Privacy Policy

This Privacy Policy explains how Flourishhandles your personal information when you use the Flourish website (the “Site”). It should be read together with our Terms & Conditions.

We collect information in three main ways:

• Information you give us— for example when you create an account, place an order, contact support, or submit a review.
• Information collected automatically— for example through cookies and similar technologies when you use the Site.
• Information from third parties— for example confirmation data from our payment provider and updates from delivery partners.

Depending on how you use the Site, the personal information we collect may include:

• your name, email address, and phone number;
• delivery and billing addresses;
• order history and details of products you have viewed or bought;
• account login details;
• messages and other content you send us, including reviews and ratings;
• your marketing and communication preferences.

If you create an account

We store the details needed to run your account, such as your name, email address, login credentials (kept in a protected form), saved addresses, and order history, so you can check out faster and track your orders.

If you check out as a guest

You can buy from the Site without creating an account. When you do, we still collect the information needed to process that specific order — your name, contact details, delivery address, and order details — and we keep it as part of the order record so we can fulfil the order, provide support, handle returns, and meet our legal obligations. Guest checkout does not create a password-protected account for you.

Payments are processed by a third-party payment provider PayMaya. Your card or payment details are entered and processed on the provider’s secure systems.

• We do not receive or store your full card number.
• We receive limited information from the provider — such as whether a payment succeeded or failed, a transaction reference, and partial card details — which we use to process orders, issue refunds, and help prevent fraud.

We use personal information to:

• process, fulfil, and deliver your orders, and take payment;
• send service messages such as order confirmations and delivery updates;
• provide customer support and handle returns, refunds, and cancellations;
• create and manage your account, if you have one;
• keep the Site secure and prevent fraud and abuse;
• understand how the Site is used so we can improve it and our products;
• send marketing communications where you have agreed or where otherwise allowed by law — you can opt out at any time;
• comply with our legal and regulatory obligations.

Where required by applicable law, we rely on a lawful basis for each use — typically performing our contract with you, our legitimate business interests, your consent, or compliance with a legal obligation.

We use cookies, browser local storage, and similar technologies to make the Site work and to understand how it is used. For example, we use them to:

• keep the items in your shopping cart;
• keep you signed in to your account;
• remember your preferences;
• keep the Site secure;

Some of these technologies are essential for the Site to function; others are optional. You can control or delete cookies through your browser settings, but blocking essential ones may stop parts of the Site — such as the cart, checkout, or sign-in — from working properly.

We do not sell your personal information. We share it only where needed, including with:

• our payment provider, to process payments and refunds;
• delivery and logistics partners, to deliver your orders;
• technology providers who host and support the Site and our systems;
• communication providers who help us send emails and messages;
• analytics providers, where used, to help us understand and improve the Site;
• professional advisers, and government or law-enforcement bodies where we are legally required to share information or need to protect our rights;
• a buyer or successor entity if the business is sold, merged, or reorganised.

We use technical and organisational measures — such as encryption of data in transit, access controls, and secured infrastructure — to protect personal information against loss, misuse, and unauthorised access.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You also play a part: please keep your account password confidential and do not share it. If we become aware of a data breach that affects you, we will notify you and the relevant authorities where the law requires it.

We keep personal information only for as long as we need it for the purposes described in this policy, including:

• order and transaction records — for [retention period, e.g. as required by tax and accounting law];
• account information — while your account remains active;
• marketing information — until you opt out or ask us to stop.

When information is no longer needed, we delete it or make it anonymous.

Depending on where you live, you may have some or all of the following rights over your personal information:

• to access a copy of the information we hold about you;
• to ask us to correct information that is wrong or incomplete;
• to ask us to delete information in certain circumstances;
• to object to or ask us to restrict certain processing;
• to ask us to transfer certain information to you or another provider;
• to withdraw consent where we rely on it.

If you checked out as a guest, you can still contact us to exercise these rights over the information linked to your order. To make a request, contact us using the details in Contact Information. We may need to verify your identity first. You can opt out of marketing at any time using the unsubscribe link in our emails or by contacting us.

The Site and our products are intended for adults aged [minimum age, e.g. 18] and over. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when the most recent version took effect.

Where changes are significant, we will make this clear or notify you where the law requires it. By continuing to use the Site after an updated policy is posted, you accept the updated policy.

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

• Email: [privacy or support email address]
• Post: [business address]
• Data protection contact: [name or role, if applicable]

For the rules that apply to using the Site and placing orders, see our Terms & Conditions.