Last updated: 14 September 2026
This page explains what personal data we collect when you use this website or contact the shop, why, for how long, and the rights you have over it. It is written to meet the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Who is responsible for your data
| Detail | Information |
|---|---|
| Data controller | Florist & Home Samantha |
| Address | Calle Alcornoque, 29604 Marbella (Elviria), Málaga, Spain |
| Contact for privacy matters | legal@floristandhome.com · 952 83 40 46 |
What we collect and why
Browsing the site
Simply visiting the site does not require you to give us any personal data. Our hosting provider, Netlify, records standard technical server logs (such as IP address, browser type and pages requested) for security and to keep the service running. These logs are not used to identify you.
Contacting us
When you message us on WhatsApp, call, email, or fill in an enquiry form, we receive the details you give us: typically your name, phone number or email, and what you are asking about, such as an occasion, a delivery address or a wedding date. We use this to answer you, prepare your order and deliver it.
The legal basis is the performance of the contract you are asking us for, or the steps needed before it (Article 6.1.b GDPR), and, for general enquiries, our legitimate interest in replying to you (Article 6.1.f).
Delivering flowers to someone else
If you order flowers for another person, you give us their name, address and sometimes phone number so that we can deliver. We use those details only for that delivery. Please make sure you are entitled to share them.
Who else sees your data
We do not sell or rent personal data. It may be processed by the services we rely on to operate: WhatsApp (Meta Platforms Ireland) when you message us there, Netlify for hosting and enquiry forms, and Google if you choose to load the map on the contact page. Some of these providers may transfer data outside the European Economic Area under the safeguards provided for in the GDPR, such as standard contractual clauses.
How long we keep it
We keep the details of an order for as long as tax and accounting law requires, which in Spain is generally six years. General enquiries that do not lead to an order are deleted within twelve months.
Your rights
You can ask us at any time to:
- see the personal data we hold about you
- correct anything that is wrong
- delete it, where we no longer need to keep it
- limit how we use it, or object to a use based on legitimate interest
- receive it in a portable format
Write to legal@floristandhome.com or call 952 83 40 46. We will answer within one month. If you are not satisfied, you may complain to the Spanish Data Protection Agency (AEPD) at aepd.es.
Changes
If we change how we handle data, we will update this page and the date at the top.