Booker Flowers and Gifts — Privacy Policy

15 Oct 2026

Who we are

This policy explains how Booker Flowers and Gifts Limited ("we", "us") collects, uses and protects your personal information when you order from us, visit our shop, book a Flower School workshop or enquire about wedding and event flowers. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Company: Booker Flowers and Gifts Limited, registered in England and Wales, company number 09396097

• Address: 7 Booker Avenue, Allerton, Liverpool L18 4QY

• Phone: 0151 724 4850

• Email for privacy questions: gemma@bookerflowersandgifts.co.uk

• ICO registration number: ZA917545

We do not have a Data Protection Officer, as we are not required to appoint one. Please contact us using the details above with any privacy question or request.

What personal data we collect

Who	What we collect	How we get it
Customers placing an order	Name, billing address, email, phone number, order details, card message, delivery instructions, payment confirmation (not full card details)	Website, phone, in shop, email
Gift recipients	Name, delivery address, phone number, any delivery notes you give us	From the customer placing the order
Flower School students	Name, email, phone, booking and payment details, any dietary or access needs you choose to tell us	Booking forms, email, phone, in shop
Wedding and event clients	Names, contact details, event date and venue, budget, design preferences, photos you share	Enquiry forms, email, consultations
Newsletter subscribers	Name and email address	Newsletter sign-up form
Website visitors	IP address, device and browser type, pages viewed, cookie identifiers	Cookies and analytics tools
Shop visitors	CCTV images	Cameras on our premises

If you give us details about someone else, such as a gift recipient, please make sure they would be happy for you to do so. We only use recipient details to deliver your order. We never use them for marketing.

Dietary or access needs may count as health information. We only ask for this so we can look after you at a workshop, and we only use it for that purpose.

How we use your data and why

What we use it for	Lawful basis
Taking, preparing and delivering your order, and sending order confirmations, receipts and delivery updates	Contract
Taking payment and preventing fraud	Contract and legitimate interests
Delivering to your recipient	Legitimate interests (fulfilling the order you placed for them)
Managing Flower School bookings and wedding or event enquiries	Contract, or steps taken at your request before a contract
Using dietary or access needs to look after you at a workshop	Your explicit consent
Answering your questions and handling complaints	Legitimate interests
Keeping accounting and tax records	Legal obligation
Sending our newsletter	Your consent
Analytics and advertising cookies	Your consent
CCTV and delivery photos	Legitimate interests (security, and confirming delivery)

We do not sell your personal data. We do not make any decisions about you using only automated means.

Card payments

We never see or store your full card number. Online orders go through our Mal's e-commerce checkout, and card payments are then processed securely by Paymentsense. Your card details are not visible to us, and they are not stored by us or kept in Mal's e-commerce. You can also choose to pay with PayPal. Paymentsense and PayPal process your payment under their own security standards and privacy policies, and only send us confirmation that payment was made.

If you pay by phone or in our shop, your card is processed securely by Dojo, our card payment provider. We do not write down or keep your card details.

Who we share your data with

We only share what each organisation needs to do its job, and they may only use it for that purpose.

Who	Why
Digital Florists	Hosts our website and the system we use to manage orders and customer records
Mal's e-commerce, Paymentsense, PayPal and Dojo	Run our online checkout (Mal's e-commerce) and process online card payments (Paymentsense), PayPal payments, and card payments in our shop and over the phone (Dojo)
Direct2Florist and its partner florists	Deliver orders outside our local delivery area, in the UK and abroad. They receive the recipient's details, the order and your card message
Our own delivery drivers	Deliver local orders using a digital delivery list
Flodesk	Sends our newsletter
Google and Meta (Facebook and Instagram)	Website analytics and advertising, if you accept these cookies
Our accountant, IT and web support (IUGO Web Design)	Provide professional and technical services to us

We may also share data if the law requires it, to prevent fraud or crime, or to protect our rights or the safety of others. If we ever sell or transfer our business, customer records may pass to the new owner, who must follow this policy.

Emails we send you

When you order or book with us, we email you about that order or booking, for example confirmations, receipts and delivery updates. These are not marketing, so you will receive them even if you have not signed up to our newsletter.

We only send our newsletter, with Flower School news, workshop dates and seasonal offers, if you sign up to it. Our newsletter is sent through Flodesk. You can unsubscribe at any time using the link in every email, or by emailing us. We follow the Privacy and Electronic Communications Regulations (PECR) for all marketing emails.

Cookies and analytics

Cookies are small files stored on your device when you visit our website. We use three types:

Who	Why
Digital Florists	Hosts our website and the system we use to manage orders and customer records
Mal's e-commerce, Paymentsense, PayPal and Dojo	Run our online checkout (Mal's e-commerce) and process online card payments (Paymentsense), PayPal payments, and card payments in our shop and over the phone (Dojo)
Direct2Florist and its partner florists	Deliver orders outside our local delivery area, in the UK and abroad. They receive the recipient's details, the order and your card message
Our own delivery drivers	Deliver local orders using a digital delivery list
Flodesk	Sends our newsletter
Google and Meta (Facebook and Instagram)	Website analytics and advertising, if you accept these cookies
Our accountant, IT and web support (IUGO Web Design)	Provide professional and technical services to us

We only set analytics and advertising cookies if you accept them. You can change your choice at any time, and you can also block or delete cookies in your browser settings. If you block essential cookies, the basket and checkout may not work.

Our website shows an embedded Google Map, which Google may use to set its own cookies.

CCTV and delivery photos

We use CCTV in our shop to keep our staff, customers and premises safe and to prevent crime. Signs tell you when cameras are in use. Recordings are kept securely and are automatically overwritten after 30 days, unless we need them to investigate an incident. We may share them with the police or our insurers if needed.

Our drivers may take a photo when they deliver an order. We take it to confirm the delivery and to deal with any query about it, and we may send it to the customer who placed the order. We aim to photograph the flowers and the doorstep, not people.

Transfers outside the UK

Some of our suppliers, including Google, Meta, PayPal, Flodesk and Mal's e-commerce, may store or process data outside the UK, for example in the USA. When this happens, the transfer is protected by safeguards approved under UK data protection law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement. If you send flowers abroad, we must share the recipient's details with a florist in that country so they can deliver your order.

How we keep your data safe

Our order system and email accounts are password protected and only staff who need access have it. Our drivers use a digital delivery list rather than printed delivery notes. No method of sending data over the internet is completely secure, but we take reasonable steps to protect your information.

How long we keep your data

Data	How long
Order, payment and accounting records	6 years after the end of the financial year, as required by HMRC
Recipient details	As part of the order record above, and never used for marketing
Flower School and wedding or event records	6 years after the booking or event
Wedding enquiries that do not go ahead	12 months
Workshop dietary and access information	Deleted after the workshop
Newsletter subscriptions	Until you unsubscribe
Delivery photos	3 months
CCTV recordings	30 days, unless needed for an investigation
Analytics data	Up to 14 months

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you

• ask us to correct data that is wrong or incomplete

• ask us to delete your data

• ask us to restrict how we use your data

• object to how we use your data, including for marketing

• ask us to send your data to you or another organisation in a reusable format

• withdraw your consent at any time, where we rely on it

Some rights depend on our reason for using the data. For example, we cannot delete order records that HMRC requires us to keep. To make a request, email gemma@bookerflowersandgifts.co.uk or write to us at the shop. We will reply within one month, and there is usually no charge.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time, and the latest version will always be on this page. This policy was last updated on 15 October 2026.