Privacy Policy for Coastal Rose

At Coastal Rose, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

Coastal Rose is a floristry and botanical design company located at 17 Harbour View Crescent, Suite 3, Brighton, East Sussex, BN2 5NB, UK.

Information We Collect

We may collect personal information from you in a variety of ways when you interact with our online platform or engage with our services. This includes:

• Personal Identifiers: Such as your name, email address, postal address, and phone number when you place an order, subscribe to our newsletter, register for a workshop, or contact us.
• Transaction Data: Details of products and services you have purchased from us, including bespoke floral arrangements, daily fresh flower deliveries, plants, succulent sales, floral workshops, wedding floristry, corporate floral styling, sympathy and funeral flowers, and plant subscriptions.
• Payment Information: While we do not directly store credit card details, securely processed through third-party payment gateways, we may receive transaction confirmations.
• Correspondence: Records of your communications with us, including emails, phone calls, and other methods of contact.
• Technical Data: Information about how you access and use our website, including your IP address, browser type, operating system, referral sources, and pages viewed. This is collected through cookies and similar technologies.

How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Manage Services: Fulfilling your orders for floral arrangements, plants, subscriptions, and workshop registrations.
• To Process Transactions: Handling payments for our products and services.
• To Communicate with You: Sending order confirmations, shipping updates, processing inquiries, and providing customer support.
• To Improve Our Services: Understanding how our website and services are used to enhance user experience, product offerings, and customer satisfaction.
• For Marketing: Sending promotional content about new products, special offers, and workshops, where you have consented to receive such communications.
• For Security: Protecting our website and services from fraud and other security threats.
• To Comply with Legal Obligations: Adhering to applicable laws and regulations.

Legal Basis for Processing Personal Data (GDPR)

For individuals within the European Economic Area (EEA) and the UK, we rely on the following legal bases for processing your personal data:

• Contractual Necessity: To fulfill orders and services you have requested (e.g., fulfilling a flower delivery).
• Legitimate Interests: For improving our website and services, marketing our products (where applicable), and for security purposes, provided these do not override your rights and freedoms.
• Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications. You have the right to withdraw your consent at any time.
• Legal Obligation: When processing is necessary to comply with a legal or regulatory obligation.

Disclosure of Your Information

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, website hosting, delivery services, and marketing support. These service providers are obligated to protect your information.
• Legal and Regulatory Authorities: When required by law or to respond to valid legal processes.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell your personal data to third parties.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights (GDPR)

If you are located in the EEA or UK, you have the following rights concerning your personal data:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Effective Date" and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Coastal Rose

17 Harbour View Crescent, Suite 3

Brighton, East Sussex, BN2 5NB

United Kingdom