Privacy Policy

Last updated: 3 November 2026

At Sophie Longhurst, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use and safeguard your data when you visit www.sophielonghurst.co.uk, make an enquiry, subscribe to our newsletter, book a workshop or purchase a product.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK privacy legislation.

1. Who We Are

This website is operated by Sophie Longhurst, a UK-based paper flower artist specialising in botanical artwork, bespoke commissions, commercial installations and creative workshops.

For the purposes of data protection legislation, Sophie Longhurst is the data controller responsible for the personal information collected through this website.

Website: www.sophielonghurst.co.uk
Email: hello@sophielonghurst.co.uk

If you have questions about this policy or how your information is handled, please contact us using the details above.

2. Information We Collect

We may collect the following personal information when you interact with our website or services:

  • Contact information: Your name, email address, telephone number and any details you provide through enquiry forms.

  • Order information: Billing and delivery addresses, purchase history and transaction details when you place an order.

  • Workshop information: Contact and booking details required to manage your attendance.

  • Project enquiries: Information you share when discussing commissions, installations or commercial collaborations.

  • Newsletter subscriptions: Your email address and, where provided, your name and communication preferences.

  • Website usage: Technical information such as your IP address, browser type, device information and website activity, where collected through our hosting platform or analytics tools.

We collect information directly from you and, where applicable, automatically through website technologies or from third-party booking and payment providers.

3. How We Use Your Information

We use personal information to:

  • Respond to enquiries and communicate about potential projects.

  • Process and fulfil purchases, including delivery and customer support.

  • Manage workshop bookings and provide relevant event information.

  • Prepare proposals and administer commercial commissions.

  • Send newsletters, announcements and marketing communications where permitted.

  • Maintain and improve our website and services.

  • Comply with legal, accounting and regulatory obligations.

We will not use your personal information for purposes incompatible with those described in this policy without an appropriate lawful basis.

4. Our Legal Basis for Processing Information

Under UK data protection law, we must have a lawful basis for using personal information.

Depending on the circumstances, we rely on:

Contractual necessity: To fulfil purchases, manage bookings, provide commissioned services or take steps at your request before entering into a contract.

Consent: Where you have agreed to receive marketing communications or to the use of cookies and technologies that require consent.

Legitimate interests: To respond to general enquiries, manage business relationships, maintain website security and improve our services, where these interests are not overridden by your rights and freedoms.

Legal obligations: To maintain records, meet tax and accounting requirements and comply with applicable legislation.

Where we rely on consent, you can withdraw it at any time.

5. Newsletter and Marketing Communications

If you subscribe to our newsletter, we may email you about Sophie Longhurst's work, exhibitions, workshops, new collections, publications and upcoming events.

We will only send electronic marketing where we have the necessary consent or another applicable legal permission.

You can unsubscribe at any time using the link included in our marketing emails or by contacting us directly.

Unsubscribing from marketing communications will not prevent us from contacting you about an existing order, booking or commission where necessary.

6. Online Purchases and Payments

When you purchase products through our website, we collect the information necessary to process your order and arrange delivery.

Payments are handled by the secure third-party payment provider available at checkout.

We do not directly store complete payment card details.

Payment providers may process your information according to their own privacy policies and applicable legal obligations.

7. Workshops and Events

If you book a workshop directly with Sophie Longhurst, we use the information provided to confirm your booking, communicate essential event details and manage your attendance.

Where workshops are organised or booked through a third party, such as a venue or event partner, that organisation may collect and process booking information independently.

We encourage you to review the relevant organiser's privacy policy when making a booking through another website.

8. Cookies and Website Analytics

Our website may use cookies and similar technologies to support essential functionality, maintain security and understand how visitors interact with the site.

Some cookies are necessary for the website to operate. Others, such as certain analytics or marketing cookies, may require your consent.

Where consent is required, these cookies will not be activated until the necessary permission has been obtained.

You can manage your cookie preferences through the website's cookie controls, where available, or through your browser settings.

Further information about the cookies used on this website, their purposes and how long they remain active should be provided in our Cookie Policy or cookie preferences panel.

9. Sharing Your Information

We do not sell your personal information.

We may share relevant information with trusted service providers where necessary to operate our business, including:

  • Website hosting and maintenance providers.

  • Email marketing platforms.

  • Payment processors.

  • Delivery and fulfilment services.

  • Booking and event management platforms.

  • Professional advisers, including accountants, where required.

We share only the information reasonably necessary for the relevant service.

Where service providers process personal information on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.

We may also disclose information where required by law.

10. International Data Transfers

Some of the third-party services used to operate our website and business may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that appropriate protections are in place as required by applicable UK data protection law.

These may include UK adequacy regulations or approved contractual safeguards.

You can contact us for further information about applicable safeguards.

11. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including any applicable legal or regulatory requirements.

Retention periods depend on the type of information:

  • General enquiries: For as long as necessary to respond and manage any resulting business relationship.

  • Orders and financial records: For the period required by applicable tax, accounting and legal obligations.

  • Commission and project records: For the duration of the project and any additional period necessary for contractual, legal or legitimate business purposes.

  • Workshop bookings: For as long as necessary to administer the event and meet any relevant legal obligations.

  • Newsletter subscriptions: Until you unsubscribe or your information is otherwise removed in accordance with our retention practices.

  • Website analytics: According to the retention settings of the relevant analytics provider.

When information is no longer required, it will be securely deleted or anonymised.

12. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures may include secure website connections, restricted access to personal information and the use of reputable service providers.

Although we take appropriate precautions, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

13. Your Data Protection Rights

Under UK data protection legislation, you have a number of rights concerning your personal information, subject to applicable conditions and exemptions.

These include the right to:

  • Request access to the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your personal information in certain circumstances.

  • Request restriction of processing in certain circumstances.

  • Object to processing based on legitimate interests.

  • Request the transfer of certain information to yourself or another provider.

  • Withdraw consent where processing relies on consent.

You have the right to object to the use of your personal information for direct marketing at any time.

To exercise your rights, please contact us using the details provided in this policy.

We will respond to requests within the timeframes required by applicable data protection legislation.

14. Third-Party Websites and Social Media

Our website may include links to external websites and social media platforms, including Instagram.

We are not responsible for the privacy practices of these external services.

We recommend reviewing their individual privacy policies before sharing personal information.

15. Children's Privacy

Our website and services are primarily intended for adults.

We do not knowingly collect personal information from children without an appropriate lawful basis or any necessary parental authorisation.

If you believe personal information relating to a child has been provided inappropriately, please contact us.

16. Automated Decision-Making

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business practices, services or legal obligations.

The latest version will be published on this page, with the date of the most recent update clearly displayed.

18. Complaints

If you have concerns about how we handle your personal information, please contact us so that we can investigate and respond.

You also have the right to raise a complaint with the UK's independent data protection regulator:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113

Our ref: CSN2655427

19. Contact Us

For privacy-related enquiries, requests or concerns, please contact:

Sophie Longhurst
www.sophielonghurst.co.uk
hello@sophielonghurst.co.uk