Privacy Policy

Last updated: 3rd March 2026

Sarah Maylin Flowers Ltd is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains how we collect, use and protect your personal information when you visit our website, place an order or contact us.

1. Who We Are

Sarah Maylin Flowers Ltd
Trading as Sarah Maylin Flowers
Parsonage Ln, King's Walden, Hitchin SG4 8LF
Email: info@sarahmaylinflowers.com

For the purposes of UK data protection law, we are the “data controller” of your personal information.

2. What Information We Collect

We may collect and process the following personal data:

• Name
• Billing and delivery address
• Email address
• Telephone number
• Order details and purchase history
• Payment information (processed securely via our payment providers. We do not store full card details)
• Wedding or event details you choose to share
• Website usage data (via cookies and analytics tools)

3. How We Use Your Information

We use your personal data to:

• Process and fulfil your orders
• Deliver flowers and related services
• Communicate with you about your order
• Respond to enquiries
• Provide wedding consultations and quotes
• Improve our website and customer experience
• Send marketing communications (only if you have opted in)

4. Lawful Basis for Processing

We process your data under the following lawful bases:

• Contractual necessity – to fulfill orders and provide services
• Legitimate interests – to operate and improve our business
• Consent – where you opt in to marketing communications
• Legal obligation – for accounting and tax compliance

5. Sharing Your Data

We only share your data where necessary, including:

• Payment processors (e.g. Stripe, PayPal or Squarespace Payments)
• Delivery services
• IT and website hosting providers
• Professional advisers (accountants, insurers)

We do not sell or rent your personal data to third parties.

6. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purpose it was collected for
• Comply with legal and accounting obligations
• Resolve disputes

Typically:

• Order information is retained for up to 6 years (for tax purposes)
• Marketing consent records are retained until withdrawn

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict processing
• Object to processing
• Withdraw consent (for marketing)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO Website: https://ico.org.uk

To exercise your rights, please contact us at info@sarahmaylinflowers.com

8. Marketing Communications

We will only send marketing emails where you have opted in.

You may unsubscribe at any time using the link in our emails or by contacting us directly.

9. Use of Images and Photography

From time to time, we may take photographs of our floral arrangements, installations and event styling for portfolio, marketing and promotional purposes.

This may include:

• Wedding bouquets and arrangements
• Venue styling and installations
• Corporate displays
• Styled shoots
• In-store displays

We aim to focus on the flowers and overall styling rather than individuals.

Weddings & Private Events

• We may use professional photographs supplied by the couple or photographer (with appropriate permission where required and/or requested)
• We may share images on our website, social media, marketing materials and printed portfolio

If you would prefer that images from your wedding or event are not used for marketing purposes, please notify us in writing before or after your event and we will fully respect your wishes.

User-Submitted Images

If you share images with us via email, social media or messaging platforms, you grant us permission to repost or feature these images unless you specifically request otherwise.

Withdrawal of Consent

If you previously consented to image use and later wish for images to be removed, please contact us and we will make reasonable efforts to remove them from future use.

Public Venues

Where photography is taken in public venues or supplied by third-party photographers, copyright may remain with the photographer and we will credit where appropriate.

10. Cookies

Our website uses cookies to improve functionality and analyse traffic.

You can manage cookie preferences through your browser settings.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure website hosting
• SSL encryption
• Restricted access to customer information
• Secure payment processing systems

12. Changes to This Policy

We may update this policy from time to time. The most current version will always be available on our website.