience.
5.2 Types of Cookies We Use
Essential Cookies
These cookies are necessary for the website to function properly. They enable basic functions like page navigation and access to secure areas. The website cannot function properly without these cookies.
- Session cookies (deleted when you close your browser)
- Shopping basket functionality
Analytics Cookies
These cookies help us understand how visitors interact with our website by collecting anonymous information. We may use:
- Google Analytics (if applicable) - to understand visitor behaviour
These cookies do not identify you personally.
Functionality Cookies
These cookies allow the website to remember choices you make and provide enhanced features.
5.3 Managing Cookies
You can control and manage cookies in your browser settings. Please note that removing or blocking cookies may impact your user experience and some features of the website may not function properly.
To learn more about managing cookies, visit: www.allaboutcookies.org
6. How Long We Keep Your Information
- Newsletter subscribers: Until you unsubscribe
- Shop customers: We retain order information for 7 years to comply with accounting and tax obligations
- Contact enquiries: For the duration needed to respond to your enquiry, then typically deleted after 2 years
- Website analytics: Data is typically anonymised and retained for up to 26 months
7. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights:
- Right of access: You can request a copy of the personal information we hold about you
- Right to rectification: You can ask us to correct inaccurate information
- Right to erasure: You can ask us to delete your personal information (subject to certain legal obligations)
- Right to restrict processing: You can ask us to limit how we use your information
- Right to data portability: You can request your data in a portable format
- Right to object: You can object to processing based on legitimate interests
- Right to withdraw consent: Where we rely on consent, you can withdraw it at any time
To exercise any of these rights, please contact us using the details in Section 1.
8. Data Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
Some of our service providers are based outside the UK/EU. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. How to Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:
- Email: caroline@cherfoldflowers.com
13. Right to Complain
If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113