Privacy Policy

The Ivy and Rose Bloom Bar ('we', 'us', 'our') is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our website or submit an enquiry.

Please read this policy carefully. By using our website you agree to the practices described below. If you have any questions, please contact us at [email protected].

1. Who We Are

The Ivy and Rose Bloom Bar is a bespoke wedding and event floristry business based in Kent, England. We are the data controller for the personal information you provide to us.

Contact: [email protected] | 07879 404231

2. What Data We Collect

When you submit an enquiry through our website, we collect the following personal data: your name, email address, phone number (optional), wedding date (optional), venue name (optional), approximate guest count (optional), and any additional details you choose to share in the message field.

We also collect standard technical data automatically when you visit our website, including your IP address, browser type, pages visited, and the date and time of your visit. This data is collected via server logs and, where applicable, analytics tools.

3. How We Use Your Data

We use the personal data you provide solely to respond to your enquiry, arrange consultations, prepare bespoke quotes, and manage your booking if you proceed with our services.

We do not use your data for unsolicited marketing, and we do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

Legitimate interests: to respond to enquiries you have submitted and to manage our business relationship with you.

Contract: where you proceed to book our services, processing is necessary to perform that contract.

Legal obligation: where we are required to retain records for tax or legal purposes.

5. How Long We Keep Your Data

Enquiry data is retained for up to 24 months from the date of your enquiry, or for the duration of our business relationship if you become a client. Booking and financial records are retained for 6 years in accordance with HMRC requirements.

You may request deletion of your data at any time (see Your Rights below), subject to any legal retention obligations.

6. Sharing Your Data

We do not sell or share your personal data with third parties, except where strictly necessary to deliver our services (for example, a payment processor if you pay a deposit) or where required by law.

Our website is hosted on a third-party platform. That platform may process technical data (such as IP addresses and server logs) as part of providing hosting services. They act as a data processor on our behalf and are bound by appropriate data processing agreements.

7. Cookies

Our website may use essential cookies necessary for the site to function correctly. We do not use tracking or advertising cookies without your consent.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of the website.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access — you may request a copy of the personal data we hold about you.

Right to rectification — you may ask us to correct inaccurate or incomplete data.

Right to erasure — you may ask us to delete your personal data, subject to legal retention requirements.

Right to restrict processing — you may ask us to limit how we use your data in certain circumstances.

Right to data portability — you may request your data in a structured, machine-readable format.

Right to object — you may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

ICO website: ico.org.uk | Helpline: 0303 123 1113

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'Last updated' date. We encourage you to review this page periodically.