Privacy & Data Protection

   Last updated: 6 August 2026                                                             

 

 

                                                                    About Flowers Talking

​

Flowers Talking is a UK-based sole-trader business specialising in bespoke printed roses for professional clients.

For the purposes of applicable UK data protection law, Flowers Talking is the data controller responsible for deciding how and why the personal data described in this notice is collected and used.

Website: www.flowerstalking.co.uk
Data protection contact: info@flowerstalking.co.uk
Business location: United Kingdom

​

                                                                  Scope of This Notice

​

This Privacy & Data Protection Notice explains how Flowers Talking collects, uses, stores, shares and protects personal data relating to:

• visitors to our website;

• prospective and existing clients;

• individuals submitting enquiries or bespoke sample requests;

• professional partners, suppliers and service providers;

• representatives, employees and contractors of organisations with which we work; and

• individuals whose personal data is included in project materials supplied to us.

This notice applies to personal data collected through our website, online forms, email, telephone, quotations, order confirmations, project documentation, professional correspondence and other business communications.

                                                             Personal Data We May Collect

​

Depending on the nature of your interaction with Flowers Talking, we may collect and process the following categories of personal data.

Identity and contact information

This may include:

• your name;

• business or personal email address;

• telephone number;

• postal, billing or delivery address; and

• other information required to communicate with you.

Professional and organisational information

This may include:

• your job title or professional role;

• the name of your organisation;

• your organisation’s website;

• your business sector; and

• your relationship with the organisation you represent.

Enquiry, sample-request and project information

This may include information concerning:

• your enquiry or proposed collaboration;

• the type and purpose of the project;

• event details;

• required dates;

• delivery arrangements;

• rose colours, varieties and quantities;

• names, dates, wording and messages;

• logos, artwork, monograms, symbols and reference files; and

• other instructions or specifications supplied for the project.

Order and transaction information

This may include:

• quotations;

• written approvals;

• order confirmations;

• invoices;

• payment status;

• delivery or handover information; and

• accounting and transaction records.

Where payments are processed through a bank or third-party payment provider, Flowers Talking does not ordinarily receive or retain complete payment-card details.

Communications

This may include:

• emails;

• online form submissions;

• telephone communications;

• written design approvals;

• feedback;

• complaints; and

• other correspondence exchanged with us.

Website and technical information

Where applicable, this may include:

• Internet Protocol address;

• browser and device information;

• cookie or similar technology identifiers;

• website usage and interaction data;

• approximate location derived from technical data;

• security and diagnostic logs; and

• information used to protect and maintain the website.

Communication preferences

This may include information about:

• whether you wish to receive particular communications;

• whether you have objected to direct marketing; and

• any communication preferences you have provided.

• ​

                                                Personal Data Relating to Other Individuals

​

Project materials may contain personal data relating to individuals other than the person submitting the material. This may include names, photographs, personal messages, dates or event-related information.

Where you provide personal data concerning another person, you confirm that:

• you are authorised to provide and use that information;

• the proposed use is lawful;

• any necessary permission has been obtained; and

• any legally required privacy information has been provided to that person.

Please do not provide unnecessary health, religious, political or other sensitive personal information through our website forms or general correspondence.

Where sensitive information is genuinely necessary for an agreed project, it will be processed only where an appropriate legal basis and any additional condition required by law apply.

​

                                                             How We Obtain Personal Data

​

Flowers Talking may obtain personal data:

• directly from you;

• from another authorised representative of your organisation;

• from a professional partner, organiser, florist, decorator, venue, supplier or referrer;

• through our website and online forms;

• through email, telephone and professional correspondence;

• from publicly available business websites, professional directories and other legitimate professional sources; or

• through the technical systems used to operate and secure our website.

Where we obtain personal data from another source, we will provide appropriate privacy information within the period required by law, unless an applicable exemption applies.

​

                                                         How and Why We Use Personal Data

​

Flowers Talking processes personal data only where an appropriate lawful basis applies.

Enquiries and bespoke sample requests

We use personal data to:

• receive and respond to enquiries;

• review bespoke sample requests;

• assess whether a potential project or professional collaboration is suitable;

• verify relevant professional information; and

• communicate our decision or request further information.

The relevant lawful bases are:

• taking steps at your request before entering into a contract; and

• our legitimate interests in responding to genuine professional enquiries and assessing prospective commercial relationships.

Quotations, projects and orders

We use personal data to:

• prepare quotations;

• discuss project requirements;

• develop designs and specifications;

• produce proofs or samples;

• obtain written approval;

• produce personalised roses;

• manage confirmed orders;

• arrange delivery or professional handover; and

• provide appropriate project and after-sales communication.

The relevant lawful basis is the performance of a contract or taking steps at your request before entering into a contract.

Payments, accounting and legal compliance

We may process personal data to:

• issue and administer invoices;

• monitor payment status;

• maintain accounting and tax records;

• comply with legal and regulatory obligations;

• manage insurance matters;

• investigate complaints; and

• establish, exercise or defend legal claims.

The relevant lawful bases may include:

• performance of a contract;

• compliance with a legal obligation; and

• our legitimate interests in maintaining accurate business records and protecting our legal and commercial interests.

