Privacy policy
Last updated: 5 October 2026
Who we are
Rose & Robin is a small shop selling gifts, plants and home items. We are the "data controller" for the personal information described below, which means we decide how it is used. To contact us about your information: sales@rose-robin.co.uk.
What we collect
- A record of each order: what was bought, the total, the date and time, whether it was paid by cash or card, and a random order reference we show you after you pay.
- Your email address, but only if you choose to enter it after paying so we can email you a receipt.
We do not see or store your card number. Card payments are handled by SumUp. We only learn whether the payment succeeded.
Why we collect it
The order record lets us look up your purchase if there is a problem with it (for example a faulty product, a refund or a replacement) and keeps a record of sales in case of a dispute. If you give us your email address we use it to send your receipt, and to get in touch if there is a problem with your order. We do not use your email for marketing, and we do not sell or share it for anyone else's marketing.
Our legal basis is legitimate interests (running the shop, dealing with problems and protecting ourselves in a dispute), and, for sending you the receipt you asked for and resolving problems with your order, performing our contract with you.
Who else sees it
- SumUp processes card payments. They receive the payment amount and your card details directly from you, under their own privacy policy. They do not receive your email address from us.
- Microsoft Azure hosts this website and its database (in the UK) and, if you ask for an emailed receipt, sends that email for us (Azure Communication Services), acting on our behalf.
We don't pass your details to anyone else unless the law requires it.
How long we keep it
Your email address is automatically removed from the order 12 months after your order. We may keep a record of the sale itself (what was sold, the amount and the date, with no personal details) for longer for accounting purposes.
Your rights
You can ask us to show you what we hold about you, correct it, or delete it, and you can object to how we use it. Contact us using the details above and we will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This site doesn't use cookies or tracking.