Information We Collect

When you reach out to us for corporate floral arrangements or gift services, we gather details you willingly share. This includes your name, company name, email address, phone number, delivery addresses, and specific requirements for your floral needs. We also collect payment details when you place orders, though this is securely handled by our payment partners.

For our corporate clients, we may acquire additional business information such as company registration data, preferred delivery times, and budgetary requirements. This helps us tailor our service to your business needs.

Our website automatically gathers certain technical data when you visit. This includes your IP address, browser type, device information, and how you navigate our site. We use this information to enhance site performance and understand how clients discover our services.

How We Use Your Information

We primarily use your personal data to fulfill floral orders and deliver excellent customer support. This includes processing orders, coordinating deliveries, sending order confirmations, and following up to ensure your satisfaction.

• Processing and fulfilling your flower orders and gift arrangements
• Communicating about order status and delivery timelines
• Providing customer support and addressing your inquiries
• Improving our services based on your feedback and preferences
• Sending relevant service updates (with your consent)
• Maintaining records for business and legal compliance

We also use aggregated, non-personal data to understand market trends and optimize our operations. For instance, we may analyze which arrangement types are popular in different seasons to better manage inventory.

With your explicit consent, we may share information about seasonal offerings, promotions, or new services that could interest your business. You can opt out of these messages at any time by clicking the unsubscribe link in our emails or contacting us directly.

Information Sharing and Disclosure

We do not sell, rent, or exchange your personal information to third parties for their marketing purposes. Your data remains within our business ecosystem and is shared only when needed to provide our services or to comply with legal requirements.

We collaborate with trusted service providers who assist in delivering our services. This includes payment processors, delivery partners, and flower suppliers. These partners are contractually obligated to protect your information and use it solely for the specific services they perform for us.

We may disclose your information if required by United Kingdom law, court orders, or government regulations. This includes compliance with GST regulations, business licensing requirements, and other legal obligations applicable to our operations in London and across United Kingdom.

Data Security and Protection

We take data security seriously and implement multiple layers of protection. Our systems use encryption for sensitive data transmission, secure servers for storage, and regular security updates to defend against threats.

Physical security measures protect our office systems, and access to personal information is limited to employees who need it for their work. Our team receives ongoing training on privacy practices and data handling procedures.

Payment information is processed through secure, encrypted systems that comply with industry standards. We do not store complete credit card numbers on our systems—this data is handled by certified payment processors specializing in secure financial transactions.

While we employ strong security measures, no system is immune to risk. We continuously monitor and update our security practices to address evolving threats and maintain the highest possible protection standards.

Your Rights and Choices

You have several rights regarding your personal information. You may request to view the data we hold about you, ask us to correct inaccurate information, or request deletion of your data when permissible by law.

• Access your personal information and understand how we use it
• Request corrections to inaccurate or outdated information
• Ask us to delete your personal information (subject to business and legal requirements)
• Opt out of marketing communications while continuing to receive service-related messages
• Request information about how your data has been shared
• File complaints about our privacy practices

We keep your information only as long as necessary for business purposes and legal requirements. Order records are generally kept for accounting and warranty purposes, while marketing preferences remain until you request their removal.

When we no longer need your information, we securely delete or anonymize it. Some data may be retained longer if required by United Kingdom business laws or for legitimate business interests like fraud prevention.

Cookies and Website Technology

Our website uses cookies to enhance your browsing experience and help us understand how visitors use our site. Cookies are small files stored on your device that remember your preferences and enable certain features.

Essential cookies are necessary for proper website operation—they enable basic functions like page navigation and secure access. These cookies do not collect personal data and are enabled automatically when you use our site.

We employ analytics cookies to learn how visitors interact with our site. This helps us identify popular content, optimize page performance, and enhance the user experience. This information is aggregated and does not identify individuals.

You can adjust cookie settings through your browser. Note that disabling certain cookies may affect some features and your overall browsing experience.

Business Transfers and Changes

If Stem & Story Studio undergoes significant business changes such as mergers, acquisitions, or asset sales, your personal information may be transferred as part of the transaction. We would inform you of any such changes and ensure your data remains protected under privacy standards consistent with this policy.

In the unlikely event that we discontinue operations, we would ensure your personal information is either securely transferred to a successor business (with appropriate privacy protections) or securely deleted in accordance with data protection best practices.

Updates to This Privacy Policy

We may periodically update this privacy policy to reflect changes in our practices, services, or legal requirements. When substantial changes occur, we will inform you by email or by posting a notice on our website before they take effect.

Minor updates for clarity or administrative adjustments may be made without prior notice. We encourage you to review this policy from time to time to stay informed about how we protect your privacy.

Children's Privacy

Our services are intended for businesses and adult consumers. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from someone under 18, we will promptly remove that information from our systems.

Parents or guardians who believe we may have collected information from their child can contact us using the details below, and we will address the matter promptly.

International Data Considerations

Our primary operations are based in United Kingdom, and we store and process data within United Kingdom jurisdiction. However, certain service providers may process data internationally. When this happens, we implement appropriate safeguards to protect your information in line with applicable privacy laws.

We comply with United Kingdom data protection laws and regulations, including matters related to business operations, financial transactions, and customer data handling. Our practices align with evolving privacy standards in United Kingdom's digital economy.