Professional relationship management

We may process personal data to:

• maintain communications with professional contacts;

• manage relationships with clients, suppliers and collaborators;

• provide information relevant to an existing project or relationship; and

• improve the administration and delivery of our services.

The relevant lawful basis is our legitimate interest in operating and developing a professional business and maintaining effective commercial relationships.

Security, fraud prevention and business protection

We may process personal data to:

• protect our website, systems and communications;

• detect or prevent fraud, misuse and unauthorised activity;

• verify the authenticity of enquiries or orders;

• investigate suspected wrongdoing; and

• protect our legal, financial and commercial interests.

The relevant lawful bases are our legitimate interests and, where applicable, compliance with legal obligations.

Professional communications and direct marketing

Where permitted by law, Flowers Talking may use relevant professional contact information to communicate about:

• an existing business relationship;

• a previous enquiry;

• a related service;

• a potential professional collaboration; or

• Flowers Talking services that may be relevant to the recipient’s professional role.

We may rely on legitimate interests for relevant and proportionate business-to-business communications, subject to applicable data protection and electronic marketing rules.

Where consent is required, we will not send the relevant communication unless valid consent or another lawful exception applies.

All direct marketing communications will identify Flowers Talking and provide a clear way to object or opt out.

Website operation, analytics and cookies

We may process technical information to:

• operate and secure the website;

• remember visitor preferences;

• diagnose technical problems;

• understand website performance and use; and

• improve the website and user experience.

Essential technologies are used where necessary for the operation and security of the website.

Non-essential analytics, marketing or similar technologies will be used only where enabled and after any legally required consent has been obtained.

​

                                                                       Legitimate Interests

​

Where Flowers Talking relies on legitimate interests, those interests may include:

• responding to relevant professional enquiries;

• assessing potential projects and collaborations;

• managing client, supplier and professional relationships;

• developing and protecting the business;

• maintaining appropriate business records;

• securing our website, systems and communications;

• preventing fraud and misuse; and

• establishing, exercising or defending legal claims.

Before relying on legitimate interests, we consider:

• whether the proposed processing is necessary;

• whether the processing is proportionate;

• the nature of the personal data;

• the reasonable expectations of the individual; and

• whether the individual’s interests, rights or freedoms override our interests.

• ​

                                                                  Sharing Personal Data

​

Flowers Talking does not sell personal data.

We may share personal data only where reasonably necessary with:

• website-platform, hosting and online-form providers;

• email, telephone, cloud-storage and communications providers;

• approved florists, decorators, venues, production partners and other professional collaborators involved in an agreed project;

• couriers, transport providers and delivery services;

• banks, payment providers, bookkeepers and accountants;

• IT, website-support and cybersecurity providers;

• insurers, solicitors and other professional advisers;

• government bodies, courts, law-enforcement agencies, regulators or tax authorities where disclosure is required or permitted by law; or

• a prospective purchaser, successor or adviser in connection with a proposed restructuring, transfer or sale of all or part of the business.

Service providers may process personal data only for authorised purposes and subject to appropriate contractual, confidentiality, security or data-protection obligations.

We will not disclose client names, logos, artwork, event details or commissioned work for publicity or portfolio purposes without prior written permission.

​

                                                               International Data Transfers

​

Some website, hosting, email, cloud-storage, communications or technical service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the United Kingdom, Flowers Talking will take reasonable steps to ensure that the transfer is lawful and that appropriate protection is maintained.

Depending on the circumstances, safeguards may include:

• a UK adequacy regulation;

• the UK International Data Transfer Agreement;

• the UK Addendum to approved Standard Contractual Clauses;

• appropriate contractual and technical safeguards; or

• another lawful transfer mechanism recognised under UK data protection law.

Further information about the safeguards applicable to a particular transfer may be requested using the contact details in this notice.

                                                                         Data Retention

​

Flowers Talking retains personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, tax, accounting, insurance and dispute-resolution requirements.

Ordinarily:

• general enquiries and unsuccessful sample requests may be retained for up to 12 months after the last meaningful communication;

• quotations that do not result in a confirmed project may be retained for up to 24 months;

• client, project, design-approval, order, invoice, payment and transaction records may be retained for up to six years after completion of the relevant project or commercial relationship;

• complaints, disputes and legal records may be retained for as long as reasonably necessary to investigate the matter or establish, exercise or defend legal claims;

• marketing objection and suppression records may be retained for as long as necessary to ensure that the individual is not contacted contrary to their stated preference; and

• technical, security and cookie information will be retained in accordance with the relevant system, cookie settings and service-provider retention periods.

Information may be retained for longer where required by law, taxation requirements, regulatory investigation, insurance requirements, litigation or another legitimate and documented reason.

When personal data is no longer required, it will be securely deleted, anonymised or otherwise removed from active use where reasonably practicable.

​

                                                                         Data Security

​

Flowers Talking uses reasonable and proportionate technical and organisational measures designed to protect personal data against:

• unauthorised access;

• accidental loss;

• misuse;

• alteration;

• unauthorised disclosure; and

• destruction.

