Hobby Florist Privacy Policy

Last updated: 15 January 2026

This Privacy Policy explains how Flowers Made Easy LTD ("we", "us", "our") trading as HobbyFlorist.ie collects, uses and protects personal data when you visit our website, place an order, create an account, contact us, or otherwise interact with us.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (Ireland).

 

1. Data Controller

Flowers Made Easy LTD trading as HobbyFlorist.ie is the data controller for personal data processed under this policy.

Contact details:
Email: [email protected]
Address: 10 St Kieran’s Enterprise Centre, Sandyford, Dublin 18, D18 P2X7, Ireland

 

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Data you provide directly

  • Identity Data - name
  • Contact Data - billing address, delivery address, email address, telephone number
  • Account Data - username and password where an account is created
  • Order Data - products purchased, order history, delivery instructions, gift messages
  • Payment Data - payment confirmations and transaction references (full card details are processed securely by third-party payment providers and are not stored by us)
  • Customer Support Data - correspondence, enquiries and complaints

Gift recipient data

Where you place an order for delivery to a third party, we will process the recipient’s name, delivery address and message solely for the purpose of fulfilling your order.

Data collected automatically

  • Technical Data - IP address, browser type, device information
  • Usage Data - pages visited, interactions with our website
  • Cookie Data - as described in Section 5

We do not intentionally collect special category personal data.

 

3. Legal Bases for Processing

We process personal data under the following legal bases:

Purpose

Legal Basis

Processing orders and deliveries

Contract

Managing customer accounts

Contract

Customer service and enquiries

Legitimate interest

Fraud prevention and website security

Legitimate interest / legal obligation

Marketing communications

Consent

Website analytics and non-essential cookies

Consent

Compliance with legal obligations

Legal obligation

Where processing is based on consent, you may withdraw that consent at any time.

 

4. How We Use Personal Data

We use personal data to:

  • Process and fulfil orders
  • Arrange deliveries and manage delivery queries
  • Communicate with you about orders or accounts
  • Provide customer support
  • Improve our website, services and customer experience
  • Prevent fraud and protect our systems
  • Send marketing communications where you have consented

Telephone calls

We may record telephone calls for training, quality assurance and fraud prevention purposes. Where calls are recorded, this will be indicated at the start of the call.

 

5. Cookies

We use cookies and similar technologies in accordance with the ePrivacy Regulations and GDPR.

Cookies are small text files placed on your device when you visit our website. They help our website function correctly, improve performance and understand how visitors use the site.

Types of cookies we use:

  • Strictly necessary cookies - required for core website functionality and security
  • Analytics cookies - help us understand website usage and improve performance
  • Marketing cookies - used to personalise marketing and advertising

Strictly necessary cookies are always enabled. Analytics and marketing cookies are used only with your consent, which you may withdraw at any time via your browser settings or cookie controls.

 

6. Data Sharing

We share personal data only where necessary, including with:

  • Payment service providers
  • Delivery and courier partners
  • IT, website hosting and infrastructure providers
  • Professional advisers and regulatory bodies where required by law

We do not sell personal data.

Business transfers

If we sell, restructure or transfer all or part of our business or assets, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

 

7. International Transfers

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as EU Standard Contractual Clauses or adequacy decisions. Copies of relevant safeguards are available on request.

 

8. Data Retention

We retain personal data only for as long as necessary:

  • Order and transaction data - 7 years (tax and legal obligations)
  • Customer accounts - while active
  • Marketing data - until consent is withdrawn
  • Customer service records - for a reasonable period after resolution

Data may be retained longer where required to establish, exercise or defend legal claims.

 

9. Security

We implement appropriate technical and organisational measures to protect personal data, including secure hosting environments, access controls, encryption where appropriate and staff confidentiality obligations.

No system is completely secure, and we cannot guarantee absolute security.

 

10. Your Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

We may ask you to verify your identity before responding to a request.

 

11. Complaints

If you have concerns about how we process personal data, you may contact us using the details above.
You also have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission
www.dataprotection.ie

 

12. Children

Our services are not intended for children under 16, and we do not knowingly collect personal data from children.

 

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page.

 

14. Contact Us

Email: [email protected]
Address: 10 St Kieran’s Enterprise Centre, Sandyford, Dublin 18, D18 P2X7, Ireland