This Privacy Policy explains how Stock Florist Ltd collects, uses, stores, and protects your personal data when you visit stockflorist.co.uk, place an order, or contact us. Please read it carefully.

This policy has been updated from a previous version to comply with UK GDPR and the Data Protection Act 2018. The previous version referenced the Data Protection Act 1998, which has been superseded.

1. Who We Are

Stock Florist Ltd is a florist with two locations in Essex and Hertfordshire. We are the data controller responsible for your personal data.

Stock Florist Ltd   |   Company Registration No: 08863840

Stock, Essex: 18 Mill Road, Stock, Essex, CM4 9LJ

Bishop's Stortford, Hertfordshire: 1 Florence Walk, North Street, Bishop's Stortford, CM23 2NZ

Email: enquiries@stockflorist.co.uk

Phone: 01277 840350 (Essex)   |   01279 654357 (Hertfordshire)

ICO Registration No: ZB00012839518

For any questions about this policy or to exercise your data protection rights, please contact us at enquiries@stockflorist.co.uk or write to either of the addresses above.

2. What Personal Data We Collect

The data we collect depends on how you interact with our website. Most visitors who browse without placing an order or making an enquiry remain anonymous.

2.1 Data Collected Automatically From All Visitors

When you browse stockflorist.co.uk, the following technical data may be collected automatically, subject to your cookie consent:

  • IP address (anonymised via GA4)
  • Browser type and version
  • Device type and operating system
  • Pages visited, session duration, and referring URL
  • Cookie identifiers (see our Cookie Policy below)

2.2 Data Collected When You Place an Order

When you place an order through our WooCommerce shop, we collect:

  • Full name
  • Billing address
  • Delivery address (including recipient name and address where different from billing)
  • Email address
  • Telephone number
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Order details, preferences, and special instructions

2.3 Data Collected for Funeral Flower Orders

When ordering funeral arrangements, our product forms additionally collect:

  • Name of the deceased
  • Funeral director's name
  • Date, time, and location of the funeral service
  • Specific arrangement requirements and colour preferences

We treat funeral order data with the utmost sensitivity and discretion. This data is used solely to fulfil your order and is not used for any other purpose. It is retained only for as long as necessary for order fulfilment and statutory record-keeping.

2.4 Data Collected When You Contact Us

When you submit an enquiry via our contact forms (one for each location), we collect:

  • Full name
  • Email address
  • Telephone number
  • The contents of your message

2.5 VIP Mailing List Data

When you sign up to our VIP mailing list, we collect:

  • Email address
  • Name (where provided)
  • Marketing preferences

3. How We Collect Your Personal Data

  • Directly from you — when you place an order, submit a contact form, sign up to our VIP list, or contact us by phone or email
  • Via WooCommerce — our online shop platform processes orders and stores order data in our WordPress database
  • Via our payment provider — payment card data is handled securely by our third-party payment processor; we do not receive or store full card details
  • Via Brevo — our email marketing platform manages VIP list subscriptions and sends marketing communications
  • Via Facebook Pixel — when you visit our website and have consented to marketing cookies, the Facebook Pixel collects anonymised data about your visit to help us measure the effectiveness of our Facebook advertising
  • Automatically — Google Analytics 4 collects anonymised usage data when you browse our website, subject to your cookie consent

4. How We Use Your Personal Data & Our Lawful Basis

We process your personal data only where we have a valid lawful basis under UK GDPR:

PurposeLawful BasisData Used
Processing and fulfilling online ordersPerformance of a contract (Art. 6(1)(b))Identity, contact, order, payment data
Processing and fulfilling funeral flower ordersPerformance of a contract (Art. 6(1)(b))Order data including funeral details
Responding to enquiriesLegitimate interests (Art. 6(1)(f))Identity, contact, communications data
Sending VIP marketing emails and newslettersConsent (Art. 6(1)(a))Email address, name, preferences
Measuring Facebook advertising effectiveness via PixelConsent (Art. 6(1)(a)) via ComplianzAnonymised browsing data
Analysing website usage via Google AnalyticsConsent (Art. 6(1)(a)) via ComplianzAnonymised technical and usage data
Collecting and displaying Trustpilot reviewsLegitimate interests (Art. 6(1)(f))Publicly submitted review data
HMRC and financial complianceLegal obligation (Art. 6(1)(c))Financial and order data
Preventing fraud and maintaining website securityLegitimate interests (Art. 6(1)(f))Technical data, IP address

5. Online Orders — WooCommerce

Our online shop is powered by WooCommerce, a plugin developed by Automattic Inc. When you place an order, your personal and order data is stored securely in our WordPress database and used to fulfil your order, process payment, and communicate with you about your purchase.

We do not store payment card details. Card payments are processed securely by our payment provider (Stripe), who handles all card data in compliance with PCI DSS standards. Please refer to their privacy policy for details of how payment data is handled.

Order data is retained for 7 years in line with HMRC record-keeping requirements.

6. Funeral Flower Orders

We understand that ordering funeral flowers is often done during a difficult and sensitive time. The additional information we collect for funeral orders (including the name of the deceased, funeral director, and service details) is used exclusively to prepare and deliver your arrangement correctly and on time.

This information is:

  • Used solely for order fulfilment purposes
  • Treated with complete sensitivity and discretion by our team
  • Not used for marketing or any purpose beyond fulfilling your order
  • Retained for the minimum period necessary for order records and then securely deleted

If you have any concerns about how we handle funeral order data, please contact us directly at enquiries@stockflorist.co.uk.

