1. Introduction
Magic Flower TD (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and protect your personal data when you:
- Visit our website
- Create an account
- Purchase products
- Contact us
It also explains your legal rights and how the law protects you.
This policy supplements any other notices we may provide and does not override them.
Important: Our website is not intended for children, and we do not knowingly collect data relating to children.
2. Key Terms
- Legitimate Interest – Our business interest in operating effectively and providing you with a secure and high-quality service, balanced against your rights.
- Performance of a Contract – Processing your data to fulfil a contract with you or take steps before entering into one.
- Legal Obligation – Processing your data to comply with applicable laws.
3. Who We Are (Data Controller)
Magic Flower TD is the data controller responsible for your personal data.
If you have any questions or want to exercise your rights, contact:
Data Protection Officer: Marcela Giurgiu
Email: marcela@myflowers.co.uk
4. The Data We Collect
We may collect and process the following types of personal data:
Identity Data
- Name, username, date of birth, gender
Contact Data
- Billing and delivery address, email, phone number
Financial Data
- Payment method details
Transaction Data
- Purchase history and payment details
Technical Data
- IP address, browser type, device info, location, operating system
Profile Data
- Account details, preferences, feedback, survey responses
Usage Data
- How you use our website and services
Marketing & Communications Data
- Preferences for receiving marketing
Aggregated Data
We may use anonymised data for analytics and statistics. This does not identify you personally.
Sensitive Data
We do not collect sensitive personal data (e.g. health, religion, political views).
5. If You Don’t Provide Data
If you fail to provide required personal data, we may not be able to:
- Process your order
- Provide services
We will inform you if this happens.
6. How We Collect Your Data
Directly from You
When you:
- Place orders
- Create an account
- Contact us
- Subscribe to marketing
- Enter competitions or surveys
Automatically
Through cookies and similar technologies when you use our website.
7. How We Use Your Data
We only use your data when legally allowed, including:
- To fulfil a contract
- For legitimate business interests
- To comply with legal obligations
We do not rely heavily on consent, except for marketing communications, which you can opt out of anytime.
8. What We Use Your Data For
We use your data to:
- Register you as a customer
- Process and deliver orders
- Manage payments and recover debts
- Communicate updates (terms, policies, etc.)
- Run promotions, surveys, and competitions
- Improve our website and services
- Prevent fraud and maintain security
- Personalise content and marketing
9. Marketing
Our Marketing
We may send you relevant offers if you:
- Have purchased from us, or
- Requested information
Third-Party Marketing
We do not share your data with third parties for marketing.
Opting Out
You can unsubscribe at any time by contacting us.
10. Change of Purpose
We only use your data for the purpose it was collected unless:
- The new use is compatible, or
- Required by law
11. Sharing Your Data
We may share your data in business situations such as:
- Selling or restructuring the business
- Merging with another company
Any new owner will follow this Privacy Policy.
12. Data Security
We use appropriate security measures to protect your data from:
- Loss
- Unauthorised access
- Misuse
Access is limited to authorised personnel only.
We also have procedures to handle data breaches and will notify you if required by law.
13. Data Retention
We keep your personal data only as long as necessary for:
- Legal requirements
- Business purposes
- Resolving disputes
Retention depends on:
- Data sensitivity
- Risk of misuse
- Legal obligations
14. Your Legal Rights
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion of your data
- Object to processing
- Restrict processing
- Transfer your data
- Withdraw consent (for marketing)
15. Fees
You will not usually need to pay to exercise your rights.
We may charge a reasonable fee if requests are excessive or repetitive.
16. Identity Verification
We may request information to confirm your identity before processing requests.
17. Response Time
We aim to respond within one month.
If your request is complex, we will inform you of any delay.
18. Complaints
You have the right to complain to the UK regulator:
Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk
However, we recommend contacting us first so we can resolve your concern.