Privacy notice

How we look after your personal data.

We know that privacy is one of the most important issues for all of us on the internet. The following discloses our information-gathering and dissemination practices, written in plain English and aligned with UK GDPR.

Section 01

Who we are

The British School of Sustainable Floristry (“we”, “us”, “our”, “the School”) is operated jointly by Roz Chandler (founder of Field Gate Flowers) and Carol Peacock (founder of Peacock & Wild). Both founders have access to the personal data submitted through this site so that we can together communicate with you, deliver our courses, retreats and events, and look after your learning journey.

This notice explains what personal information we collect, how we use it, the lawful bases we rely on, how long we keep it, who we share it with, and the rights you have under UK GDPR and the Data Protection Act 2018.

By submitting your details through our newsletter, lead-capture or contact forms, you agree that your information may be used by The British School of Sustainable Floristry and its founders (Roz Chandler and Carol Peacock, and their respective businesses Field Gate Flowers and Peacock & Wild) to communicate with you about courses, events, resources and related services. You can withdraw your consent at any time.

For the purposes of UK GDPR, the School and its two founders are joint data controllers. You can contact our data protection lead at support@britishschoolofsustainablefloristry.com and your request will be dealt with on behalf of both founders.

Section 02

Personal information we may process

Personal information that we’ll process in connection with all our services, if relevant, may include:

  • Contact details — forename, surname, email address, postal address, phone number.
  • Products and services you have purchased from us, as well as those you may have been interested in.
  • Marketing and analytics data — including a history of communications, whether you open them or click on links, and information about products and services we think you may be interested in.
  • Technical data — IP address, operating system and browser version (see “Cookies, IP & analytics” below).

Any information we collect about you will come either from yourself or from our advertising or social media platforms.

Section 03

Our lawful bases for processing

Under UK GDPR we will only process your personal data where we have a lawful basis to do so:

  • Contract — where processing is necessary to deliver a course, retreat or service you have purchased.
  • Consent — for marketing emails, non-essential cookies and any optional communications. You can withdraw consent at any time.
  • Legitimate interests — to improve our website, respond to enquiries, prevent fraud and abuse, and keep records of our communications with you. We balance these interests against your rights.
  • Legal obligation — where we are required to retain records for tax, accounting or regulatory purposes.
Section 04

How we use your data

We never rent, sell or exchange your contact information with any third party. Your details are used solely by the School and its founders for the purposes described in this notice.

We collect customer information to enhance our products and the service we provide, for the following purposes:

  • Sending the newsletters, free downloads, course waitlist and resource notifications you have requested.
  • Assessing an enquiry for a product or service, including whether to offer you that product or service.
  • Managing any aspect of the course, retreat or service you have purchased.
  • Improving the operation of our website and learning programmes.
  • Keeping records of our communications with you.
  • Market research, analysis and developing statistics.

From time to time, The British School of Sustainable Floristry may send promotional emails about new courses, retreats, resources and offers. By ticking the consent box on our sign-up forms, you are agreeing to receive these communications. You can unsubscribe at any time using the link at the bottom of every email, or by emailing us directly.

Section 05

Marketing & unsubscribe

We will only send marketing emails where you have given us consent (for example by joining the Flourish newsletter on our site). We provide unsubscribe instructions within every email we send. Alternatively you can contact us via the Contact page and we will remove you within 7 days.

Section 06

Cookies, IP & analytics

When you visit our website or click one of our links we may automatically record your IP address, operating system and browser version. We use this information to generate aggregate usage statistics, to ensure that our site and emails are accessible to the widest possible audience, and to detect abuse of our systems.

Non-essential analytics and marketing cookies are only set with your explicit consent via our cookie banner. For full details see our cookie policy.

Section 07

Who we share your data with

We share personal data only with carefully selected processors that help us run the School:

  • Kartra — course delivery and payments
  • Stripe — secure card processing (via Kartra)
  • MailerLite — email marketing platform
  • Google — analytics (consent-gated)
  • Meta (Facebook, Instagram) — advertising (consent-gated)
  • Our website hosting and IT support providers, under contract and confidentiality.

All processors are bound by data-processing agreements and only handle your data on our instructions. International transfers, where they occur, are protected by Standard Contractual Clauses or an adequacy decision.

Section 08

Your data protection rights

Under UK data protection law you have the following rights, free of charge:

  • Right of access — you can ask us for copies of your personal information.
  • Right to rectification — you can ask us to correct information you think is inaccurate.
  • Right to erasure — you can ask us to erase your personal information in certain circumstances.
  • Right to restriction — you can ask us to restrict the processing of your personal information in certain circumstances.
  • Right to data portability — you can ask us to transfer your personal data to another organisation, or to you, in certain circumstances.
  • Right to object — you can object to processing based on legitimate interests, and to direct marketing at any time.
  • Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights please email support@britishschoolofsustainablefloristry.com. We aim to acknowledge every request within 5 working days and to respond in full within one month, which is the statutory maximum under UK/EU GDPR.

You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/concerns · helpline 0303 123 1113.

Section 09

How to raise a concern or complaint

If you have any questions or concerns about how we use your personal data, please contact us first at support@britishschoolofsustainablefloristry.com and we will do our best to resolve the issue promptly. We aim to acknowledge every concern within 5 working days and to work with you towards a resolution as quickly as we reasonably can.

If you are not satisfied with our response, you have the right to complain to a data protection authority. If you are in the UK, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

If you are in the EEA/EU, you can complain to your local supervisory authority in your country of residence, place of work, or where you believe an infringement has occurred. A directory of EEA/EU data protection authorities is maintained by the European Data Protection Board.

Raising a concern with us first, and giving us the opportunity to put things right, is always welcome — but it is not a precondition of contacting a supervisory authority. You may contact them directly at any time.

Section 10

How long we keep your data

Unless we explain otherwise, we hold personal information based on the following criteria:

  • For as long as we have reasonable business needs — such as managing our relationship with you, our operations and accounts.
  • For as long as we provide goods or services to you, and then for as long as someone could bring a claim against us (generally up to 7 years).
  • Retention periods in line with legal and regulatory requirements (e.g. HMRC accounting records: 6 years).
  • Newsletter subscribers: until you unsubscribe, then deletion within 30 days.
Section 11

How we keep your data safe

We use industry-standard technical and organisational measures — encryption in transit (TLS), access controls, strong passwords and routine review of our processors — to protect your personal data. No system is perfectly secure; however, we work hard to keep yours safe.

Section 12

Children

Our courses are designed for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with information, please contact us and we will delete it.

Section 13

Changes to this notice

We may change this privacy notice from time to time to reflect changes in the law and/or our privacy practices. We encourage you to check this page whenever you visit our website. Last updated: February 2026.

Section 14

Contacting us

If you have any questions about this notice, the practices of this site, or your dealings with us, please contact us via the Contact page or by emailing support@britishschoolofsustainablefloristry.com.

By using this site you agree to the British School of Sustainable Floristry’s terms and this privacy notice. We reserve the right, at our discretion, to change or update this notice at any time; changes take effect immediately upon posting. Please check this page periodically.

Questions about how we use your data?

Contact us