Privacy Policy

Last updated: 17th of September 2026

Who we are

Milli Fleur is a floristry business run by Kat Hughes, a sole trader based in Tavistock, Devon. We are the data controller for the personal information described in this policy.

The best way to reach us about anything in this policy is by email:

What this policy covers

This policy explains what personal information we collect when you visit our website, buy from our shop, book a workshop, sign up to our newsletter or contact us, what we do with it, and what rights you have.

The information we collect

When you place an order

  • Your name, email address, delivery and billing address, and phone number

  • Details of what you ordered and the amount paid

  • Any message you ask us to include on a gift card, and any delivery instructions

  • The recipient's name, address and phone number, where you are sending flowers or a gift to someone else

We do not see or store your full card details. Payments are processed by our payment providers (see "Who we share information with").

When you book a workshop

  • Your name, email address and phone number

  • The session you have booked and any access or dietary requirements you tell us about

When you sign up to our newsletter

  • Your name and email address

  • Whether you open our emails and click links in them, so we can see what people find useful

When you contact us

  • Your name, contact details and the content of your message, by email, our contact form or social media

When you use the website

  • Your IP address, device and browser type, the pages you view and how you arrived at our site

  • Information collected through cookies and similar technologies (see "Cookies and tracking")

Information about the recipients of gifts

If you give us someone else's details so we can deliver to them, we use those details only to fulfil and deliver that order. Please make sure they are happy for you to share their details with us.

Marketing emails

We only send marketing emails if you have asked us to, or if you have bought from us and we think you would want to hear about similar things. Every email has an unsubscribe link at the bottom, and you can also email us to be taken off the list. We will not pass your details to other businesses for their own marketing.

Cookies and tracking

Our website uses cookies — small files stored on your device.

  • Essential cookies keep the site working: they remember what is in your basket, keep you logged in and keep the checkout secure. The site cannot work properly without these.

  • Analytics cookies Google Analytics tell us how many people visit, which pages they look at and how they found us. This is collected in a way that helps us understand patterns rather than identify you personally.

  • Advertising cookies Meta, Pinterest let us show ads on Facebook, Instagram and Pinterest to people who have visited our site, and let us see whether those ads lead to sales.

Our website also has social sharing features, including Pinterest save buttons on our images. When you use these, the relevant social network may set cookies and receive information about the page you were on, under their own privacy policies.

You can accept or reject non-essential cookies using the banner shown when you first visit, and you can change your choice at any time in your browser settings. Blocking cookies may stop parts of the site from working.

Who we share information with

We do not sell your personal information. We share it with the following, who provide services to us:

  • Squarespace — hosts our website, runs our online shop and stores our order and customer records, sends our newsletters, and processes card and digital wallet payments through Squarespace Payments and its payment partners

  • Google — provides website analytics [Google Analytics]

  • Meta (Facebook and Instagram) — provides advertising and measurement tools

  • Pinterest — provides the save buttons and advertising tools on our site

  • [Delivery partner / courier] — delivers orders, where we do not deliver ourselves

  • Our accountant and other professional advisers — where needed to run the business and meet our legal obligations

  • HMRC and other authorities — where the law requires it

Some of these companies are based outside the UK, including in the United States. Where your information is transferred outside the UK, it is protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK extension to the EU–US Data Privacy Framework.

How long we keep your information

  • Order and payment records: 6 years after the end of the tax year they relate to, because tax law requires it

  • Workshop bookings: 2 years after the session

  • Newsletter subscribers: until you unsubscribe, and for a short period afterwards so we know not to contact you again

  • Enquiries and correspondence: 2 years after the conversation ends, unless it relates to an order

Keeping your information safe

We use reputable providers who keep our website and payment pages secure and encrypted. Access to customer information is limited to the people who need it to run the business. No system is completely secure, but we take reasonable steps to protect your information and will tell you and the Information Commissioner's Office if a breach occurs that requires it.

Your rights

Under UK data protection law, you have the right to:

  • ask for a copy of the personal information we hold about you

  • ask us to correct information that is wrong

  • ask us to delete information, where there is no ongoing reason for us to keep it

  • ask us to restrict or object to how we use it, including for marketing

  • ask us to transfer your information to another provider

  • withdraw your consent at any time, where we rely on consent

To exercise any of these, email us at hello@millifleur.com. We will respond within one month.

Children

Our website and shop are intended for adults. We do not knowingly collect information from children. If a child attends one of our workshops, we only collect the details their parent or guardian gives us when booking.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Please check back occasionally.