Information We Collect

When you reach out to us for corporate floral arrangements or gift services, we gather information you choose to share. This includes your name, company name, email address, phone number, delivery addresses, and any specific requirements for your floral needs. We also collect payment details when you place orders, though these are processed securely through our payment partners.

For our corporate clients, we may collect additional business details such as company registration information, preferred delivery times, and budget considerations to help us tailor our service to your business.

Our site automatically gathers certain technical data when you visit. This includes your IP address, browser type, device information, and how you navigate our site. We use this information to enhance site performance and understand how clients locate our services.

How We Use Your Information

We primarily use your personal information to fulfill floral orders and deliver excellent customer support. This includes processing orders, coordinating deliveries, sending order confirmations, and following up to ensure your satisfaction.

• Processing and fulfilling your flower orders and gift arrangements
• Messaging you about order status and delivery schedules
• Providing customer support and addressing your inquiries
• Improving our services based on your feedback and preferences
• Sending relevant updates about our offerings (with your consent)
• Maintaining records for business and legal compliance purposes

We also use aggregated, non-identifying information to understand market trends and run the business more effectively. For example, we might assess which types of arrangements are most popular in different seasons to better prepare inventory.

With your explicit consent, we may send information about seasonal selections, special promotions, or new services that may interest your business. You can opt out of these communications at any time by using the unsubscribe link in our emails or contacting us directly.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data stays within our business ecosystem, shared only when necessary to provide our services or meet legal obligations.

We collaborate with trusted service providers who assist us in delivering our services. This includes payment processors, delivery partners, and flower suppliers. These partners are contractually bound to protect your information and use it solely for the services they provide.

We may disclose your information if required by United Kingdom law, court orders, or government regulations. This includes compliance with GST regulations, business licensing requirements, and other legal obligations applicable to our operations in London and across United Kingdom.

Data Security and Protection

We take data security seriously and implement multiple layers of protection. Our systems use encryption for sensitive data transmission, secure servers for data storage, and regular security updates to shield against threats.

Physical security measures protect our office systems, and we limit access to personal information to employees who need it for their work. Our team receives regular training on privacy practices and data handling procedures.

Payment information is processed through secure, encrypted systems that comply with industry standards. We do not store full credit card numbers on our systems – this data is managed by certified payment processors specializing in secure financial transactions.

While we implement strong security measures, no system is completely immune to risks. We continuously monitor and update our security practices to address evolving threats and maintain the highest protection standards possible.

Your Rights and Choices

You have several rights regarding your personal information. You can request to view what we have on you, ask us to correct inaccurate information, or request deletion of your data when legally permissible.

• Access your personal information and understand how we use it
• Request corrections to inaccurate or outdated information
• Ask us to delete your personal information (subject to business and legal requirements)
• Opt out of marketing communications while continuing to receive service-related messages
• Request information about how your data has been shared
• File complaints about our privacy practices

We keep your information only as long as needed for business purposes and legal requirements. Order records are typically retained for accounting and warranty reasons, while marketing preferences are kept until you request removal.

When we no longer need your information, we securely delete or anonymize it. Some data may be retained longer if required by United Kingdom business laws or for legitimate business interests like preventing fraud.

Cookies and Website Technology

Our website uses cookies to improve your browsing experience and help us understand how visitors use our site. Cookies are small files stored on your device that remember your preferences and enable certain website features.

Essential cookies are necessary for our website to function properly – they enable basic features like page navigation and access to secure areas. These cookies don't collect personally identifiable information and are automatically enabled when you use our site.

We use analytics cookies to understand how visitors interact with our website. This helps us identify popular content, optimize page performance, and improve user experience. This information is collected in aggregate form and doesn't identify individual users.

You can control cookie settings through your browser preferences. However, disabling certain cookies might affect some website features and your overall browsing experience.

Business Transfers and Changes

If CandleGroveAtlas undergoes significant business changes such as mergers, acquisitions, or sales of assets, your personal information may be transferred as part of the business transaction. We would notify you of any such changes and ensure that your information continues to be protected under privacy standards consistent with this policy.

In the unlikely event that we cease operations, we would ensure that your personal information is either securely transferred to a successor business (with appropriate privacy protections) or securely deleted according to data protection best practices.

Updates to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. When we make significant changes, we'll notify you through email or by posting a notice on our website before the changes take effect.

Minor updates for clarity or administrative changes may be made without prior notice. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Children's Privacy

Our services are designed for businesses and adult consumers. We don't knowingly collect personal information from individuals under 18 years of age. If we learn that we've inadvertently gathered data from someone under 18, we'll promptly remove that information from our systems.

Parents or guardians who believe we may have collected information from their child can contact us using the information provided below, and we'll address the matter promptly.

International Data Considerations

Our primary operations are based in United Kingdom, and we store and process data within United Kingdom jurisdiction. However, some of our service providers may process data internationally. When this occurs, we ensure appropriate safeguards are in place to protect your information according to applicable privacy laws.

We comply with United Kingdom data protection laws and regulations, including those related to business operations, financial transactions, and customer data handling. Our practices align with evolving privacy standards in United Kingdom's digital economy.