Last updated: 3 June 2026

Privacy Policy

This policy explains how OnlyRoses® UK collects, uses and protects your personal data, and the rights you have over it. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our store is powered by Shopify, which processes data on our behalf.

1. Who We Are (Data Controller)

The data controller is OnlyRoses Knightsbridge Logistics Ltd (company no. 16013423), 1 Hans Road, London SW3 1QF, trading as OnlyRoses® UK. For any privacy matter, contact london@only-roses.com.

2. Data We Collect

We collect: contact details (name, address, email, phone); order and delivery information, including recipient details you provide; payment information (processed securely by our payment providers — we do not store full card numbers); account credentials, if you create an account; your communications with us; and technical data such as device, browser and usage information collected automatically through cookies and similar technologies.

3. How We Use Your Data & Our Legal Basis

We use your data to: fulfil and deliver your orders and take payment (to perform our contract with you); provide customer support and handle complaints (our legitimate interests and contract); prevent fraud and keep our services secure (legitimate interests and legal obligation); meet legal and accounting obligations (legal obligation); and send marketing where you have consented or where permitted by law (consent or legitimate interests). You can withdraw marketing consent at any time.

4. Who We Share Data With

We share data only as needed with: Shopify (our platform provider); payment processors; delivery and logistics support; and professional advisers. We may disclose data where required by law. We do not sell your personal data. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards such as UK International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses.

5. Cookies

We use cookies and similar technologies to operate the Site, remember your preferences, and understand how the Site is used. Non-essential cookies are used only with your consent, which you can manage or withdraw through your browser settings or our cookie banner.

6. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes set out above, including to meet legal, accounting and tax requirements. Order and transaction records are typically retained for the period required by UK tax law.

7. Your Rights

Under UK data protection law you have the right to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these rights, contact shopify-uk@only-roses.com. We will respond within one month.

8. Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The version published on this page is the version in force.

OnlyRoses Knightsbridge Logistics Ltd, trading as OnlyRoses® UK. Registered in England & Wales, company no. 16013423. Registered office: 1 Hans Road, London SW3 1QF. VAT no. GB 516 5081 05. © OnlyRoses® UK. All rights reserved.