Privacy Policy for Speakeasy Stems

Speakeasy Stems is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site, engage with our services, or participate in our workshops.

Data Controller Information

Company Name: Speakeasy Stems
Address: 7 The Maltings, Brick Lane, Floor 3, London, Greater London, E1 6SB, UK

Information We Collect

We may collect personal information directly from you when you interact with our site or services. The types of information we collect depend on the nature of your interaction.

• Personal Identifiers: Such as your name, email address, postal address, and phone number when you make an inquiry, place an order, subscribe to our newsletter, or book a workshop.
• Transactional Data: Details about products or services you have purchased from us, including bespoke floral arrangements, event styling packages, and workshop bookings. We do not store full payment card details on our servers; these are processed securely by third-party payment processors.
• Communication Data: Records of your correspondence with us, including emails and messages through our contact forms or social media.
• Technical Data: Information about your device and how you interact with our site, such as your IP address, browser type, operating system, referral sources, and pages viewed. This is collected automatically via cookies and similar technologies.
• Marketing Preferences: Your preferences in receiving marketing from us and our third parties, and your communication preferences.

How We Use Your Information (Legal Basis for Processing)

We use your personal information for various purposes, supported by specific legal bases under GDPR:

• To fulfill a contract: To process and deliver your orders for bespoke floral arrangements, event styling services, floral subscriptions, and workshop bookings. This includes managing payments, invoices, and communicating about your order.
• For our legitimate interests:
  • To improve our services, site functionality, and user experience.
  • To respond to your inquiries, provide customer support, and manage our relationship with you.
  • To send you marketing communications about our products, services, and workshops that may be of interest to you, where we have a lawful basis to do so (e.g., existing customer, or soft opt-in for similar products).
  • To detect and prevent fraud and other illegal activities, and to maintain the security of our site.
  • For business analysis, such as monitoring sales, customer trends, and the effectiveness of our marketing campaigns.
• With your consent: For specific purposes where you have given us explicit consent, such as subscribing to our email newsletter for marketing communications beyond our legitimate interests. You have the right to withdraw consent at any time.
• To comply with legal obligations: To meet any legal or regulatory requirements, including tax, accounting, and audit obligations.

Sharing Your Information

We do not sell your personal data. We may share your information with trusted third parties under specific circumstances:

• Service Providers: We work with third-party service providers who assist us in operating our business, such as payment processors, website hosting, email communication services, and analytics providers. These providers only have access to the personal information necessary to perform their functions and are obligated to maintain its confidentiality and security.
• Legal and Regulatory Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

International Data Transfers

Some of our service providers may be located outside of the European Economic Area (EEA). When we transfer your personal data to countries outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Standard Contractual Clauses).

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights (GDPR)

Under data protection law, you have rights including:

• Your right of access: You have the right to ask us for copies of your personal data.
• Your right to rectification: You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure: You have the right to ask us to erase your personal data in certain circumstances.
• Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Your right to object to processing: You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability: You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
• Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided below.

Cookies and Tracking Technologies

Our site uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors are coming from. You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the site.

Third-Party Links

Our site may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Security Measures

We implement appropriate technical and organisational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our site is at your own risk. You should only access the services within a secure environment.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, your data, or would like to exercise any of your data protection rights, please contact us:

Speakeasy Stems
7 The Maltings, Brick Lane, Floor 3
London, Greater London, E1 6SB
UK

Complaints

If you have a complaint about how we handle your data, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.