PRIVACY POLICY | Puffs and Petals

WHO WE ARE

Puffs & Petals LTD is the data controller for personal data collected through puffsandpetals.co.uk.

WHAT DATA WE COLLECT

When you place an order or contact us through our website we may collect:

Your name
Your email address
Your phone number
Your delivery address
Your order details
Any additional information you provide in your order notes

When you visit our website we may also collect:

Your IP address
Browser type and version
Pages visited and time spent
Referring website

HOW WE USE YOUR DATA

We use your personal data to:

Process and fulfil your order
Communicate with you about your order
Send delivery notifications
Respond to enquiries
Improve our website and services
Send marketing communications where you have consented

LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

Contract - to fulfil your order
Legitimate interests - to improve our services and communicate with customers
Consent - for marketing communications

WHO WE SHARE YOUR DATA WITH

We do not sell your personal data to any third party.

We may share anonymised data with the following services:

Google Analytics and Search Console - to understand how our website is used and how people find us. Data is anonymised. Google's privacy policy applies: policies.google.com/privacy

Meta Pixel - to understand traffic from Instagram and Facebook. Meta's privacy policy applies: facebook.com/privacy/policy

Wix - our website platform. Wix processes data in accordance with their privacy policy: support.wix.com/en/article/privacy-policy

Payment processors - to process payments securely. Your card details are never stored by us.

Delivery partners - to fulfil your order. Only your name and delivery address are shared.

HOW LONG WE KEEP YOUR DATA

We keep your personal data for as long as necessary to fulfil your order and comply with our legal obligations. Order data is typically retained for six years in line with HMRC requirements.

Marketing consent data is retained until you withdraw consent.

YOUR RIGHTS

Under GDPR you have the right to:

Access the personal data we hold about you
Correct any inaccurate data
Request deletion of your data
Object to processing of your data
Withdraw consent for marketing at any time
Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights please contact us at info@puffsandpetals.co.uk

MARKETING COMMUNICATIONS

We will only send you marketing communications where you have explicitly consented. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.

Please see our Cookie Policy for information on how we use cookies.

THIRD PARTY LINKS

Our website may contain links to third party websites. We are not responsible for the privacy practices of those websites and recommend you review their privacy policies independently.

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. The current version will always be available at puffsandpetals.co.uk/privacy-policy.

CONTACT

For any privacy related queries please contact us at info@puffsandpetals.co.uk