Privacy policy
Privacy Policy
At Florettee Ltd ("Florettee", "we", "us" or "our"), protecting your personal information is important to us.
This Privacy Policy explains how we collect, use, store, share and protect your personal data when you visit florettee.com, create an account, place an order, subscribe to our marketing communications, contact us or otherwise interact with our services.
We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Controller Contact Information
For the purposes of UK data protection law, the data controller is:
Florettee Ltd
Registered Company No: 14894459
Park Lane, Langham
Colchester, England
CO4 5WR
Email: info@florettee.com
Website: florettee.com
If you have questions about this Privacy Policy or how we use your personal information, please contact us using the email address above.
2. Definitions
For the purposes of this Privacy Policy:
Personal Data means information relating to an identified or identifiable individual.
Processing means any operation performed on personal data, including collecting, recording, storing, using, sharing or deleting it.
Controller means the organisation that determines why and how personal data is processed.
Processor means an organisation that processes personal data on behalf of a controller.
Data Subject means the individual whose personal data is being processed.
Consent means a freely given, specific, informed and unambiguous indication that an individual agrees to particular processing of their personal data.
3. What Personal Data We Collect
Depending on how you interact with Florettee, we may collect and process the following categories of personal information:
-
Identity Data: such as your name and title.
-
Contact Data: such as your email address, telephone number, billing address and delivery address.
-
Transaction Data: such as details of products purchased, order history, refunds and delivery information.
-
Payment Data: information required to process payments. Payment transactions may be processed by Shopify and/or third-party payment providers rather than directly by Florettee.
-
Account Data: information associated with a Florettee customer account, where applicable.
-
Technical Data: such as your IP address, browser type, device information, operating system and information about how you access our website.
-
Usage Data: information about how you use and interact with our website, pages and services.
-
Marketing and Communications Data: your preferences for receiving marketing communications from us and information about your interactions with those communications.
-
Customer Service Data: information you provide when contacting us regarding an order, return, refund, product or other enquiry.
We do not intentionally collect more personal information than is reasonably necessary for the purposes described in this policy.
4. How We Collect Personal Data
We may collect personal information through:
Direct interactions: when you place an order, create an account, subscribe to emails, contact us, request a return or refund, or otherwise provide information directly to us.
Automated technologies: when you browse or interact with our website, certain technical and usage information may be collected through cookies and similar technologies.
Third-party services: we may receive information from companies that help us operate our business, including Shopify, payment providers, delivery providers and analytics or marketing providers.
5. Legal Bases for Processing
Under UK data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on:
Contractual necessity – Article 6(1)(b) UK GDPR: where processing is necessary to enter into or perform a contract with you, such as processing, fulfilling and delivering your order.
Consent – Article 6(1)(a) UK GDPR: where you have given us valid consent, such as for certain marketing or cookie-related activities.
Legitimate interests – Article 6(1)(f) UK GDPR: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include protecting our website, preventing fraud, understanding our customers and improving our services.
Legal obligation – Article 6(1)(c) UK GDPR: where processing is necessary for us to comply with a legal obligation, including relevant tax, accounting and regulatory requirements.
Where we rely on consent, you may withdraw that consent at any time.
6. How We Use Your Personal Data
We may use your personal information to:
-
Process, fulfil and deliver orders;
-
Process payments, refunds and returns;
-
Communicate with you regarding your order;
-
Manage customer accounts;
-
Respond to questions and provide customer support;
-
Detect and prevent fraud or misuse;
-
Maintain the security and operation of our website;
-
Comply with our legal, tax, accounting and regulatory obligations;
-
Understand how customers use our website;
-
Improve our website, products, services and customer experience;
-
Measure website and marketing performance; and
-
Send marketing communications where we have an appropriate lawful basis to do so.
We will not use your personal data for purposes that are incompatible with the purposes for which it was originally collected unless permitted by law.
7. Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you a number of rights regarding your personal information.
These may include:
Right of Access: you can request information about the personal data we hold about you and obtain a copy.
Right to Rectification: you can ask us to correct inaccurate or incomplete personal information.
Right to Erasure: in certain circumstances, you can ask us to delete your personal information.
Right to Restrict Processing: in certain circumstances, you can ask us to restrict how your personal information is used.
Right to Data Portability: where applicable, you can request certain personal information in a structured, commonly used and machine-readable format.
Right to Object: you may object to certain processing, including processing based on legitimate interests and processing for direct marketing purposes.
Right to Withdraw Consent: where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You may exercise applicable rights by contacting:
We may need to verify your identity before responding to a request.
You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how your personal information has been handled.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, reporting and regulatory requirements.
Different categories of personal information may therefore be retained for different periods.
When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
9. Sharing Your Personal Data
We may share personal information with third parties where necessary to operate our business and provide our services.
These may include:
-
Shopify, which provides the ecommerce platform used to operate our online store;
-
Payment processors and payment service providers;
-
Delivery and fulfilment providers;
-
Website hosting and technology providers;
-
Analytics providers;
-
Marketing and communications providers;
-
Professional advisers where necessary; and
-
Government, regulatory, law enforcement or other authorities where disclosure is required by law.
Our website is powered by Shopify, and Shopify may process personal information relating to your use of the store in order to provide its services to us.
Where third parties process personal information on our behalf, we take appropriate steps to ensure that personal information is handled in accordance with applicable data protection requirements.
We do not sell your personal data.
10. International Data Transfers
Some of the third-party providers we use, including ecommerce, technology, analytics and payment providers, may process or store personal information outside the United Kingdom.
Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law.
Where required, this may include relying on adequacy regulations, appropriate contractual safeguards or other legally recognised transfer mechanisms.
11. Security of Your Personal Data
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
We also use third-party providers, including Shopify and payment providers, that maintain their own security measures.
However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.
12. Cookies and Tracking Technologies
Florettee uses cookies and similar technologies to operate and improve our website, remember preferences, understand website usage and, where applicable, support analytics and marketing activities.
Some cookies are necessary for the website to function. Other cookies, including certain analytics or advertising cookies, may require your consent before they are used.
You can manage your cookie preferences through the cookie controls available on our website.
Further information about the cookies and tracking technologies we use should be provided in our Cookie Policy.
13. Marketing Communications
Where permitted by law, we may use your contact information to send you news, product information, offers and other Florettee marketing communications.
Where consent is required, we will send these communications only after obtaining appropriate consent.
You can unsubscribe from marketing emails at any time by:
-
Clicking the unsubscribe link included in our marketing emails; or
-
Contacting info@florettee.com.
Unsubscribing from marketing communications will not prevent us from sending necessary service communications relating to an order, payment, return or other transaction with you.
14. Third-Party Links
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of websites that we do not operate. We encourage you to review the privacy information provided by those organisations before providing personal information to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, business practices, technology or legal obligations.
The latest version will be published on florettee.com, together with the relevant effective or last-updated date.
Where required by law, we will provide appropriate notice of material changes.
16. Contact Us
If you have questions about this Privacy Policy, wish to exercise a data protection right or have concerns about how we process your personal information, please contact:
Florettee Ltd
Registered Company No: 14894459
Park Lane, Langham
Colchester, England
CO4 5WR
Email: info@florettee.com
Website: florettee.com
You also have the right to raise a complaint with the Information Commissioner's Office (ICO) if you believe your personal information has been processed in breach of applicable data protection law.