Customer Privacy & Data Protection Notice

Last Updated: July 2026
Compliance: UK GDPR & Data Protection Act 2018

At Z and F Flowers, we deeply respect your privacy and are fully committed to protecting your personal information. This Privacy Policy outlines how our website collects, processes, protects, and handles your data when you browse our catalog, make a purchase, or communicate with our store.

1. Data Collection & Information We Process

To process your orders, ensure smooth floral deliveries, and offer a personalized shopping experience, we may collect the following categories of data:

  • Identity & Contact Details: Full name, delivery address, billing address, phone number, and email address.
  • Order & Transaction Records: Purchased floral items, billing history, delivery preferences, and special message card notes.
  • Payment & Financial Data: Payment methods and transaction confirmations (processed securely via encrypted third-party payment gateways; we do not store full credit card details).
  • Technical & Network Identifiers: IP addresses, browser types, device specifications, and cookies generated during your visits.
  • Customer Support Inquiries: Any correspondence, notes, or media submitted when reaching out to our support team.

2. Purpose of Data Utilization

We process your personal information strictly for legitimate commercial and legal purposes, including:

  • Order Fulfillment & Service Delivery: Crafting your bespoke arrangements, processing payments, arranging courier dispatch, and sending order updates.
  • Customer Experience Optimization: Customizing our store layout, saving cart items, and remembering recipient preferences.
  • Communication & Support: Providing 24/7 assistance, verifying recipient availability, and addressing delivery inquiries.
  • Security & Fraud Safeguards: Safeguarding store infrastructure, verifying transactions, and preventing unauthorized activity.
  • Marketing & Promotional Updates: Delivering promotional offers or seasonal floral catalogs (only where explicit consent is provided or as permitted by law).

3. Data Sharing & Third-Party Platforms

We do not sell or lease your personal information. We only share relevant data with trusted partners essential to operating our store:

  • E-Commerce & Infrastructure Providers: Our online storefront is supported by secure hosting and e-commerce platforms (such as Shopify) that handle processing securely on our behalf.
  • Couriers & Delivery Partners: Necessary recipient addresses and contact numbers are provided to dispatch partners to guarantee fresh, timely delivery.
  • Payment Processors: Encrypted financial portals that execute safe card transactions.
  • Legal Authorities: Disclosure when mandated by UK law, legal subpoenas, or regulatory enforcement agencies.

4. Cookie Policy & Tracking Technologies

We utilize cookies and similar digital tags to analyze site traffic, preserve shopping cart contents, and deliver relevant advertisements. You can adjust your browser settings to block or notify you about cookies, though certain store features may require cookies to function properly.

5. Data Retention & Security Measures

We implement robust technical and organizational measures to defend your information against unauthorized access, loss, or alteration. We retain personal data only for as long as needed to complete order obligations, resolve customer disputes, and fulfill tax or UK legal record-keeping requirements.

6. Your Rights Under UK Data Protection Law

In compliance with UK GDPR and the Data Protection Act 2018, you possess specific legal rights concerning your personal information:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Ask us to correct inaccurate or incomplete details.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records, subject to legal storage duties.
  • Right to Restrict or Object: Limit or opt out of specific data processing activities, including marketing communications.

To exercise any of these rights, please submit a request to aamirvorauk121810@gmail.com.

7. Third-Party Links & External Sites

Our website may contain links to external sites or social media widgets. We do not control and are not responsible for the privacy practices or content of third-party domains. We encourage reviewing their policies independently.

8. Children's Privacy Protection

Our store services are directed to adults and are not intended for minors. We do not knowingly collect or store personal information from individuals under 16 years of age.

9. Policy Updates

We reserve the right to modify this Privacy Policy periodically to reflect shifts in store practices or statutory requirements. Revisions will be published here with an updated "Last Updated" timestamp.