Last updated: 11th July 2026
Who I am
I'm Nikki Wright, trading as Nikki Wright Floral Design, based in County Durham, England. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), I'm the "data controller" for the personal information collected through this website.
If you have any questions about this policy or your information, email me at Nikki@NikkiWrightFloralDesign.co.uk.
What I collect, and why
When you send an enquiry — your name, email address, phone number if you give it, and whatever you tell me about what you're planning. I use this to reply to you and, if we work together, to deliver what you've asked for. Lawful basis: taking steps at your request before entering a contract, and legitimate interest in responding to enquiries.
When you book a workshop or 1-2-1 — your name, contact details, the session you've booked, and any access or dietary needs you choose to share. I use this to run your booking, confirm your place, and contact you about the session (including if anything changes). Lawful basis: contract.
When you pay — payments are processed by Stripe. Your card details go directly to Stripe and are never seen or stored by me or this website. I receive confirmation of payment, not your card information. Lawful basis: contract. Stripe's privacy policy: stripe.com/gb/privacy
When you join a waiting list or register interest — your name and email, used to tell you when dates are released. You can ask to come off the list at any time. Lawful basis: consent.
When you browse the site — like most websites, this site (hosted by Squarespace) uses cookies and collects standard analytics — pages visited, device type, general location. This helps me understand how the site is used. You can control cookies through your browser settings. Lawful basis: legitimate interest / consent where required.
Who helps me process it
I use a small number of trusted services to run the business. They process your information on my behalf, under their own security and privacy commitments:
Squarespace — website hosting, enquiry forms and online bookings (squarespace.com/privacy)
Stripe — payment processing (stripe.com/gb/privacy)
Acuity Scheduling / Squarespace Scheduling — appointment and session bookings (squarespace.com/privacy)
Google Workspace — email and calendar (policies.google.com/privacy)
Some of these providers are based in, or store data in, the United States. Where information leaves the UK, it's protected by recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
I never sell your information, and I don't share it with anyone else except where the law requires.
How long I keep it
Enquiries that don't lead to work: up to 12 months, then deleted.
Client and booking records: for the duration of our work together and up to 6 years afterwards, as required for tax and accounting.
Waiting lists: until you ask to be removed, or the list is retired.
Your rights
Under UK GDPR you can ask me to:
show you the information I hold about you (access)
correct it if it's wrong (rectification)
delete it (erasure)
limit how I use it (restriction)
pass it to someone else (portability)
stop using it for a particular purpose (objection), including anything marketing-related, at any time
To use any of these, email Nikki@NikkiWrightFloralDesign.co.uk and I'll respond within a month.
If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office (ico.org.uk / 0303 123 1113) — though I'd always rather you raised it with me first so I can put it right.
Changes to this policy
If this policy changes, the new version will appear on this page with an updated date at the top.