We may use information that we collect about you to:

• Provide our products and services: To deliver what you've requested and ensure a smooth user experience.
• Improve our products and services: We may conduct research and analysis about your use of our products, services or content (or those of third parties), to make improvements and develop new offerings.
• Communicate with you: To send relevant updates, news, or product features. You can opt out of marketing communications at any time.
• Respond to your enquiries: To respond to your questions or comments.
• Notify you of important changes: Including changes to services, privacy policy, or fraud/security updates.

We may also develop and display content or advertising tailored to your interests on our Site and on other platforms. Your information may also be used to support our business operations or for other purposes explained at the time of collection.

Sharing and Disclosure

We do not share your personal data with others except as set out below or with your consent.

Third-Party Service Providers

We may share data with service providers who help us operate our business (e.g. payment processors, marketing services, customer service providers, IT infrastructure, or debt collection). These third parties may access your data only for the purposes of providing these services and are not authorised to use or disclose your data for any other reason.

Analytics

We use Google Analytics to understand how users interact with our Site. Google Analytics may collect and use your data to personalise its advertising. You can opt out of Google Analytics using the browser add-on: https://tools.google.com/dlpage/gaoptout. More info: https://www.google.com/policies/privacy/

Advertising

We may use third-party providers (such as Google AdSense and Facebook) to deliver tailored advertising. These services use cookies to inform and optimise ads based on previous browsing behaviour. You can manage your ad settings via:

• Google: https://www.google.com/ads/preferences/
• Facebook: https://www.facebook.com/help/568137493302217/

We do not currently respond to "Do Not Track" browser settings.

Payment Providers

We offer paid products and services. Payment details are processed by third-party providers (e.g Stripe and PayPal). We do not store your card details. These providers comply with PCI-DSS standards. Their own privacy notices govern how they use your information.

Legal Requirements

We may disclose personal data to comply with legal obligations, protect rights or safety, prevent fraud, or enforce terms of service.

Business Transfers

If we undergo a sale, merger, acquisition or insolvency, your data may be transferred to a successor or acquirer as part of that process.

External Links

We may link to external sites. We are not responsible for their content or privacy practices. Please review their privacy policies before providing any data.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or to comply with legal obligations, resolve disputes, and enforce agreements. Usage data may be retained for shorter periods unless it is required for security or functionality.

Your Rights and Choices

We aim to provide you with control over your personal data. You have the following rights:

• Access: To request a copy of the personal data we hold.
• Rectification: To correct any inaccurate or incomplete data.
• Erasure: To request deletion where appropriate (e.g. no longer necessary, consent withdrawn).
• Objection: To object to processing based on our legitimate interests or for direct marketing.
• Restriction: To request a pause in processing (e.g. to verify accuracy).
• Data Portability: To request transfer of your data in a machine-readable format.
• Withdraw Consent: To withdraw consent at any time, where processing is based on consent.

You can exercise these rights by emailing us at gdpr@thecutflower.club.

We will respond within one month, or advise you if more time is needed. No fee is charged unless the request is unfounded, repetitive, or excessive.

To protect your data, we may ask for proof of identity before processing any request.

Security

We use appropriate administrative and technical measures to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.

Children

Our Site is not intended for children under 16. If you believe your child has provided personal data, please contact us.

Changes to This Policy

We may update this policy occasionally. Continued use of the Site after changes take effect indicates your acceptance.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: gdpr@thecutflower.club