Privacy policy

Northern Bloom Florist Ltd, trading as Northern Bloom Florist, of 47 Whitworth Street West, Manchester M15 4DJ, is the data controller for the personal information described in this policy. You can reach us on +44 161 834 5927 or at hello@northernbloom.co.uk.

This policy explains what we collect, why we collect it, how long we keep it and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Enquiry and order details: your name, email address, telephone number, the date you need flowers for, any allergy or sensitivity notes you choose to share, and the content of your message.

Delivery details: the recipient's name and delivery address, where you give them to us so we can fulfil an order.

Technical data: essential cookies required to keep the website working, and — only if you accept them — anonymous analytics about which pages are viewed.

We do not collect special category data, and we ask that you do not send medical detail beyond the practical allergy note needed to make your flowers safely.

To answer your enquiry and prepare a quote — lawful basis: your consent, given via the tick box on our enquiry form.

To fulfil an order you have placed — lawful basis: performance of a contract with you.

To keep accounting records and meet our tax obligations — lawful basis: legal obligation.

To improve the website — lawful basis: consent, given through the cookie banner.

Enquiries that do not become orders are deleted 12 months after the last contact.

Order and invoice records are kept for 6 years plus the current financial year, as HMRC requires.

Analytics data, where you have consented, is retained for 14 months.

We never sell your data and we never pass it to third parties for marketing.

We share only what is necessary with: our website and database host (Totalum), our payment processor for card transactions, our accountant, and — for a specific delivery — the recipient's address with our own delivery driver.

Where you order through Deliveroo, Uber Eats or Just Eat, those platforms are separate data controllers and their own privacy policies apply to the data you give them.

All our processors are contractually bound to process data only on our instructions and to keep it secure.

You have the right to access a copy of your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, and to data portability. Where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, email hello@northernbloom.co.uk or write to us at 47 Whitworth Street West, Manchester M15 4DJ. We will respond within one calendar month, free of charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

The website is served over HTTPS and enquiry data is stored in an access-controlled database. Only Sarah and James have access to enquiry records. We review who has access whenever a member of staff joins or leaves.