Privacy Policy

Effective Date: 21 August 2026

At Eden Cupcake Floristry, we value your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, contact us, subscribe to our marketing communications or otherwise interact with our services.

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Eden Cupcake Floristry is responsible for the personal information we process in connection with our business.

1. Information We Collect

Depending on how you interact with Eden Cupcake Floristry, we may collect the following information:

Personal information

This may include:

• your name;
• email address;
• telephone number;
• billing and delivery address;
• order details;
• information you provide when making an enquiry or placing a bespoke order; and
• other information you voluntarily provide to us.

Payment information

Payments may be made through payment links or invoices supplied through Square.

We do not ordinarily receive or store your full payment-card details. Payment information is processed by the relevant payment provider in accordance with its own privacy policy and security procedures.

Website usage information

When you use our website, certain technical information may be collected automatically, which may include:

• IP address;
• browser type;
• device information;
• operating system;
• pages visited;
• approximate usage information; and
• information collected through cookies or similar technologies.

Marketing information

If you subscribe to our newsletter or marketing communications, we may collect information such as your name, email address and marketing preferences.

You can unsubscribe from marketing communications at any time.

2. How We Use Your Information

We may use your personal information to:

• process and fulfil your orders;
• arrange delivery or collection of your orders;
• communicate with you about your orders, enquiries or requests;
• provide quotations and bespoke-order information;
• process payments through our payment providers;
• send newsletters, promotions and other marketing communications where permitted and, where required, where you have given consent;
• administer and improve our website and services;
• understand website usage and improve customer experience;
• maintain appropriate business and financial records;
• comply with legal and regulatory obligations;
• prevent or investigate fraud, misuse or other unlawful activity;
• deal with complaints and disputes; and
• establish, exercise or defend our legal rights where necessary.

We will only process your personal information where we have a lawful basis for doing so under applicable data protection law.

3. Sharing Your Information

We do not sell or rent your personal information.

We may share personal information where reasonably necessary with trusted third parties who help us operate our business, including:

Service providers

These may include:

• payment processors, such as Square;
• delivery or courier services where required to fulfil an order;
• website and hosting providers;
• email marketing providers, such as MailerLite;
• analytics and website service providers; and
• other service providers where necessary to provide our services.

These providers may process personal information on our behalf or as independent organisations responsible for their own processing.

Legal and regulatory authorities

We may disclose personal information where required by law, regulation, court order or other lawful authority, or where necessary to protect our rights, property or safety.

4. Cookies and Tracking

Our website may use cookies and similar technologies to:

• enable website functionality;
• improve your browsing experience;
• understand website traffic and usage;
• analyse website performance; and
• support certain website features.

Some cookies may be placed by third-party services used on our website.

Where applicable, you will be given choices regarding non-essential cookies.

You can also control or disable cookies through your browser settings. However, disabling certain cookies may affect how some parts of our website function.

5. Data Retention

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide our services;
• fulfil and maintain records of orders;
• comply with legal, accounting and regulatory obligations;
• deal with complaints or disputes;
• establish, exercise or defend legal claims; and
• maintain appropriate business records.

The length of time we retain information will depend on the type of information and the reason we need it.

Where personal information is no longer required, we will take reasonable steps to securely delete or dispose of it.

6. Your Data Protection Rights

Depending on the circumstances, you may have rights under applicable UK data protection law, including:

• The right to be informed about how your personal information is used;
• The right of access to the personal information we hold about you;
• The right to rectification of inaccurate or incomplete personal information;
• The right to erasure of your personal information in certain circumstances;
• The right to restrict processing in certain circumstances;
• The right to object to certain types of processing;
• The right to data portability where applicable; and
• The right to withdraw consent where we rely on consent as the lawful basis for processing.

These rights are not absolute and may not apply in every circumstance.

For example, we may be legally required to retain certain information even if you ask us to delete it.

How to exercise your rights

If you wish to exercise one of your data protection rights, please contact us using the contact details provided in Section 10.

We may need to request information reasonably necessary to verify your identity before fulfilling certain requests.

7. Data Protection Complaints

We take concerns about the handling of personal information seriously.

If you believe that Eden Cupcake Floristry has collected, used, stored, disclosed or otherwise handled your personal information inappropriately, you can make a data protection complaint to us.

You can make a complaint through our dedicated:

[Data Protection Complaints Form]

You may also contact us directly using the contact details in Section 10.

You do not need to use legal terminology or refer to a specific data protection law when making a complaint.

How we will handle your complaint

When we receive a data protection complaint, we will:

1. acknowledge receipt within 30 days;
2. review and investigate the complaint appropriately;
3. contact you if we need additional information or clarification;
4. keep you informed about the progress of the complaint where appropriate; and
5. communicate the outcome of our investigation without unjustifiable or excessive delay.

Further information about how we handle data protection complaints is available in our:

[Data Protection Complaints Policy]

8. Complaining to the Information Commissioner's Office

If you are dissatisfied with how we have handled your personal information, we encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

Information Commissioner's Office (ICO)

You can find information about making a complaint on the ICO's website:

Make a data protection complaint to the ICO

9. Security

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

10. Children's Privacy

Our website and services are primarily intended for adults.

We do not knowingly collect personal information from children where doing so would require parental or guardian consent.

If you believe that a child has provided us with personal information without appropriate consent, please contact us so that we can investigate and take appropriate action.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or wish to contact us regarding your personal information, you can contact:

Eden Cupcake Floristry

Email: info@edencupcakefloristry.org.uk
Telephone: 07397384869
Address: 27 Stokes Drive, Godmanchester, PE29 2UW

You can also use our Data Protection Complaints Form for data protection complaints.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, legal requirements or data-processing practices.

The most recent version will be available on our website and the effective date will be displayed at the top of the policy.

This Privacy Policy explains how we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Eden Cupcake Floristry is the data controller for wholesale customer information.

2. Personal Data We Collect

We may collect and process: Business name, Contact name, Email address, Telephone number, Delivery and billing address, Payment and transaction information, Order history and correspondence

3. Lawful Basis for Processing

We process personal data under the following lawful bases: Contractual necessity (to fulfil wholesale agreements), Legitimate interests (business administration and communication), Legal obligation (accounting and tax compliance)

4. How We Use Your Data

Your data is used solely for: Order processing and fulfilment, Invoicing and payment management, Delivery coordination, Regulatory compliance, Wholesale account administration, We do not sell, rent or trade wholesale customer data to third parties for marketing purposes.

5. Data Sharing

Data may be shared only where necessary with: Accountants or professional advisers, Delivery partners, Payment processing providers, Regulatory authorities where legally required, All third parties are required to maintain appropriate data security standards.

6. Data Retention

We retain wholesale records for the period required by UK tax and accounting law (currently 6 years), unless a longer retention period is required by law.

7. Data Security

We implement appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss or misuse.

8. Your Rights Under UK GDPR

You have the right to: Access your personal data, Rectify inaccurate data, Request erasure (where legally permissible), Restrict processing, Object to processing based on legitimate interests, Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Contact for Privacy Matters

Email: info@edencupcakefloristry.org.uk

Business Address: 27 Stokes Drive, Godmanchester, PE29 2UW

Phone: 07397384869

 

We reserve the right to update these Terms & Policies periodically. The most current version will apply to all active wholesale accounts.

Place an Order