Privacy & Data Notes

This page explains, in plain language, how Stem & Stallways handles personal data. We are a small guide to English flower markets. We do not trade in data and we do not sell user information. We collect only the details needed to reply to enquiries and to keep the site steady.

Who We Are

Our Approach to Privacy

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For electronic communications, we also consider the Privacy and Electronic Communications Regulations (PECR). Our goal is to keep data collection minimal, transparent, and purposeful.

What We Collect

• Contact form data: your name, email address, and (optionally) phone number and message text — used to respond to your enquiry.
• Basic analytics: high-level page counts and technical logs that help us understand if the site is working. We do not build individual user profiles.
• Cookie preferences: a small record of whether you accepted or declined non-essential cookies in our banner.

Why We Collect It (Lawful Basis)

• Enquiries: we process contact form details to respond, which we consider a legitimate interest and, when you ask us to reply, part of taking steps at your request.
• Site stability and security: logs and essential cookies are used to keep the service functioning — a legitimate interest.
• Non-essential cookies: used only with your consent.

How Long We Keep Data

Enquiry emails are kept for up to twelve months for reference and follow-ups unless you ask us to remove them sooner. Technical logs rotate on short schedules. Cookie preferences are stored until they expire or you change them.

Sharing and International Transfers

We do not sell or rent your data. Where we use third-party providers (for example, web hosting or email transport), we choose reputable services that offer appropriate safeguards. Data may be processed outside the UK where providers operate globally, but we aim to ensure a lawful transfer mechanism and adequate protections.

Your Rights (UK GDPR)

• Right of access — to request a copy of your personal data.
• Right to rectification — to correct inaccurate details.
• Right to erasure — to ask us to delete your data where it is no longer needed.
• Right to restrict or object — to certain processing.
• Right to data portability — to receive data you provided, where applicable.
• Right to withdraw consent — for any processing based on consent, at any time.

To exercise these rights, contact us using the details above. If your concern is not resolved, you can raise it with the Information Commissioner’s Office (ICO) in the UK.

Cookies and PECR

Essential cookies are used to operate the site. Non-essential cookies (for comfort features or aggregate analytics) run only if you choose “Accept” in our banner. You can revisit your choice on the Cookies & Preferences page.

Children

Our content is not directed at children. If you believe a child has provided us with personal data, please contact us for prompt removal.

Links to Other Sites

Our notes may reference external websites. We are not responsible for their content or privacy practices. Please review their policies before submitting personal information.

Changes to This Page

We may update this page to reflect changes in law or our practices. The latest version will always appear here with a clear date.

Last Updated

22 September 2025