Last updated: 14 October 2026
This page explains what personal data we collect when you use this website or contact the shop, why, for how long, and the rights you have over it. It is written to meet the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Who is responsible for your data
| Detail | Information |
|---|---|
| Data controller | Florist & Home Samantha |
| Address | Calle Alcornoque, 29604 Marbella (Elviria), Málaga, Spain |
| Contact for privacy matters | legal@floristandhome.com · 952 83 40 46 |
What we collect and why
Browsing the site
Simply visiting the site does not require you to give us any personal data. Our hosting provider, Netlify, records standard technical server logs (such as IP address, browser type and pages requested) for security and to keep the service running. These logs are not used to identify you.
Contacting us
When you message us on WhatsApp, call, email, or fill in an enquiry form, we receive the details you give us: typically your name, phone number or email, and what you are asking about, such as an occasion, a delivery address or a wedding date. We use this to answer you, prepare your order and deliver it.
The legal basis is the performance of the contract you are asking us for, or the steps needed before it (Article 6.1.b GDPR), and, for general enquiries, our legitimate interest in replying to you (Article 6.1.f).
Delivering flowers to someone else
If you order flowers for another person, you give us their name, address and sometimes phone number so that we can deliver. We use those details only for that delivery. Please make sure you are entitled to share them.
Paying online
If you pay through our secure payment page at floristandhome.com/pay, we record only the amount you choose to pay, any optional green waste contribution, a payment reference, the time and the result that SumUp reports to us. We keep these records with our accounting records for the period tax law requires. Your card details are entered directly into the payment form provided by SumUp and never reach our systems. SumUp (for customers in the European Economic Area, SumUp EU Payments UAB, an electronic money institution supervised by the Bank of Lithuania) processes them as a regulated payment provider under its own privacy policy, including the checks your bank requires to confirm the payment. The legal basis is the performance of the contract (Article 6.1.b GDPR) and our accounting and tax obligations (Article 6.1.c).
Who else sees your data
We do not sell or rent personal data. It may be processed by the services we rely on to operate: WhatsApp (Meta Platforms Ireland) when you message us there, Netlify for hosting, enquiry forms and our payment page, SumUp when you pay by card online, and Google if you choose to load the map on the contact page. Some of these providers may transfer data outside the European Economic Area under the safeguards provided for in the GDPR, such as standard contractual clauses.
How long we keep it
We keep the details of an order for as long as tax and accounting law requires, which in Spain is generally six years. General enquiries that do not lead to an order are deleted within twelve months.
Your rights
You can ask us at any time to:
- see the personal data we hold about you
- correct anything that is wrong
- delete it, where we no longer need to keep it
- limit how we use it, or object to a use based on legitimate interest
- receive it in a portable format
Write to legal@floristandhome.com or call 952 83 40 46. We will answer within one month. If you are not satisfied, you may complain to the Spanish Data Protection Agency (AEPD) at aepd.es.
Changes
If we change how we handle data, we will update this page and the date at the top.