Privacy Policy

The Florist by the Sea · Last updated: 19 October 2026

At The Florist by the Sea, we take your privacy seriously. This policy explains how we collect, use, share and protect personal information when you use our website, buy flowers or gifts, subscribe to our newsletter, enquire about an event or attend a workshop.

1. Who we are

The Florist by the Sea is a floristry business operated by Elizabeth Stuart, a sole trader in Ireland. Elizabeth Stuart is the data controller for personal information processed by the business.

Business address: Knight Park, Charlesland Road, Greystones, Co. Wicklow, Ireland.

Email: thefloristbythesea@gmail.com | Telephone: 089 250 3991 | Website: www.thefloristbythesea.ie

2. Information we collect

We may collect your name, email address, telephone number, billing address, delivery address, order details, flower-card messages, delivery instructions, workshop bookings, newsletter preferences and information you provide in wedding, event and contact forms.

When you order a gift for someone else, we may receive that person's name, delivery address and contact details from you. We also receive limited payment and transaction details from our payment provider; we do not need to store full payment card numbers to fulfil orders.

Our website may collect technical information, such as IP addresses, browser and device details, pages visited and cookie identifiers, depending on your cookie preferences. Please avoid including sensitive personal information in order notes, gift messages or enquiries unless necessary.

3. Why we use your information and our legal bases

Orders and bookings: to take payment, prepare products, organise collection or delivery, communicate about orders, issue refunds and manage Flower School bookings. Legal basis: performance of a contract, or steps taken at your request before entering one.

Enquiries: to answer general, wedding, corporate and event enquiries and prepare quotations. Legal basis: steps before a contract where applicable, or our legitimate interest in responding to enquiries.

Administration and compliance: to keep accounting and tax records and meet applicable legal requirements. Legal basis: legal obligation.

Customer service and website security: to handle complaints, protect our business, prevent misuse and maintain website functionality. Legal basis: legitimate interests, subject to your rights and interests.

Newsletters and marketing: to send marketing messages when you have consented, or where a limited existing-customer exception lawfully applies. Legal basis: consent or, where permitted, legitimate interests alongside the applicable electronic marketing rules.

Non-essential analytics: to understand website usage through Google Analytics where you have consented to the relevant cookies or tracking. Legal basis: consent.

4. Flowers delivered to other people

If you buy flowers or a gift for another person, we use their details only as reasonably necessary to arrange and complete delivery, respond to related questions and maintain appropriate order records. We do not add gift recipients to our marketing list merely because they received a delivery.

If appropriate, we provide gift recipients with privacy information when we communicate with them; they can contact us using the details above.

5. Payments and service providers

Our website is hosted on Squarespace. We use Stripe for online payment processing. When you pay online, Stripe processes payment information under its own privacy practices and contractual arrangements. We receive information needed to confirm and manage the transaction.

We may share relevant data with Squarespace, Stripe, the services used to send email or newsletters, delivery providers, IT support providers and professional advisers such as accountants, only where necessary and lawful. We may also disclose information when legally required.

For more information on Stripe's handling of personal data, see https://stripe.com/privacy .

6. Newsletters and abandoned checkouts

If you sign up for our newsletter, we use your contact details to send news, seasonal products, Flower School dates and offers. You can withdraw your consent at any time by using the unsubscribe link in a marketing email or contacting us.

If you start checkout but do not complete a purchase, Squarespace may retain information needed for the checkout process. We will send abandoned-checkout reminder emails only where we have a lawful basis and any electronic marketing consent required by Irish law. Entering an email address during checkout does not, by itself, mean you have agreed to marketing emails.

You can object to direct marketing at any time.

7. Cookies and Google Analytics

Squarespace uses cookies and similar technologies, including cookies needed for essential website functions such as the shopping cart and checkout. We also use Google Analytics to understand use of our website.

Visitors can accept or reject non-essential cookies through our website's cookie controls. Analytics cookies or similar non-essential tracking should not run unless the relevant consent has been given. You can change or withdraw your cookie choices through the cookie controls on our website.

To learn about cookies used by Squarespace, see https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses . Google explains its data practices at https://policies.google.com/privacy .

8. International transfers

Some service providers, including website, payments and analytics providers, may process personal information outside the European Economic Area. Where GDPR requires safeguards for an international transfer, we rely on a valid transfer mechanism, such as an adequacy decision or approved contractual safeguards, as applicable. You can contact us for further information about relevant safeguards.

9. How long we keep information

We keep personal information only for as long as it is needed for its purpose and any applicable legal requirements. Business and tax records are generally retained for six years under Irish tax-record rules, although a longer period may apply in particular circumstances.

Order and booking information is held while needed for fulfilment, customer service, accounting or disputes. Enquiry information is kept only as long as reasonably necessary to respond and follow up. Newsletter information is kept until you unsubscribe or we otherwise remove it, subject to records needed to respect your marketing choices. Cookie retention depends on the cookies used and your preferences.

10. Your data protection rights

Subject to applicable conditions and exceptions, you may request access to your personal information, correction, erasure, restriction of processing, portability, or object to certain processing. You may withdraw consent whenever processing relies on it, without affecting processing already carried out lawfully.

To make a request, email thefloristbythesea@gmail.com. We may need to verify your identity before responding. We will respond within the periods required by data protection law, ordinarily within one month.

11. Security

We use reasonable organisational and technical measures to protect information in our care and use established providers for website and payment services. No internet service can guarantee absolute security.

12. Children

Our online shop is primarily intended for adults. For children's workshops, a parent or guardian should make the booking and supply any information reasonably needed to organise the activity. We do not knowingly add children to our marketing lists.

13. External websites

Our website may link to third-party services or social media pages. Their privacy practices are governed by their own notices.

14. Complaints

If you have a concern about how we handle personal information, please contact us at thefloristbythesea@gmail.com. You also have the right to complain to the Irish Data Protection Commission at https://www.dataprotection.ie/ .

15. Changes to this policy

We may update this policy as our website, services or legal obligations change. The latest version and its revision date will be published on this page.