We respect your privacy and are committed to safeguarding your personal information. This Privacy Policy explains how we collect, use, and protect your data when you visit our website, purchase products or services, or contact us by email or phone. It also outlines your rights under UK data protection law.
1. Important Information and Who We Are
This Privacy Policy provides details on how The Regalia Florals Ltd (“Regalia”, “we”, “us”, or “our”) processes your personal data through your use of our website or other interactions, including when you subscribe to our newsletter or place an order.
Our website is not intended for children, and we do not knowingly collect data relating to minors.
If you have any questions about this Privacy Policy or wish to exercise your legal rights (see Section 9), please contact us using the details below.
Changes to This Policy
We review this Privacy Policy regularly. The latest version was updated in December 2025. Please ensure your personal information is accurate and up to date during your relationship with us.
Third-Party Links
Our website may include links to third-party sites or applications. Clicking these links may allow third parties to collect data about you. We are not responsible for their privacy practices and recommend reviewing their policies.
Controller
The Regalia Florals Ltd is the data controller responsible for your personal information.
Contact Details
Legal Entity: The Regalia Florals Ltd
Email: office@theregaliaflorals.com
Address: SE9 4QB, London
Telephone: 07307 658 688
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. However, we would appreciate the opportunity to resolve your concerns first—please contact us directly.
2. The Data We Collect About You
Personal data means any information that identifies you. We may collect, store, and process the following categories:
- Identity Data: Name, title, date of birth, gender.
- Contact Data: Billing and delivery addresses, email, phone numbers.
- Financial Data: Payment card details.
- Transaction Data: Details of purchases and payments.
- Technical Data: IP address, browser type, operating system, and device information.
- Profile Data: Account details, purchase history, preferences, feedback.
- Usage Data: How you interact with our website and services.
- Marketing Data: Your preferences for receiving marketing communications.
We may also collect aggregated data for statistical purposes, which does not identify individuals.
We do not collect special category data (e.g., health, ethnicity, political opinions) or criminal records.
If you fail to provide required data, we may be unable to fulfil your order or provide services.
3. How We Collect Your Data
We collect data through:
- Direct interactions: When you place an order, create an account, subscribe to our newsletter, book a workshop, or contact us.
- Automated technologies: When you browse our site, we collect technical data via cookies and analytics tools.
- Third-party sources: Payment processors and delivery partners may share transaction details with us.
4. How We Use Your Data
We use your personal data only when permitted by law, including:
- To process and deliver your orders.
- To manage your account and provide customer support.
- To send marketing communications (with your consent).
- To comply with legal obligations.
We do not rely on consent as the primary legal basis for processing, except for marketing communications, which you can opt out of at any time.
5. How We Use Your Personal Data
We use your personal data for specific purposes and in accordance with UK data protection law. Below are examples of how we process your data and the legal basis for doing so:
| Purpose | Type of Data | Legal Basis |
| To process and deliver your orders | Identity, Contact, Financial, Transaction | Performance of a contract |
| To manage your account and provide customer support | Identity, Contact, Profile | Legitimate interest (to run our business effectively) |
| To send marketing communications (e.g., newsletters) | Identity, Contact, Marketing Preferences | Consent |
| To improve our website and services | Technical, Usage | Legitimate interest (to enhance user experience) |
| To comply with legal obligations | Identity, Transaction | Legal requirement |
Marketing
You may receive marketing communications from us if you have requested information or purchased from us and have not opted out. We will never share your data with third parties for marketing without your explicit consent. You can unsubscribe at any time via the link in our emails or by contacting us.
Cookies
Our website uses cookies to improve functionality and user experience. You can set your browser to refuse cookies or alert you when they are being used. Please note that disabling cookies may affect site performance.
Change of Purpose
We will only use your data for the purpose it was collected unless we reasonably consider another use compatible with the original purpose. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis.
6. Sharing Your Personal Data
We may share your data with trusted third parties, including:
- Service providers (IT, payment processing, delivery partners) based in the UK.
- Professional advisers (lawyers, accountants, insurers).
- Regulatory authorities, such as HMRC, when legally required.
- Business transfers: If we sell or merge our business, your data may be transferred to the new owner under the same privacy terms.
We require all third parties to maintain confidentiality and comply with data protection laws. We do not allow them to use your data for their own purposes.
We do not transfer your personal data outside the UK or EEA.
7. Data Security
We implement robust security measures to protect your personal data from loss, misuse, or unauthorised access. Access is restricted to employees and partners who need it for business purposes and are bound by confidentiality obligations.
We have procedures in place to handle any suspected data breach and will notify you and relevant authorities where legally required.
8. Data Retention
How long do we keep your personal data?
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, tax, and accounting requirements. In some cases, we may keep your data longer if required for dispute resolution or to defend potential legal claims.
When determining retention periods, we consider:
- The nature and sensitivity of the data.
- The risk of harm from unauthorised use or disclosure.
- The purposes for processing and whether they can be achieved by other means.
- Applicable legal and regulatory requirements.
In certain circumstances, you can request that we delete your data (see Section 9 – Your Rights).
We may also anonymise your data for research or statistical purposes, in which case we may use it indefinitely without further notice.
9. Your Legal Rights
Under UK data protection law, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your data where there is no lawful reason for us to keep it.
- Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Restriction: Request that we suspend processing in certain circumstances (e.g., while verifying accuracy or legality).
- Data Portability: Request transfer of your data to you or another party in a structured, machine-readable format (applies to automated processing based on consent or contract).
- Withdraw Consent: Where processing relies on consent, you can withdraw it at any time. This will not affect prior lawful processing but may impact our ability to provide certain services.
Fees:
You will not usually pay a fee to exercise these rights. However, we may charge a reasonable fee or refuse requests that are excessive, repetitive, or unfounded.
Verification:
We may request proof of identity to confirm your rights and protect your data. This helps ensure that personal information is not disclosed to anyone without proper authorisation.