Information We Collect

When you reach out to us for corporate floral arrangements or gift services, we gather details you voluntarily share. This includes your name, company name, email address, phone number, delivery addresses, and specific floral requirements. We also collect payment details when you place orders, though these are processed securely by our payment partners.

For our corporate clients, we may gather additional business information such as company registration details, preferred delivery timelines, and budget constraints. This helps us deliver a service tailored to your business needs.

Our website automatically gathers certain technical data when you visit. This includes your IP address, browser type, device information, and your navigation through our site. We use this data to enhance site performance and to understand how clients discover our services.

How We Use Your Information

We primarily use your personal information to fulfill floral orders and deliver excellent customer care. This includes processing orders, coordinating deliveries, sending order confirmations, and following up to ensure your satisfaction.

• Processing and fulfilling your flower orders and gift arrangements
• Communicating about order status and delivery timelines
• Providing customer support and replying to your inquiries
• Enhancing our services based on your feedback and preferences
• Sending relevant updates about our offerings (with your consent)
• Keeping records for business and legal compliance purposes

We also utilize aggregated, non-personal data to understand market trends and refine our operations. For instance, we might analyze which arrangements are most popular in different seasons to better prepare inventory.

With your explicit consent, we may provide information about seasonal offerings, special promotions, or new services that could interest your business. You can opt out of these communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your information stays within our business ecosystem and is shared only when necessary to provide our services or to comply with legal obligations.

We work with trusted service providers who assist us in delivering our services. This includes payment processors, delivery partners, and flower suppliers. These partners are contractually obligated to protect your data and use it solely for the specific services they render to us.

We may disclose your information if required by United Kingdom law, court orders, or government regulations. This includes compliance with GST regulations, business licensing requirements, and other legal obligations applicable to our operations in London and across United Kingdom.

Data Security and Protection

We treat data security with utmost seriousness and deploy multiple layers of protection. Our systems use encryption for sensitive data transfer, secure servers for data storage, and regular security updates to guard against threats.

Physical security measures protect our office systems, and access to personal information is limited to employees who need it to perform their duties. Our team receives ongoing training on privacy practices and data handling procedures.

Payment data is processed through secure, encrypted systems that meet industry standards. We do not store full credit card numbers on our systems — this information is handled by certified payment processors who specialize in secure financial transactions.

While we uphold strong security measures, no system is completely risk-free. We continuously monitor and update our security practices to address evolving threats and maintain top-tier protection standards possible.

Your Rights and Choices

You have several rights regarding your personal data. You can request to view what we hold about you, ask us to correct any inaccuracies, or request deletion of your data when permissible by law.

• Access your personal information and understand how we use it
• Request corrections to inaccurate or outdated information
• Ask us to delete your personal information (subject to business and legal requirements)
• Opt out of marketing communications while continuing to receive service-related messages
• Request information about how your data has been shared
• File complaints about our privacy practices

We retain your information only as long as it serves business purposes and legal requirements. Order records are typically kept for accounting and warranty reasons, while marketing preferences remain until you request removal.

When your information is no longer needed, we securely delete or anonymize it. Some data may be kept longer if required by United Kingdom business laws or for legitimate business interests like fraud prevention.

Cookies and Website Technology

Our site uses cookies to enhance your browsing experience and to help us understand how visitors use our site. Cookies are small files stored on your device that remember your preferences and enable certain website features.

Essential cookies are required for the site to function properly — they enable basic navigation and access to secure areas. These cookies don’t collect personal data and are automatically enabled when you use our site.

We employ analytics cookies to learn how visitors engage with our site. This helps us identify popular content, optimize page performance, and improve user experience. This information is collected in aggregate form and doesn’t identify individual users.

You can adjust cookie settings through your browser preferences. Note that disabling certain cookies might affect some site features and your overall experience.

Business Transfers and Changes

If GentleWhisperEcho experiences major business changes such as mergers, acquisitions, or asset sales, your personal information may be transferred as part of the transaction. We would notify you of any such changes and ensure your data remains protected under privacy standards consistent with this policy.

In the unlikely event that we cease operations, we would ensure your data is either securely transferred to a successor entity (with appropriate privacy protections) or securely deleted in accordance with data protection best practices.

Updates to This Privacy Policy

We may periodically update this privacy policy to reflect changes in our practices, services, or legal requirements. When substantial changes occur, we will alert you by email or by posting a notice on our website before they take effect.

Minor updates for clarity or administrative changes may be made without prior notice. We encourage you to review this policy periodically to stay informed about how we safeguard your privacy.

Children's Privacy

Our services are designed for businesses and adult consumers. We do not knowingly collect personal information from individuals under 18. If we learn that we have unintentionally collected data from someone under 18, we will promptly remove that information from our systems.

Parents or guardians who believe we may have collected information from their child can contact us using the details below, and we will address the matter immediately.

International Data Considerations

Our primary operations are located in United Kingdom, and data is stored and processed within United Kingdom's jurisdiction. However, some of our service providers may process data abroad. When this happens, we ensure proper safeguards are in place to protect your information according to applicable privacy laws.

We comply with United Kingdom data protection laws and regulations, including those related to business operations, financial transactions, and customer data handling. Our practices align with evolving privacy standards in United Kingdom's digital economy.