Privacy policy
Privacy Policy
Your privacy is important to us.
This Privacy Policy explains how Floriva collects, uses, stores and shares your personal information when you visit our website, place an order or contact us.
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Floriva is responsible for deciding how and why your personal information is processed.
If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact us at:
Information We Collect
When you visit our website, place an order or contact us, we may collect information including:
-
Your name
-
Billing and delivery address
-
Email address
-
Telephone number, where required for delivery or customer service
-
Order details and products purchased
-
Payment and transaction information
-
IP address
-
Device and browser information
-
Website activity and cookie data
-
Communications you send to us
Payment information is processed securely by our payment providers. We do not directly store your complete payment card details.
Health and Wellbeing Information
You do not need to provide medical or sensitive health information to purchase Floriva.
However, because of the nature of our products, you may voluntarily provide information relating to your health or intimate wellbeing when contacting our customer service team.
Please avoid sending sensitive medical information unless it is genuinely necessary for us to deal with your enquiry.
Where you voluntarily provide sensitive personal information, we will only use it where we have an appropriate lawful basis and condition for doing so under applicable data protection law.
How We Use Your Information
We may use your personal information to:
-
Process and manage your orders
-
Process payments
-
Arrange delivery
-
Send order and delivery updates
-
Provide customer service
-
Handle returns, refunds and complaints
-
Prevent fraud and unauthorised transactions
-
Maintain the security and operation of our website
-
Comply with legal, accounting and tax obligations
-
Understand and improve how our website and services are used
-
Measure the performance of our marketing
-
Send marketing communications where permitted by law
Our Lawful Bases
Depending on how we use your information, we may rely on:
Contract – where processing is necessary to fulfil your order or provide a service you have requested.
Legal obligation – where we are required to process or retain information to comply with applicable law.
Consent – where you have given us permission, such as for certain marketing communications or non-essential cookies.
Legitimate interests – where processing is necessary for our legitimate business interests, such as preventing fraud, improving our services or responding to enquiries, provided those interests do not override your rights and freedoms.
How Long We Keep Your Information
We only keep personal information for as long as reasonably necessary for the purpose for which it was collected, including where we need to comply with legal, accounting, tax or regulatory requirements.
Order and transaction records may be retained for the period required by applicable tax, accounting and consumer laws.
Customer service communications may be retained for as long as necessary to deal with enquiries, disputes or potential claims.
Marketing information is retained until you unsubscribe, withdraw your consent where consent is relied upon, or we no longer have a valid reason to retain it.
Who We Share Information With
We may share personal information with trusted service providers where necessary to operate our business.
These may include:
-
Shopify and related ecommerce service providers
-
Payment processors
-
Delivery, fulfilment and logistics providers
-
Customer service and email providers
-
Website hosting and technical service providers
-
Analytics providers
-
Advertising and marketing platforms, such as Meta, Google or TikTok, where applicable
-
Professional advisers, regulators or authorities where required by law
We only share information where necessary and require service providers handling personal information on our behalf to protect it appropriately.
International Data Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally and UK data protection law requires additional safeguards, we take appropriate steps designed to ensure that the information remains protected.
Depending on the destination and circumstances, these measures may include UK adequacy regulations, approved contractual safeguards or another legally permitted transfer mechanism.
Cookies and Similar Technologies
We use cookies and similar technologies to operate our website, remember preferences, understand how visitors use the site and, where permitted, measure and personalise advertising.
Some cookies are strictly necessary for functions such as your shopping basket, checkout and website security.
Other cookies, including certain analytics and advertising cookies, are used in accordance with applicable consent requirements.
Where consent is required, you can choose whether to allow these cookies through the cookie consent tools available on our website.
You can also control cookies through your browser settings.
Advertising
Where permitted, we may use services provided by advertising platforms such as Meta, Google and TikTok to understand the effectiveness of our advertising and show more relevant advertisements.
These services may use cookies or similar technologies and may receive information about how you interact with our website, subject to your cookie choices and applicable law.
Marketing Communications
We may send you information about Floriva, offers or other marketing communications where you have consented or where we are otherwise permitted to do so under applicable law.
You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in our emails or by contacting us at:
How We Protect Your Information
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Payments are processed through secure third-party payment providers, and we do not directly store your complete payment card details.
Your Data Protection Rights
Depending on the circumstances, UK data protection law may give you the right to:
-
Request access to your personal information
-
Ask us to correct inaccurate or incomplete information
-
Ask us to delete your personal information
-
Ask us to restrict how your information is used
-
Object to certain uses of your information
-
Request the transfer of certain information to you or another organisation
-
Withdraw your consent where we rely on consent
-
Object to the use of your information for direct marketing
These rights are not absolute and may not apply in every circumstance.
To exercise your rights, contact us at:
We may need to request additional information to verify your identity before processing your request.
Complaints
If you have concerns about how we use your personal information, please contact us first at:
You also have the right to raise a complaint with the UK data protection regulator, the Information Commissioner's Office (ICO).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, technology, services or legal requirements.
The latest version published on this page will be the version currently in effect.
Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, contact us at: