Privacy policy
Last updated: 17 August 2026
The Petal Boutique Winchester is committed to protecting your privacy. This policy explains what personal information we collect, why we collect it, what we do with it and what rights you have over it. We have written it in plain English rather than legal language, and we would rather you asked us a question than guessed at an answer.
Who we are
The Petal Boutique Winchester is a florist delivering across Winchester and the surrounding SO postcodes. For the purposes of UK data protection law we are the "data controller" of the information described in this policy, which means we decide how and why it is used.
- Trading name: The Petal Boutique Winchester
- Registered company: DJSJ Floral Limited, registered in England and Wales, company number 17243036
- Address, and where to write to us: 6 The Fairground Craft and Design Centre, Weyhill, Andover, Hampshire, SP11 0QN
- Telephone: 01962 865694
- Email: hello@thepetalboutique-winchester.co.uk
- VAT number: GB521682794
- ICO registration number: ZC223898
DJSJ Floral Limited also runs The Petal Boutique at Weyhill, Dried Blooms and Bouquet Cards. Where one of those brands fulfils part of your order, your information stays within the same company rather than going to a third party. We do not use your details to market one brand to you because you bought from another.
If you have any question about your information, or you want to make one of the requests described further down this page, please contact us using any of the details above.
What information we collect
When you place an order
- Your name, billing address, email address and telephone number
- The delivery address, and the name and telephone number of the person receiving the flowers
- Any gift message you would like written on a card
- Delivery instructions and the date you would like the order delivered
- Details of what you ordered and what you paid
- If you take out a flower subscription, the size and rhythm you chose and its delivery schedule
We do not see or store your full card details. Payments are handled by Shopify Payments, Shop Pay or PayPal, and we only receive confirmation that a payment succeeded along with the last few digits of the card.
When you contact us
If you call us, email us, message us on social media or fill in a form on the website, we collect the contact details and the content of your message so that we can reply and keep a record of what was agreed. This includes wedding, event and funeral enquiries.
When you use the website
Our website collects standard technical information such as your IP address, browser type, the pages you visited and how you arrived at the site. Some of this is necessary for the site and the basket to work and to keep them secure. The rest is analytics and advertising measurement, described in the cookies section below.
Flowers sent as a gift
If you send flowers to someone else, you are giving us that person's name, address and often their telephone number. We use those details only to deliver the order and to contact them if there is a problem with the delivery. We do not add them to any mailing list, we do not market to them, and we do not use their details for anything other than getting the flowers to them.
If you are the recipient of an order and would like to know what we hold about you, or would like it removed, please contact us and we will deal with it.
Why we use your information, and our lawful basis
Data protection law requires us to have a valid reason, called a "lawful basis", for everything we do with your information. Ours are set out below.
| What we do | Why | Lawful basis |
|---|---|---|
| Take, prepare and deliver your order | To provide what you have paid for | Performance of a contract |
| Contact you about your order, including confirmations, delivery updates and any problem with a delivery | To keep you informed about your own order | Performance of a contract |
| Run and manage your flower subscription | To deliver the subscription you signed up for | Performance of a contract |
| Reply to your enquiry or quote for a wedding, funeral or event | To answer your question and arrange the work | Steps taken at your request before entering a contract |
| Ask you how your order went, and invite you to leave a review | To find out whether we got it right and to improve what we do | Our legitimate interests in understanding and improving our service |
| Send you marketing emails about promotions, new products and services | To tell you about things we think you would like | Your consent, given when you signed up |
| Keep accounting and VAT records | Because HMRC requires it | Legal obligation |
| Analytics and advertising measurement | To understand how the website is used and how well our advertising works | Our legitimate interests, and your choices as described in the cookies section |
| Keep the website and our business secure, and prevent fraud | To protect you and us | Our legitimate interests in security |
Emails you will and will not get from us
We think it is worth being specific about this, because it is the thing customers ask about most.
