Privacy Policy

Last updated: 9 November 2026

This Privacy Policy explains how Flower SLA Ltd ("we", "us", "our") collects, uses and protects personal information when you visit flowersla.online or interact with our services.

We are the data controller for the information you provide. You can contact us at any time at info@flowersla.online.

1. Who we are

Flower SLA Ltd
Company number: 13370259 (registered in England & Wales)
D-U-N-S Number: 228050080
Registered office: 169 High Street, Barnet, Hertfordshire, EN5 5SU, United Kingdom
Email: info@flowersla.online
Phone: +44 7507 790195

2. Information we collect

We collect the following categories of personal data:

  • Contact information you provide through our contact form: your name, email address, phone number (optional), subject and message.
  • Order information if you place an order: delivery address, recipient details and any instructions you share.
  • Technical data collected automatically: IP address, browser type, device type, pages visited and referring URL.
  • Cookie data as described in our Cookie Policy.

3. How we use your information

We use your data to:

  • respond to your enquiries and provide the services you request;
  • fulfil and deliver flower orders;
  • send you transactional messages (order confirmations, delivery updates);
  • comply with legal obligations under UK law, including tax and accounting records;
  • improve the website and the quality of our service;
  • prevent fraud and ensure the security of our systems.

4. Legal basis for processing

We rely on the following lawful bases under the UK GDPR and the Data Protection Act 2018:

  • Consent — when you tick the consent box on our contact form or opt in to optional cookies.
  • Contract — when processing is necessary to deliver flowers or services you have ordered.
  • Legal obligation — for retaining financial records required by HMRC.
  • Legitimate interests — for security, fraud prevention and basic analytics, where this does not override your rights.

5. Sharing your data

We do not sell your personal data. We share limited information only with:

  • our hosting and email providers, acting as processors under contract;
  • delivery partners when needed to complete an order;
  • our accountants and professional advisors;
  • UK authorities when required by law.

6. International transfers

If any of our processors are based outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK addendum.

7. How long we keep your data

We keep enquiry data for up to 24 months after our last contact. Financial records are retained for 6 years as required by HMRC. You can request earlier deletion at any time, subject to any legal obligation we have to retain certain records.

8. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • request deletion of your data in certain circumstances;
  • restrict or object to our processing;
  • receive a copy of your data in a portable format;
  • withdraw consent at any time where consent is our legal basis;
  • lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk.

To exercise any of these rights, please email us at info@flowersla.online.

9. Security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption, restricted internal access and regular review of our processors. No system is 100% secure, but we work to minimise risk.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted on the website.

11. Contact

If you have questions about this policy or how we handle your data, please write to:
Flower SLA Ltd, 169 High Street, Barnet, Hertfordshire, EN5 5SU, United Kingdom
or email info@flowersla.online.