Privacy policy

Who is responsible

The person responsible for data collected through this website is the florist who runs stemhollow.com, reachable through the contact form.

What is collected

Sending a basket request or a message passes on your name, email address, the delivery town or ZIP code you type, anything written in the message box, and the items in the basket. The server also keeps standard technical logs with IP address, browser type, requested page and timestamp.

Recipient details

When flowers are going to somebody else, the recipient's address, phone number and card message are normally agreed later in the email conversation. They are used only for that delivery and never added to a mailing list.

Why it is used

Details are used only to answer the enquiry, arrange delivery and payment, keep sales records and protect the site from abuse. Nothing sent through this website is used for advertising or handed to marketing services.

Who can see it

Personal data is not sold, rented or used for advertising profiles. Requests are stored on this website's own server, hosted with BitLaunch in the Netherlands and protected by Cloudflare, and read only by the florist. A postal carrier receives only the address needed to deliver a parcel.

How long it is kept

Enquiries that do not lead to a sale are deleted within 12 months. Records tied to a completed sale are kept for six years for accounting purposes. Technical logs rotate after a short operational period.

Your rights

You can ask for a copy of the data held about you, ask for it to be corrected or deleted, or withdraw consent for further contact. Requests sent through the contact form are answered within 30 days. Where statutory privacy rights apply to you, such as a US state privacy law or the rules in the EEA and the UK, they apply in addition to this policy and you may also contact the relevant authority.