Privacy Policy

PRIVACY POLICY

Kitty Willow Flower Studio is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website or interact with our services. By accessing our website or purchasing from us, you consent to the practices described below.

WHAT INFORMATION WE COLLECT

Personal Information: When you make a purchase or create an account, we collect your name, email address, phone number, billing and shipping addresses, payment details, and order history. This helps us improve your checkout experience and customer service.

Technical Information: We automatically collect your IP address, browser type, and operating system when you access our website. This information helps us monitor and improve our website's performance and security.

Cookies: We use cookies to collect information about your browsing activity on our site, including details of pages you’ve visited and actions taken. For more information on how we use cookies, see our "Cookies" section below.

Webform Submissions: When you submit information through a webform on this website, we collect the data you provide in the form to track and respond to your submissions. This information is shared with Squarespace, our website hosting provider, to facilitate website services, and with Zapier for data porting and integrations.

Hosting Provider Data Collection: This website is hosted by Squarespace. Squarespace collects certain personal data when you visit the site, including information about your browser, network, and device; web pages you visited prior to coming to this website; web pages you view while on this website; and your IP address. Squarespace requires this data to run the website and to protect and improve its platform and services. This data is analysed in a de-personalised form.

HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

To process and deliver your orders, including handling payments through Stripe.
To communicate with you about your orders, inquiries, or marketing (if you’ve opted in).
To personalise your experience on our website.
To monitor and improve our website’s functionality and performance.
To comply with legal obligations.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

Under the UK GDPR, we process personal data on the following legal bases:

Consent: We may process your personal data if you have provided your explicit consent. For example, when you subscribe to our newsletter or opt-in to receive marketing communications. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing emails or by contacting us directly.

Contractual Necessity: We process personal data when it is necessary to fulfil a contract with you, such as processing your orders, handling payments, and delivering products. This includes the use of your billing and shipping addresses, payment details, and contact information to complete your purchase.

Legitimate Interests: We may process personal data based on our legitimateinterests, provided that these interests are not overridden by your rights and freedoms. Examples of legitimate interests include:

Improving the performance and functionality of our website.
Preventing fraud and ensuring the security of our services.
Sending you important account-related emails (e.g., order confirmations or password reset requests).

Legal Obligations: We may process personal data to comply with legal obligations, such as tax or regulatory requirements, including keeping records of your purchases for accounting and tax purposes.

HOW WE SHARE YOUR INFORMATION

We do not sell, trade, or rent your personal information. However, we may share your information with trusted third parties, including:

Payment Processors: We use Stripe to securely process your payments. Your payment details are handled according to Stripe's privacy policies.
Service Providers: Such as website hosting services, email providers, or delivery partners.
Legal Authorities: If required by law, we may share your information to comply with legal obligations.

DATA STORAGE AND RETENTION

We securely store your personal data for as long as necessary to fulfil the purposes outlined in this policy or as required by law. If you request the deletion of your data, we will ensure it is removed unless retention is legally required.

MARKETING AND COMMUNICATION

We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with Squarespace, our email marketing provider, so they can send these emails on our behalf.

Additionally, we may email you with important messages related to your order or account activity. These include:

Notification that you’ve created a customer account
Notification that your customer account password has been reset or updated
Confirmation that you’ve made a purchase
Notification that your order has shipped

Please note, it’s not possible to unsubscribe from these account-related messages, as they are necessary for processing your order and maintaining your account. We share your contact information with Squarespace, our website hosting provider, to facilitate the sending of these emails.

PAYMENTS

When you make a purchase on our website, we use Squarespace Payments as our payment solution. This is a fully integrated, native payment solution provided by Squarespace, our website hosting provider. To process your payment, Squarespace Payments utilises third-party service providers, including:

Stripe: For payment processing services. Stripe processes your payment details in accordance with their privacy policy.
Sift: For fraud monitoring and detection services. Sift processes data in accordance with their privacy policy. 

By using our website to make a purchase, you agree to the collection and processing of your payment information by these third-party providers as outlined in their respective privacy policies.

COOKIES

Our website uses cookies to enhance your browsing experience and analyse website traffic. Cookies are small files stored on your device that allow us to recognise your preferences and improve site performance. For information about viewing the cookies dropped on your device, visit The Cookies Squarespace Uses.

These necessary and required cookies are always used, which allows Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

You can manage or disable cookies in your browser settings; however, doing so may impact your ability to use certain features on our website.

INTERNATIONAL TRANSFERS

Some of the services we use may involve transferring your personal data to countries outside the UK. When this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with UK data protection laws.

YOUR RIGHTS

Under the UK GDPR, you have the following rights in relation to your personal data:

Right to access the personal data we hold about you.
Right to rectification of any inaccurate or incomplete data.
Right to erasure ("right to be forgotten") under certain circumstances.
Right to restrict processing of your personal data in certain situations.
Right to data portability, meaning you can request your personal data in a commonly used, 
machine-readable format.
Right to object to the processing of your personal data for specific purposes, such as marketing.

If you wish to exercise any of these rights, please contact us at hello@kitty-willow.com. 

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

THIRD-PARTY LINKS

Our website may include links to third-party websites. We are not responsible for the privacy practices or content of these external sites.

CHILDREN’S PRIVACY

We do not knowingly collect or solicit personal data from children under 13. If we learn that we have collected personal data from a child under 13, we will take steps to delete such information.

CHANGES TO THIS POLICY

We may update this policy from time to time. Any changes will be posted on this page, and the updated policy will take effect immediately. Please check this page periodically to stay informed.

CONTACT US

For any questions or concerns about this Privacy Policy, please email us at hello@kitty-willow.com