Privacy policy.

Last updated: 18th August 2025

Hayloft Events ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and store your information when you visit our website, place an order, or contact us.

We process your personal data in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). If you are an EU customer, we also comply with the EU General Data Protection Regulation (EU GDPR).

1. Information We Collect

When you place an order or interact with our website, we may collect the following information:

  • Identity Data: name, billing address, delivery address, email, phone number.

  • Order Information: details of the products you purchase.

  • Payment Information: we do not store your full payment card details; payments are processed securely via our payment provider.

2. How We Use Your Information

We use your data to:

  • Process and deliver your orders.

  • Communicate with you about your order, delivery, or customer service enquiries.

  • Send you marketing emails (only if you’ve opted in).

  • Improve our website, services, and customer experience.

3. Sharing Your Information

We do not sell your personal data. We may share your information with carefully selected employees and third parties, but only where it is necessary to help us deliver our service and run our business.

For example, we may share data with:

  • Payment processors (to handle your payments securely).

  • Delivery and courier partners (to get your flowers to you or your recipient).

  • IT, website hosting, and analytics providers (to help us operate our online services).

4. Data Retention

We keep your personal data for as long as it is reasonably required for the purposes outlined in this Privacy Policy, or until you instruct us otherwise (where legally possible).

For example:

  • Order and payment records are retained to comply with accounting and tax obligations.

  • Customer service communications are retained while your query is active and for a short period afterwards.

  • Marketing preferences are retained until you withdraw your consent or unsubscribe.

7. Your Rights

Under the Data Protection Act 2018, the UK GDPR, and where applicable the EU GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Request corrections to inaccurate data.

  • Request deletion of your data (where legally permitted).

  • Object to processing for marketing purposes.

  • Withdraw consent at any time.

To exercise your rights, please contact us at: hayloftevents@outlook.com

8. Cookies

Our website may use cookies to improve your experience and collect anonymous analytics. You can manage your cookie settings through your browser or via our cookie banner.

9. Security

We take appropriate security measures to protect your data against unauthorised access, alteration, or disclosure.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is used, please contact us.