7. Contact Forms

Our website has two contact forms — one for our Essex location and one for our Hertfordshire location. When you submit an enquiry, your name, email address, telephone number, and message are stored in our WordPress database and delivered to the relevant team by email.

Contact form data is used solely to respond to your enquiry and is retained for 5 years before being securely deleted.

8. VIP Mailing List — Brevo

Our VIP mailing list is managed using Brevo (formerly Sendinblue), operated by Sendinblue SAS, a French company with servers in the EU. When you sign up to our VIP list, your email address and name are stored in Brevo and used to send you our newsletter, special offers, and updates.

You can unsubscribe from our VIP list at any time by:

  • Clicking "unsubscribe" in any marketing email we send
  • Contacting us at enquiries@stockflorist.co.uk

We will not send you marketing emails without your consent and will never share your email address with third parties for their own marketing purposes.

Brevo Privacy Policy: brevo.com/legal/privacypolicy/

9. Facebook Pixel

We use the Facebook Pixel (provided by Meta Platforms Ireland Ltd) on our website to measure the effectiveness of our Facebook and Instagram advertising. The Pixel collects anonymised data about actions taken on our website — such as pages visited and products viewed — and sends this to Meta to help us understand how our advertising is performing.

The Facebook Pixel only activates after you have given your explicit consent to marketing cookies via our Complianz cookie banner. If you decline marketing cookies, the Pixel will not load and no data will be sent to Meta.

Important: The Facebook Pixel was previously loading on all pages before any cookie consent was obtained. This has been corrected by implementing Complianz as our consent management platform, which blocks the Pixel until marketing consent is granted.

Meta Privacy Policy: facebook.com/privacy/policy/

10. Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 collects anonymised data about pages visited, products viewed, session duration, and approximate location. Analytics cookies are only set after you have given your consent via our Complianz banner. IP addresses are anonymised by default in GA4 and are never stored in full.

Google's Privacy Policy: policies.google.com/privacy

11. Trustpilot

We display Trustpilot reviews on our website using the Trustpilot widget. Reviews shown are publicly submitted by customers to Trustpilot's platform. Trustpilot may set cookies or collect technical data in connection with its widget — see our Cookie Policy below.

Trustpilot Privacy Policy: legal.trustpilot.com/end-user-privacy-terms

12. Sharing Your Personal Data

We do not sell your personal data. We may share it with the following parties where necessary:

  • Stripe — for secure payment processing
  • WooCommerce / Automattic Inc. — online shop platform
  • Brevo (Sendinblue SAS) — VIP email marketing platform
  • Meta Platforms Ireland Ltd — Facebook Pixel advertising measurement (marketing consent required)
  • Google LLC — Google Analytics (anonymised usage data)
  • Trustpilot A/S — review widget
  • Our web hosting provider — for website hosting and security
  • HMRC and other regulatory bodies — where required by law
  • Professional advisers — solicitors or accountants where legally required

All processors are required to handle your data securely and in accordance with UK GDPR.

13. International Transfers

Some of our service providers are based outside the UK:

  • Google LLC (US) — covered by the UK-US Data Bridge
  • Meta Platforms Ireland Ltd (EU/Ireland) — adequacy decision applies
  • Automattic Inc. / WooCommerce (US) — covered by standard contractual clauses
  • Brevo / Sendinblue SAS (France/EU) — within the EEA, adequacy decision applies
  • Trustpilot A/S (Denmark/EU) — within the EEA, adequacy decision applies

Our website is hosted in Europe. You may request further information about international transfer safeguards by contacting us.

14. Data Retention

  • Order data (WooCommerce): 7 years from date of order (HMRC requirement)
  • Funeral order data: retained for order fulfilment then deleted within 5 years
  • Contact form enquiries: 5 years from date of submission
  • VIP mailing list data: until you unsubscribe, after which removed from Brevo within 30 days
  • Google Analytics data: 26 months (GA4 default)
  • Facebook Pixel data: governed by Meta's data retention policies
  • Server logs: up to 30 days

After the applicable retention period, personal data is securely deleted or anonymised.

15. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access — request a copy of personal data we hold about you
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure — request deletion of your data in certain circumstances
  • Right to restrict processing — ask us to pause processing in certain circumstances
  • Right to data portability — receive your data in a portable format in certain circumstances
  • Right to object — object to processing based on legitimate interests or to direct marketing
  • Right to withdraw consent — withdraw consent at any time (e.g. unsubscribe from VIP list, revoke cookie consent)
  • Rights related to automated decision-making — we do not carry out solely automated decision-making

To exercise any of these rights, please contact us at enquiries@stockflorist.co.uk or write to us at either of our addresses. We will respond within one calendar month. We may need to verify your identity. There is no charge unless requests are manifestly unfounded or excessive.

16. Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113   |   Website: ico.org.uk

We would welcome the opportunity to resolve your concern directly before you contact the ICO.

17. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL/TLS encryption across our website
  • PCI DSS-compliant payment processing via our payment provider (we never store card details)
  • Secure WordPress installation with restricted access
  • Regular plugin and platform updates

In the event of a personal data breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

18. Third-Party Links

Our website may contain links to third-party websites including social media platforms, venue partners, and review sites. We are not responsible for their privacy practices and encourage you to read their privacy notices.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version and its effective date will always be published at stockflorist.co.uk/privacy/This Privacy Policy was last updated on 23 July 2026.

Copyright Stock Florist © 2026 All Rights Reserved |
Trustpilot
cartmenu