Measures may include appropriate access controls, password protection, secure service providers, restricted access to records and reasonable procedures for handling and disposing of information.

Access to personal data is limited to individuals and service providers who require it for legitimate business purposes and who are subject to appropriate confidentiality or data-protection obligations.

No internet transmission, email system or electronic-storage method can be guaranteed to be completely secure.

Where a personal data breach occurs, Flowers Talking will assess the incident and notify the relevant authority and affected individuals where required by law.

​

                                                  Cookies and Similar Technologies

​

Our website may use:

• essential cookies and technologies required for website security and operation;

• preference technologies that remember visitor choices;

• analytics technologies used to understand website performance; and

• other non-essential technologies where enabled.

Essential cookies may be used without consent where they are strictly necessary for the service requested by the visitor.

Non-essential cookies or similar technologies will not be activated unless the legally required consent has been obtained.

Visitors must be given an appropriate opportunity to:

• accept non-essential cookies;

• reject non-essential cookies;

• manage individual preferences; and

• change or withdraw their choices later.

Further information about individual cookies, their purposes and their duration may be provided through the website’s cookie-management tool.

                                                                          Direct Marketing

​

Flowers Talking may send relevant business-to-business marketing communications to corporate subscribers where permitted by applicable electronic marketing law.

Where a communication is sent to an identifiable business contact, Flowers Talking will also comply with applicable data protection requirements.

Flowers Talking will not send unsolicited electronic marketing to individual subscribers, including sole traders and certain partnerships, unless:

• valid consent has been obtained;

• all requirements of an applicable soft opt-in are satisfied; or

• another lawful exception applies.

Every marketing communication will:

• identify Flowers Talking;

• provide accurate contact information; and

• provide a clear and simple way to object or opt out.

If you object to direct marketing, Flowers Talking will stop using your personal data for that purpose and may retain a limited suppression record to ensure that your preference continues to be respected.

To object or opt out, contact:

info@flowerstalking.co.uk

                                                              Your Data Protection Rights

​

Depending on the circumstances and the lawful basis used, you may have the right to:

• be informed about how your personal data is used;

• request access to the personal data held about you;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• object at any time to direct marketing;

• request the transfer of certain personal data in a portable format;

• withdraw consent at any time where processing is based on consent; and

• complain about how your personal data has been handled.

These rights are not absolute. A request may be limited or refused where an applicable legal obligation, exemption, contractual requirement or the rights of another person apply.

We may request reasonable information to verify your identity and ensure that personal data is not disclosed to an unauthorised person.

Flowers Talking will respond to valid data-protection rights requests without undue delay and ordinarily within one month. Where permitted by law, this period may be extended if a request is particularly complex or if multiple requests have been received. You will be informed of any permitted extension.

A fee will not normally be charged. However, a reasonable fee may be charged, or a request may be refused, where permitted by law because the request is manifestly unfounded or excessive.

To exercise a data-protection right, contact:

info@flowerstalking.co.uk

                                                                     Your Right to Object

​

You have the right to object to processing based on legitimate interests where your particular circumstances give you grounds to object.

Flowers Talking will stop the relevant processing unless:

• compelling legitimate grounds exist that override your interests, rights and freedoms; or

• the processing is required for the establishment, exercise or defence of legal claims.

Your right to object to direct marketing is absolute. If you object to direct marketing, Flowers Talking will stop using your personal data for that purpose.

​

                                                                 Automated Decision-Making

​

Flowers Talking does not currently use personal data to make decisions that produce legal or similarly significant effects solely by automated means.

If this changes, this notice will be updated and any information required by law will be provided.

​

                                                                Children’s Personal Data

​

The Flowers Talking website and services are intended for adults and professional users and are not directed at children.

Flowers Talking does not knowingly collect personal data directly from children through the website.

Where project material contains information relating to a child, the person supplying the information must have the authority and lawful basis required to provide and use it.

​

                                                  Data-Protection Enquiries and Complaints

​

Questions, requests, objections or complaints concerning the use of personal data should be sent to:

Flowers Talking
Email: info@flowerstalking.co.uk

Flowers Talking will:

• provide a clear method for raising a data-protection complaint;

• acknowledge receipt of a complaint within 30 days;

• investigate the complaint appropriately;

• make appropriate enquiries;

• keep the complainant informed where necessary; and

• communicate the outcome without undue delay.

You also have the right to complain to the United Kingdom’s independent data-protection authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113

You may contact the Information Commissioner’s Office without first making a complaint to Flowers Talking, although raising the matter with us first may allow it to be resolved more quickly.

​

                                                                       Changes to This Notice

​

Flowers Talking may update this Privacy & Data Protection Notice to reflect changes in:

• our services;

• our business practices;

• the technology we use;

• our service providers;

• applicable law; or

• regulatory guidance.

The latest version will be published on this website with an updated revision date.

Material changes may also be communicated directly where appropriate and reasonably practicable.

​

                                                                                          Contact

​

For privacy enquiries, data-protection rights requests, objections or complaints, contact:

Flowers Talking
Email: info@flowerstalking.co.uk
Website: www.flowerstalking.co.uk
Location: United Kingdom