Privacy Policy

Last Updated: February 2026

We take your privacy seriously and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website and services.

By using our website and providing us with your information, you accept the terms of this policy and consent to our use of your information as described herein.

Data Controller

For the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Starlight Blooms by Lucy. Our contact details can be found at the end of this document.

We will use the information we collect about you lawfully to process your orders and to provide you with the best possible service.

Information We Collect

When you use our services, place an order, or contact us with an enquiry, we may collect the following personal information:

Your name
Contact details (email address, phone number)
Billing and delivery addresses
Payment information (processed securely through our payment providers)
Order history and preferences

We will never collect sensitive information about you without your explicit consent.

How We Use Your Information

We use your personal information for the following purposes:

Order Processing: To process and deliver your flower orders
Communication: To respond to your enquiries and provide customer support
Service Improvement: To improve our products, services, and website experience
Marketing (with consent): To send you information about products and special offers (only if you have opted in)

Sharing Your Information

Your information will be held securely on databases in the UK and may be accessed by our staff and support service providers. We may share your information with third parties only in the following circumstances:

Delivery Partners: We share order and delivery details (but not payment information) with DPD and other delivery partners to fulfill your orders
Payment Processors: Payment information is processed securely through trusted third-party payment providers
Wholesale Suppliers: Where we source flowers from third-party suppliers, we may share contact details (but not payment details) for delivery purposes
Legal Obligations: Where required or permitted by law

Marketing Consent: We will never share your information with third parties for their marketing purposes without your explicit consent. If you opt in to receive marketing communications, you can unsubscribe at any time.

We may share aggregate, anonymised usage data about our website with third parties, but this will not include any information that can identify you personally.

International Data Transfers

If we need to transfer your information outside the UK or European Economic Area (other than to fulfil your order), we will obtain your consent before such transfer and ensure appropriate safeguards are in place.

Data Accuracy and Retention

We do our best to ensure that all information we hold about you is accurate, up-to-date, and complete. However, we also rely on you to notify us if your information requires updating or correction.

We will retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. We will respond to requests from you to update or delete your information promptly.

Use of Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

Remember your preferences and settings
Monitor website traffic and usage patterns
Personalise your experience on our website

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that declining cookies may affect the functionality and performance of our website. For details on managing cookies in your specific browser, please refer to your browser's help documentation.

Security

We employ appropriate security measures to protect your information from unauthorised access, unlawful processing, accidental loss, destruction, and damage. However, please be aware that transmission of information via the internet is not completely secure.

While we use reasonable endeavours to protect your personal data, we cannot guarantee absolute security. We recommend that you take appropriate steps to protect your own information, including using strong passwords and keeping your login credentials confidential.

Your Rights

Under UK data protection law, you have the following rights:

Right of Access: You are entitled to request a copy of the personal data we hold about you
Right to Rectification: You can request that we correct inaccurate or incomplete data
Right to Erasure: You can request that we delete your personal data in certain circumstances
Right to Restrict Processing: You can request that we limit how we use your data
Right to Object: You can object to the processing of your data for marketing purposes
Right to Data Portability: You can request a copy of your data in a commonly used format

To exercise any of these rights, please contact us using the details provided at the end of this document.

Business Transfers

In the event that we sell or transfer any or all of our business or assets, or if a third party acquires us, we may disclose your personal data to the prospective buyer or new owner. We will ensure that any such transfer complies with applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make any substantial changes to how we use your personal information, we will notify you by posting a prominent notice on our website. We encourage you to review this policy periodically.

Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or how we handle your personal data, don't hesitate to get in touch with us:

Starlight Blooms by Lucy

Email: starlightbloomsbylucy@gmail.com