Privacy Policy

Who we are

Field Gate Flowers is a sole-trader business operated by Rosalind (Roz) Chandler from Lathbury, Newport Pagnell, Buckinghamshire MK16. Our education and courses brand is The Cut Flower Collective.

For the purposes of UK GDPR we are the “data controller” for any personal information you share through this website. You can reach our data contact at roz@fieldgateflowers.co.uk.

What we collect

Only what we need. Specifically:

• Contact-form submissions and wedding enquiries — name, email, phone (optional), venue, date, message.

• Newsletter sign-ups — email address.

• Course & event purchases — handled by our external providers (see below) who share confirmation details with us.

• “Ask Roz” widget — the text of your question, sent to a large-language-model provider (see below) to generate a reply. We do not ask for or store your name.

• Anonymous, aggregated site analytics — only if you have opted in via the cookie banner.

Where your information is processed

This site combines functionality from Roz’s previous two platforms and a handful of specialist providers. Each one has its own published privacy policy, which we encourage you to read.

• Kartra (Genesis Digital LLC, USA) — processes newsletter sign-ups, course bookings, the Flower Bank subscription and gift-voucher checkout. UK/EU transfers governed by Kartra’s Standard Contractual Clauses.

• Subbly (Subbly Ltd, UK) — processes The Cut Flower Box monthly subscription on thecutflowerbox.co.uk where that service still lives.

• Amazon (UK) — processes book purchases of “Seed to Vase” when you follow our Amazon links.

• Stripe (Stripe Payments Europe, Ireland) — will process direct card payments on this site once live-key integration is complete. We never see or store your full card details.

• Buzzsprout (Higher Pixels LLC, USA) & ListenNotes (ListenNotes Inc., USA) — host and display The Cut Flower Podcast. Their embedded players may set their own cookies; they only load if you accept “Marketing” cookies in our banner.

• Anthropic (Anthropic PBC, USA) — powers the “Ask Roz” feature via Claude. Your question is processed to generate a reply and is not used to train models. Anthropic retains inputs and outputs for no more than 30 days for safety review.

• MongoDB Atlas (MongoDB Inc., hosted in the EU) — stores website content such as blog posts, products, courses, and aggregated enquiry metadata.

• Dropbox (Dropbox International, Ireland) — used by Roz for image storage. Only publicly-shared images are surfaced on the site.

Why we collect it — lawful basis

• To fulfil a contract, for example completing an order you have placed or responding to a wedding quote you’ve requested.

• With your consent, for example sending you the newsletter or loading third-party embeds that use marketing cookies.

• For our legitimate interests, for example keeping the website secure and responding to direct email enquiries.

• To meet legal obligations, such as maintaining financial records for HMRC for six years after a transaction.

How long we keep your data

• Wedding / event enquiries — up to 24 months after last contact.

• Newsletter subscriber list — until you unsubscribe (one-click link in every email).

• Financial records — six years, as required by HMRC.

• “Ask Roz” transcripts — not stored by us; see Anthropic section above.

• Analytics — aggregated only; retained for up to 26 months.

Your rights

Under UK GDPR you have the right to request a copy of the information we hold, ask us to correct it, ask us to delete it, object to further processing, and withdraw any consent you have given. Write to roz@fieldgateflowers.co.uk and we will action your request within 30 days.

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have mishandled your personal data.

Cookies & tracking

We use a consent-first cookie banner. No analytics, embedded media trackers or marketing cookies are set until you accept them. Full detail in our separate Cookie Policy.

Children

This website is not directed at children under 16. We do not knowingly collect information from children.

Changes to this policy

We review this document annually and any time a new data processor is added. Material changes will be flagged on this page and, where appropriate, communicated by email.