Privacy policy

FLORSTONE ("we," "us," or "our") operates this online store and associated services (referred to as the "Website"). We are a United Kingdom-based company and act as the data controller for your personal information.

Your use of our Website signifies your acceptance of the data practices outlined in this Privacy Policy.

1. WHO WE ARE

FLORSTONE
Address: 57 Bleak Hill Rd, Birmingham B23 7EJ, United Kingdom
Phone: +44 7449706389
Email: support@florstone.com

2. PERSONAL INFORMATION WE GATHER

The data we collect depends on how you engage with our Website and may include:

Identity & Contact Information: Your name, email, telephone number, delivery address, and billing address.

Order & Payment Information: Items purchased or returned, transaction values, payment references, and partial payment details (full card numbers are handled exclusively by our payment processors and never stored on our systems).

Account Details (registered customers): Usernames, passwords, and saved preferences.

Customer Service Interactions: Any messages, files, or communications you share with our support team.

Technical & Browsing Data: IP addresses, device information, browser type, operating system, pages viewed, navigation patterns, and cookie data.

3. HOW WE OBTAIN YOUR DATA

Information you provide: When making purchases, setting up an account, signing up for updates, or reaching out to support.

Automated collection: Via cookies, tracking pixels, and similar technologies during your browsing sessions.

Third-party sources: Through partners who help us with payments, deliveries, marketing, and analytics.

4. PURPOSES AND LEGAL GROUNDS FOR PROCESSING (GDPR ARTICLE 6)

We use your personal data for these reasons:

Fulfilling Orders & Managing Accounts (processing purchases, arranging shipping, handling returns, providing support) — Legal grounds: Contract performance (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Processing Payments & Preventing Fraud — Legal grounds: Legitimate interests (Art. 6(1)(f)) and legal obligations under financial and tax law (Art. 6(1)(c)).

Website Enhancement & Analytics (analysing usage patterns, fixing issues, improving features) — Legal grounds: Legitimate interests (Art. 6(1)(f)).

Marketing Communications (sending promotional emails, tailored offers, and relevant advertising) — Legal grounds: Your consent where legally required (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f)). Unsubscribe anytime.

Regulatory & Legal Compliance (fulfilling tax requirements, financial reporting, responding to lawful authority requests) — Legal grounds: Legal obligation (Art. 6(1)(c)).

5. COOKIES & SIMILAR TECHNOLOGIES

Our Website uses cookies and related technologies to:

Power essential site functions
Store your preferences and settings
Analyse traffic and user engagement
Show you relevant marketing content where allowed

Where required by law, we'll ask for your consent to non-essential cookies upon your first visit. You can modify your cookie preferences anytime through our cookie banner or your browser settings. Be aware that blocking certain cookies may limit Website functionality.

6. WHO WE SHARE DATA WITH

We only share personal information when necessary for our operations:

E-commerce Platform (Shopify): Site hosting, order processing, and security services.

Payment Providers: Secure payment handling and fraud screening.

Shipping & Fulfilment Companies: Dispatching orders and processing returns.

Technology & Analytics Partners: Cloud services, email systems, and performance tracking.

Professional Advisers: Legal, accounting, and compliance consultants when required.

Business Transfers: If we undergo a merger, acquisition, or sale of assets, your data may transfer to the new entity.

We never sell your personal data to any third party.

7. TRANSFERS OUTSIDE THE UK/EEA

Certain service providers (including Shopify and its partners) may process your information in countries outside the United Kingdom or European Economic Area. For such transfers, we implement appropriate protections, including Standard Contractual Clauses (SCCs). Contact us if you'd like copies of relevant transfer agreements (some details may be redacted for confidentiality).

8. HOW LONG WE KEEP YOUR DATA

Personal information is retained only as long as needed for the purposes described here and to meet legal requirements. Typical retention periods include:

Transaction & Financial Records: Up to 10 years (per tax and accounting regulations).

Account Data: Throughout the life of your active account; anonymised or deleted after prolonged inactivity and once legal retention periods expire.

Support Records: Up to 3 years after case resolution (longer if required for legal matters).

Marketing Preferences: Until you withdraw consent or opt out; afterwards, your details are suppressed from promotional lists.

9. YOUR DATA PROTECTION RIGHTS

Under UK GDPR and EU GDPR, you're entitled to:

Access the personal data we hold about you
Have inaccurate or incomplete information corrected
Request erasure of your data in certain situations
Object to or restrict certain processing activities
Obtain your data in a portable, machine-readable format
Withdraw consent at any time (where consent is the basis for processing)

To exercise these rights, email support@florstone.com. We may verify your identity before proceeding. Responses are provided within one month (complex requests may take up to two additional months, with advance notice).

You may also file a complaint with a supervisory authority. In the UK, contact the Information Commissioner's Office (ICO). EEA residents can reach their local data protection authority.

10. CHILDREN'S PRIVACY

Our Website isn't intended for anyone under 16 years old. We don't knowingly gather personal data from children. If you suspect a child has submitted information to us, please get in touch immediately so we can remove it.

11. AUTOMATED DECISION-MAKING

We don't use automated decision-making or profiling that has legal or similarly significant effects on you (as described in GDPR Article 22).

12. OUR E-COMMERCE PLATFORM

This store runs on Shopify, which provides hosting, order management, analytics, and security infrastructure. Shopify processes your data on our behalf and may independently control certain aggregated or platform-wide information. See Shopify's Privacy Policy and Privacy Portal for more details.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Revisions will be posted here with a new "Last Updated" date. For material changes, we'll notify you as required by applicable law.