Information We Collect

When you reach out to us for corporate floral arrangements or gift services, we gather information you choose to share. This may include your name, organization name, email address, phone number, delivery locations, and specific floral requirements. Payment details are also collected for orders, though processing is handled securely by our payment partners.

For our corporate clients, we may request additional business information such as company registration details, preferred delivery times, and budget considerations to tailor our services to your needs.

Our site automatically collects certain technical data when you visit. This includes your IP address, browser type, device information, and navigation patterns. We use this information to enhance site performance and understand how clients discover our services.

How We Use Your Information

We primarily use your personal information to fulfill flower orders and deliver exceptional service. This includes processing orders, coordinating deliveries, sending order confirmations, and following up to ensure you’re satisfied.

• Processing and fulfilling your flower orders and gift arrangements
• Communicating about order status and delivery timelines
• Providing customer support and responding to inquiries
• Improving our offerings based on your feedback and preferences
• Sending relevant updates about our services (with your consent)
• Maintaining records for business and legal compliance purposes

We also use aggregated, non-identifying information to understand market trends and improve our operations. For instance, we might analyze which arrangement types are most popular in different seasons to better prepare inventory.

With your explicit consent, we may share information about seasonal offerings, special promotions, or new services that could interest your business. You can opt out of these messages at any time by using the unsubscribe link in our emails or contacting us directly.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. Your information stays within our business ecosystem and is shared only when needed to provide services or meet legal obligations.

We collaborate with trusted service providers who assist in delivering our services, including payment processors, delivery partners, and flower suppliers. These partners are contractually obligated to safeguard your information and to use it solely for the services they perform for us.

We may disclose your information if required by United Kingdom law, court orders, or government regulations. This includes compliance with GST regulations, business licensing requirements, and other legal duties applicable to our operations in London and across United Kingdom.

Data Security and Protection

We treat data security with utmost seriousness and implement multiple protective layers. Our systems use encryption for sensitive data transmission, secure servers for storage, and regular security updates to guard against threats.

We also employ physical security measures to protect our office systems and restrict access to personal information to staff who need it to perform their duties. Our team receives ongoing training on privacy practices and data handling.

Payment details are processed through secure, encrypted channels that meet industry standards. We do not store full card numbers on our systems; this information is managed by certified payment processors who specialize in secure transactions.

While we maintain strong security measures, no system is completely risk-free. We continuously monitor and update our security practices to address evolving threats and uphold the highest protection standards.

Your Rights and Choices

You have several rights regarding your personal information. You may request to see what data we hold, ask for corrections to inaccurate information, or request deletion of your data where legally permissible.

• Access your personal information and understand how we use it
• Request corrections to inaccurate or outdated information
• Ask us to delete your personal information (subject to business and legal requirements)
• Opt out of marketing communications while continuing to receive service-related messages
• Request information about how your data has been shared
• File complaints about our privacy practices

We keep your information only as long as necessary for business purposes and legal requirements. Order records are typically retained for accounting and warranty purposes, while marketing preferences are retained until you request removal.

When we no longer need your information, we securely delete or anonymize it. Some information may be kept longer if required by United Kingdom business laws or for legitimate business interests like fraud prevention.

Cookies and Website Technology

Our site uses cookies to enhance your browsing experience and to help us understand how visitors interact with our site. Cookies are small files stored on your device that remember preferences and enable certain site features.

Essential cookies are necessary for proper website functioning – they enable basic navigation and access to secure areas. These cookies do not collect personally identifiable information and are enabled automatically when you use our site.

We employ analytics cookies to learn how visitors engage with our site. This helps us identify popular content, optimize page performance, and improve the user experience. This data is collected in aggregate form and does not identify individuals.

You can adjust cookie settings through your browser preferences. Note that disabling certain cookies may affect some features and your overall browsing experience.

Business Transfers and Changes

If CrestOliveHaven undergoes significant business changes such as mergers, acquisitions, or sales of assets, your personal information may be transferred as part of the transaction. We would inform you of any such changes and ensure that your data remains protected under privacy standards consistent with this policy.

In the unlikely event that we cease operations, we would ensure that your personal information is either securely transferred to a successor entity (with appropriate privacy protections) or securely deleted in accordance with data protection best practices.

Updates to This Privacy Policy

We may periodically update this privacy policy to reflect changes in our practices, services, or legal requirements. When substantial changes occur, we will notify you by email or by posting a notice on our website before they take effect.

Minor updates for clarity or administrative purposes may be made without prior notice. We encourage you to review this policy occasionally to stay informed about how we protect your privacy.

Children's Privacy

Our services are intended for businesses and adult consumers. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected data from someone under 18, we will promptly remove it from our systems.

Parents or guardians who believe we may have information from their child can contact us using the details below, and we will address the issue promptly.

International Data Considerations

Our primary operations are located in United Kingdom, and we store and process data within the United Kingdom jurisdiction. However, some of our service providers may process data abroad. When this occurs, we ensure appropriate safeguards are in place to protect your information in line with applicable privacy laws.

We comply with United Kingdom data protection regulations, including those related to business operations, financial transactions, and handling customer data. Our practices align with evolving privacy standards in United Kingdom's digital economy.