Privacy Policy

Last updated: 01.02.2026

1. Who We Are

This Privacy Policy explains how Moss&Ivy Florist (“we”, “us”, “our”) collects, uses, and protects your personal data.

Registered address: Unit 9, Market Hall,
Bedford,
MK40 1NS
Email: hello@floristmossandivy.uk
Phone: 07821911289

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).

2. Personal Data We Collect

We may collect and process the following personal data when you use our website or place an order:

  • Name
  • Billing and delivery address
  • Email address
  • Phone number
  • Order details and purchase history
  • Payment method (payments are processed securely by third-party providers; we do not store card details)
  • IP address and browser/device information

3. How We Use Your Data

We use your personal data to:

  • process and fulfil orders,
  • arrange delivery of flowers,
  • communicate with you about your order,
  • provide customer support,
  • process refunds where applicable,
  • prevent fraud and handle payment disputes,
  • comply with legal and tax obligations.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to fulfil your order and deliver products
  • Legal obligation – for accounting, tax, and regulatory compliance
  • Legitimate interests – to prevent fraud, defend disputes, and improve our services
  • Consent – for marketing communications (where applicable)

5. Payments

Payments on our website are processed securely via third-party payment providers such as Stripe and PayPal.

These providers handle your payment details in accordance with their own privacy policies. We do not store or have access to your full card information.

6. Delivery & Third Parties

To fulfil your order, we may share necessary data with trusted third parties, including:

  • delivery partners or couriers,
  • payment providers (Stripe, PayPal),
  • website hosting and IT service providers,
  • accounting or compliance services.

We only share data that is strictly necessary for these purposes.

7. Fraud Prevention & Disputes

We may use your personal data to:

  • verify transactions,
  • prevent fraudulent activity,
  • respond to chargebacks or payment disputes.

This may include sharing order information, delivery confirmation, and communications with payment providers or banks.

8. Marketing Communications

If you opt in to receive marketing communications, we may send you emails about offers, products, or updates.

You can withdraw your consent at any time by:

  • clicking the unsubscribe link in emails, or
  • contacting us directly.

We do not send marketing emails without consent.

9. Cookies & Tracking

Our website uses cookies and similar technologies to:

  • ensure the site functions correctly,
  • analyse website traffic,
  • improve user experience.

Non-essential cookies are used only with your consent.
For more details, please see our Cookie Policy.

10. Data Retention

We retain personal data only for as long as necessary:

  • order and transaction data: up to 6 years (legal requirement),
  • customer service communications: as needed to resolve issues,
  • marketing data: until consent is withdrawn.

11. Your Rights

Under UK GDPR, you have the right to:

  • access your personal data,
  • request correction of inaccurate data,
  • request deletion of your data (where legally permitted),
  • object to or restrict processing,
  • withdraw consent at any time,
  • lodge a complaint with the Information Commissioner’s Office (ICO).

12. Data Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, or disclosure.

13. Changes to This Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated revision date.

14. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

📧 hello@floristmossandivy.uk
 📞 07821911289