Your data, your call.

What we collect

• Order details you type on the Build Order page (bouquet choices, add-ons, delivery).
• Contact info when you request a callback: name (optional) and phone number.
• Conversations with our assistant — chat messages and, if you call, the call transcript.
• Cart and browsing basics to keep your shop session working.

Memory is opt-in

On the order form and in chat you'll see a "Remember this conversation" checkbox. If you leave it off, we won't store your details for future visits — your callback request is still sent, but it isn't kept in our assistant's long-term memory. If you tick it, we keep a short summary (name, phone, order draft, or chat) for up to 365 days so we can pick up where you left off and serve you faster next time. You can ask us to delete it at any moment.

How we use it

• To prepare your bouquet and arrange delivery or collection.
• To call you back when you ask.
• To pre-fill your name and previous notes if you return — only when you've opted in.
• To improve our assistant's answers using the brand guide and (with consent) anonymised Q&A pairs.

We do not sell your data. We do not share it with advertisers. Payments are handled by our checkout provider — we never see your card number.

Your rights

Under UK GDPR you can ask us to access, correct, export, or delete your personal data, and to stop using it. We'll respond within 30 days. The fastest route is the form below or an email to bellarozablooms@gmail.com.

Cookies & local storage

We use a small set of cookies and browser local storage. None are used for advertising or third-party tracking.

• Strictly necessary — your cart contents and your cookie-consent choice. Always on; no consent required.
• Functional (opt-in) — remembering your assistant conversation and order draft so you can resume next time. Controlled by the "Remember this conversation" tick and by the cookie banner.

You can change your choice any time by clearing your browser storage for this site, or by emailing us to delete what we hold.

Lawful basis (UK GDPR Art. 6)

• Contract (Art. 6(1)(b)) — processing your order, callback, and delivery details so we can fulfil what you asked for.
• Consent (Art. 6(1)(a)) — remembering your conversation, name, and previous notes when you tick "Remember this conversation"; optional cookies accepted via our cookie banner. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)) — keeping basic logs to protect the site from abuse and to improve our assistant. Balanced against your privacy; you can object.
• Legal obligation (Art. 6(1)(c)) — keeping a minimum of order and tax records as required by UK law.

Retention at a glance

• Order records — kept up to 6 years to meet UK tax and accounting rules.
• Opt-in assistant memory — up to 365 days from your last visit, then auto-deleted.
• Callback requests without memory opt-in — kept only until we've answered you, then deleted within 30 days.
• Cookie-consent choice — stored locally in your browser for 12 months, then we ask again.

Who we share data with

We use a small number of trusted processors to run the shop: our hosting and database provider, our checkout/payments provider (they handle your card — we never see it), and email/messaging tools we use to reply to you. We don't sell your data, and we don't share it with advertisers. If this list changes we'll update this page.

Complaints

If you're not happy with how we've handled your data, please tell us first — we'll do our best to put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.