Just a moment
Just a moment
Small print
How we handle your information
The short version. We collect what we need to send flowers to the right door and nothing else. We never see your card number. We do not sell your details to anybody, ever.
You can ask us for a copy of what we hold, or ask us to delete it, by replying to any of our emails.
We are the data controller for the information described here. That means we decide what is collected and why, and we are accountable for it.
Hana Blossom Limited, a company registered in England and Wales under company number 16550074.
Registered office and studio: Flat 8 Oaks View, Epsom, Surrey, KT19 8NG.
Email: hello@hanablossom.co.uk · Phone: +44 7982 361407
Not registered for VAT, so no VAT is charged and none is shown.
Your name, email address and phone number. The name, address, phone number and any access notes for whoever is receiving the flowers. The message you want written on the card. What you ordered and when it is going.
Why we are allowed to: we need it to perform the contract you entered into when you ordered. Without it there is no order.
If you send flowers to somebody else, you give us their details and they did not. We rely on our legitimate interest in delivering what you asked us to deliver. We use those details only to get the flowers to them, we do not add them to any mailing list, and we do not keep them to market to later. If you are the recipient and you would rather we did not hold your address, tell us and we will remove it once the delivery is done.
When we hand-deliver a bouquet we may take one photo of it at the door, so the person who ordered can see it arrived. The photo is of the flowers, but it can show part of a door or a house number. It is sent only to the person who ordered, kept privately, never published or used for marketing, and deleted 90 days after the delivery. If you would rather we did not take one, put it in the delivery notes or tell us.
We never see or store your card details. The payment form on our checkout belongs to Stripe and your card goes straight to them. We receive confirmation that a payment succeeded, the amount, and the last four digits, which is what lets us match a payment to an order.
Whatever you put in the form: names, date, venue, guest numbers, budget range, and anything you tell us about what you want. We use it to answer you and to prepare a proposal. If you do not go ahead, we keep the enquiry for two years so that we recognise you if you come back, and then we delete it.
Your email address, and your name if your sign-in provider gives it to us. If you sign in with Google or Apple we receive your email address and an identifier for your account with them. We never receive your password, and we do not ask for one. Signing in gives us no access to your contacts, your calendar, your files or anything else.
We count page views so we can see which pages people actually use. It is anonymous, it sets no cookies and it does not follow you to other websites. You can turn it off on the cookies page.
If you say yes in the cookie banner, we also use Google Analytics 4. It sets cookies with a random identifier and records the pages you visit, your device and browser, and your approximate location, so we can see how people find and use the site. We rely on your consent for this, and nothing is loaded unless you give it. You can withdraw it at any time through “Cookie settings” at the bottom of any page, and it is as easy as giving it. Google Analytics 4 does not log or store IP addresses. Google deletes it after the retention period set in our account, which is 14 months. Google signals stays switched off.
If you choose “Accept all”, we also let Google Ads measure whether a click on one of our adverts led to an order or an enquiry. Google receives the identifier of that ad click and the fact that an order or enquiry followed, with its value, never your name, email or address. We rely on your consent for this too, and withdraw it the same way. We do not use it for personalised advertising or to follow you to other websites.
Your email address, on the basis of your consent. Every email we send has an unsubscribe link and leaving takes one click. Order confirmations are not marketing: those we send because you bought something, and they continue whether or not you are on the list.
If you reach the payment step and do not pay, we may send you one email about two hours later with a link back to your basket. Only one, and only if you left the box at checkout ticked. It uses the email address you gave us for that order, on the basis of our legitimate interest in helping you finish something you started, and the rules for emails about our own products to people who were buying them. Every reminder has a link to stop them, and you can untick the box at checkout so it is never sent.
Only the companies that make the site work, and only the part each of them needs. None of them may use your information for their own purposes.
Some of these are based outside the UK. Where information leaves the UK it is protected by the safeguards that UK data protection law requires, such as the UK International Data Transfer Agreement or an adequacy decision. For Google, that is the UK Extension to the EU–US Data Privacy Framework, backed by the UK International Data Transfer Addendum in Google’s terms.
We will also hand over information if the law requires it. We have never been asked and we would tell you if we could.
You can ask us to:
Email us and we will answer within one month. We will not ask you why.
If you are not happy with how we have handled something, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first, but you do not have to.
The site is served over an encrypted connection and nothing that identifies you is stored in your browser except the cookies listed on the cookies page. Orders and addresses are visible only to us, behind a login. Printed delivery sheets are destroyed once the round is done.
If we change how we use your information we will update this page, and we will tell you directly if the change is one you would want to know about.
Last updated 16 October 2026.