Privacy Policy

1. Introduction

Jolene’s Swift Flowers (“we”, “us”, “our”) is based in Erskine and fully operates in accordance with UK GDPR. This privacy policy explains how we collect, use, store, and protect personal data when you visit our website, make orders or get in touch through forms, phone or email.

2. Data Controller

Jolene’s Swift Flowers
1 Kilpatrick Drive, Bridgewater Industrial Estate, Erskine, PA8 7AA
📞 0141 812 0855 · ✉️ joleneswiftflowers@hotmail.co.uk

3. Personal Data Collected

• Booking/order/enquiry forms: first and last name, phone number, email address, delivery details, bouquet preferences

• Communications: phone calls, emails or messages regarding orders, quotes, events

• Website analytics: anonymised IP, browser/device type, pages viewed, and visit duration—collected solely via essential and performance cookies; no advertising or profiling cookies used

4. How We Use Your Data

Your information is used to:

• Provide quotes, process orders, arrange same‑day deliveries, and service bespoke requests (including weddings, sympathy tributes, events)

• Confirm orders, send delivery updates, and follow‑ups

• Improve our site experience using anonymised analytics

• Fulfil financial, warranty, and record‑keeping obligations

5. Legal Basis for Processing

• Contractual necessity: to fulfil orders, bookings, and deliveries

• Legitimate interests: to operate and enhance our business and website

• Consent: for optional follow‑up or marketing communications (if opted in)

• Legal obligation: for statutory record retention

6. Data Sharing

We do not sell, rent, or lease your data. We share your information only with:

• Service providers (e.g., website host, email platform, analytics tools, delivery partners) acting under data‑processing agreements

• Legal/regulatory authorities, if required by law

7. Cookies & Analytics

• Essential cookies: support forms, navigation, and cart functionality

• Performance cookies: provide anonymised website usage stats (e.g., Google Analytics)
  No advertising, profiling, or third‑party tracking cookies are used

8. Data Retention

• Order/enquiry records: retained for up to 7 years (legal/financial compliance)

• Website analytics logs: session data deleted after 24 months; aggregated analytics retained as needed

9. Your Rights

Under UK GDPR, you can:

• Access, correct, delete, restrict or port your personal data

• Withdraw consent or object to processing
  To exercise your rights, contact us using the details above. You may also lodge a complaint with the ICO.

10. Security Measures

We use SSL encryption, secure hosting, access controls, and staff training. Though robust, no system is entirely secure.

11. International Data Transfers

All personal data is processed and stored within the UK—no overseas transfers occur.

12. Policy Updates

We may update this policy occasionally. The Effective Date will reflect the current version. Continued use of our site indicates acceptance of any updates.