Privacy Policy

Who we are

FloristGrow is a product developed and operated by Pinwheel Industries Ltd(“Pinwheel”, “we”, “us”, “our”), a company incorporated in England and Wales. Pinwheel is the data controller for personal data collected through this website.

Contact us: hello@floristgrow.co.uk

What we collect

When you join the FloristGrow early-access list we collect:

• Email address — required. Used to contact you when early access opens.
• Shop name — optional. Helps us personalise our communications to you.

We do not collect payment information, tracking cookies, or any other personal data through this holding page.

Why we collect it and our lawful basis

We collect your email address and shop name solely to keep you informed about FloristGrow — specifically, to notify you when early access opens and to share relevant product updates leading up to launch.

Our lawful basis is consent (Article 6(1)(a) UK GDPR). By submitting the early-access form you are giving us your explicit consent to contact you for the purposes described above. You may withdraw that consent at any time (see Your rights below).

Where your data is stored and processed

Your data is processed using the following sub-processors:

• Supabase (Supabase Inc.) — our database provider. Your email and shop name are stored in a Supabase PostgreSQL database hosted on AWS infrastructure in the EU (Frankfurt, eu-central-1). Supabase is a SOC 2 Type II certified service.
• Brevo (Sendinblue SAS) — our email and contact-list provider, used to send your confirmation email and to manage the early-access list. Brevo is headquartered in France and stores data within the EU. Brevo is ISO 27001 certified and GDPR compliant.
• Vercel Inc. — our web hosting provider. Vercel processes request data (such as IP addresses) in the course of serving this website. Vercel is SOC 2 Type II certified and signs a DPA with all customers.

We do not sell, rent, or share your personal data with any other third parties.

Retention

We will retain your data for as long as the FloristGrow early-access programme is active, or until you withdraw your consent — whichever comes first. Once FloristGrow launches, if you have not become a customer we will delete your early-access data within 12 months of the product launch date.

You may request erasure at any time before then (see below).

Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Erasure— request that we delete your personal data (“right to be forgotten”).
• Withdraw consent — withdraw your consent to receive emails from us at any time by clicking the unsubscribe link in any email we send, or by emailing us directly.
• Rectification — ask us to correct any inaccurate personal data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to our processing of your data at any time.

To exercise any of these rights, email us at hello@floristgrow.co.uk. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify early-access subscribers by email.