You will get emails about your order. Confirmations, delivery updates, subscription reminders, and anything we need to tell you about an order you have placed.
We may occasionally ask you for feedback. After an order, we may send you one short message asking how it went and inviting you to leave a review. It will not contain offers or advertising, and it will always include a way to opt out of any further feedback requests. Some of these invitations are sent through Trustpilot on our behalf.
You will only get marketing emails if you have asked for them. Promotions, new products and seasonal offers are sent only to people who have signed up. Every marketing email has an unsubscribe link, and you can also tell us by phone or email at any time.
We do not sell or rent your details to other companies for their own marketing.
Who we share your information with
We use a number of suppliers who process information on our behalf. They can only use it to provide their service to us.
- Shopify, who provide and host our website, basket and checkout
- Shopify Payments, Shop Pay and PayPal, who process card payments
- Klaviyo, who send our marketing emails
- Trustpilot, who collect and display customer reviews and send review invitations
- Google, for website analytics, advertising measurement, embedded maps and spam protection on our forms
- Meta and Microsoft, for advertising measurement
- Our accountants and bookkeeping software, for our financial records
- Couriers, for nationwide and dried flower deliveries that our own drivers do not make
We may also share information where we are legally required to, for example with HMRC, or where it is necessary to establish or defend a legal claim.
Sending information outside the UK
Several of the suppliers listed above are based outside the UK, or store information outside the UK. Where that happens, we rely on the safeguards approved under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision covering the country concerned. If you would like more detail about a particular supplier, please ask.
How long we keep your information
| Information | How long we keep it |
|---|---|
| Order and payment records | Six years after the end of the financial year they relate to, because HMRC requires it |
| Delivery recipient details | Kept as part of the order record, and not used for anything else |
| Subscription records | For as long as the subscription runs, then with the order records above |
| Enquiries that did not lead to an order | Two years from your last contact with us |
| Marketing preferences | For as long as you are subscribed, and a record of your unsubscribe afterwards so that we do not contact you again by mistake |
| Website analytics | No more than 14 months |
Cookies and tracking
Cookies are small files stored on your device. Our website uses them in three ways.
- Necessary. Shopify sets cookies that make the site work, remember what is in your basket and keep the checkout secure. These cannot be turned off.
- Analytics. We use Google Analytics, and a page-level analytics tool, to understand how the site is used and which pages people find useful.
- Advertising. We advertise online, and we use measurement tools from Meta, Google and Microsoft to understand which adverts lead to orders. These tools can also be used to show you our adverts on other websites and apps.
You can control cookies through your browser settings, and you can delete them at any time. Blocking necessary cookies may stop parts of the site working. You can also opt out of personalised advertising directly with the companies concerned, through your Google, Meta and Microsoft account settings.
We are improving how we ask for and record your choices about analytics and advertising cookies on this site. If you would like us to stop using your information for advertising measurement in the meantime, email us and we will action it.
Your rights
Under UK data protection law you have the following rights over your information. They are free to use.
- Access. You can ask for a copy of the information we hold about you.
- Correction. You can ask us to correct anything that is wrong or incomplete.
- Erasure. You can ask us to delete your information, although we may need to keep order records for the tax reasons above.
- Restriction. You can ask us to pause using your information while a question about it is resolved.
- Objection. You can object to us using your information where we rely on legitimate interests, including our feedback requests and advertising measurement.
- Portability. You can ask for the information you gave us in a machine-readable format.
- Withdraw consent. Where we rely on your consent, such as marketing emails, you can withdraw it at any time.
- Direct marketing. You can tell us to stop sending you marketing at any time, and we will.
To use any of these, contact us using the details at the top of this page. We will respond within one month. We may ask you to confirm your identity first, so that we do not give your information to somebody else.
Complaints
If you are unhappy with how we have handled your information, please tell us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office, which regulates data protection in the UK.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
Changes to this policy
We review this policy from time to time and will update it if what we do with your information changes. The date at the top shows when it was last updated.
