How we look after your data

When you submit a contact form (at /contact or /request-call) we collect your name, email and any phone number, company name or message you choose to share. We use this only to reply to your enquiry.

When you visit zeroflowers.com we automatically collect standard server logs (IP address, user agent, referring URL, timestamp) for security, debugging and aggregate analytics.

If you accept analytics cookies via our consent banner, we collect anonymised usage data (pages visited, time on page, source channel).

We use Cookiebot to manage cookie consent in line with UK GDPR and the EU ePrivacy Directive. No analytics or marketing cookies are loaded until you accept them.

Strictly necessary cookies (e.g. language preference, consent state) are loaded by default - they are required for the site to function.

You can change or withdraw consent at any time via the small cookie icon at the bottom of the page.

Contact and audit-request form submissions are forwarded to our internal Telegram channel so we can respond quickly. Telegram messages are only visible to Zeroflowers team members.

We do not share your enquiry with any third party for marketing purposes. We will never sell your data.

Hosting and rendering: Vercel (United States, EU regions available).

Cookie consent: Cookiebot (Denmark / EU).

Form delivery: Telegram Messenger (operated outside the EU - contact us if you need an alternative channel).

All third parties listed have their own privacy policies. We choose providers that respect UK GDPR and offer Data Processing Agreements where applicable.

You have the right to access, correct or delete the personal data we hold about you, to object to processing, and to data portability.

To exercise any of these rights, email info@zeroflowers.com. We respond within 30 days (typically much sooner).

You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.

Form submissions are retained for as long as needed to respond to your enquiry, and for up to 24 months thereafter for legitimate business records (e.g. tax, dispute resolution).

Server logs are retained for up to 90 days.

If you request deletion, we will remove your personal data within 30 days, except where we are legally required to retain it.