
GDPR Policy
Sea of Roses UK (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This policy explains how we comply with the UK GDPR, the Data Protection Act 2018, and your rights as a user of our website.
​
1. Lawful Basis for Processing Data
​
We collect and process personal data under the following lawful bases:
Consent — when you subscribe to our mailing list or submit a contact form.
Contract — when you place an order, and we need your details to fulfil it.
Legitimate Interest — for improving our website, customer experience, and marketing.
Legal Obligation — for record-keeping (e.g., tax purposes).
​
2. What Personal Data We Collect
​
We may collect:
​
Name
Email address
Postal address
Phone number
Order details
Payment information (processed securely through third-party providers)
Any information you share in our contact form
Website usage data through cookies and analytics
​
3. How We Use Your Data
​
We use your data to:
​
Process and deliver your orders
Respond to enquiries and messages
Send marketing emails when you have opted in
Improve our website performance and user experience
Handle returns, refunds, and customer support needs
Meet accounting and legal requirements
We never sell your personal data.
​
4. Data Storage & Security
​
Your data is stored securely using reputable third-party platforms such as:
Wix (website hosting and forms)
Email marketing provider
Payment gateways (e.g., Stripe, PayPal)
We take all reasonable steps to ensure your data is protected.
​
5. How Long We Keep Your Data
​
We keep your personal data only for as long as necessary:
Order information: up to 6 years for tax/legal purposes
Email marketing data: until you unsubscribe
Contact form submissions: up to 12 months
6. Your Rights Under GDPR
You have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data (“right to be forgotten”)
Withdraw consent at any time
Object to processing
Request data portability
​
7. Third-Party Sharing
​
We may share your data with:
Payment processors
Delivery couriers
Email marketing platforms
We only share what is necessary to complete your order or service.
​
8. Cookies
Our website uses cookies to improve functionality and for analytics. You can manage your cookie preferences through your browser at any time.
