1. Data Controller Identification
This website is owned and operated by Floral Logistics Registry Ltd, registered in England and Wales under Company Registration Number 14892019, with its registered corporate address at 14 Market Terrace, London EC1R 0BB, United Kingdom. We act as the data controller for personal data processed through jollyjunctionporchs.online. Queries regarding our data governance may be submitted to [email protected].
2. Categories of Information Collected
We adhere to strict data minimization principles. We only collect the minimal technical and communication data required to serve informational content and answer user inquiries:
- Direct Contact Data: When you complete our communication form, we collect your name, email address, topic categorization, and submitted message content.
- Technical Protocol Data: Web server logs automatically capture IP addresses, browser user-agent strings, referral headers, and HTTP request timestamps to safeguard system integrity and prevent denial-of-service abuse.
- Local Storage State: Browser localStorage is used solely to store your cookie consent choice. No third-party behavioral profiling identifiers are placed on your machine.
3. Lawful Bases for Processing
Under the General Data Protection Regulation (GDPR Article 6) and the UK Data Protection Act 2018, our processing activities rest upon the following legal bases:
- Legitimate Interests (Art. 6(1)(f)): Processing network logs to preserve cybersecurity, optimize rendering speeds, and defend against malicious attacks.
- Consent (Art. 6(1)(a)): Direct user submission of inquiries via our contact form implies consent to receive a direct factual response to that query.
- Legal Obligation (Art. 6(1)(c)): Retaining records where mandatory under UK corporate, tax, or statutory disclosure obligations.
4. Data Retention Limits
Communication inquiries received through our contact desk are retained for a maximum duration of 180 days from final resolution, after which all correspondence threads are permanently purged. Server access logs are rotated on a 30-day rolling cycle and deleted automatically unless actively required for ongoing security audits.
5. Third-Party Disclosures & Infrastructure
We do not sell, rent, or monetize personal information. Data processing is restricted to infrastructure hosting providers maintaining secure European data centers. No personal data is transferred across international boundaries outside the United Kingdom and the European Economic Area without standard contractual safeguards.
6. Your Statutory Rights
Under GDPR, UK GDPR, and relevant provisions of the California Consumer Privacy Act (CCPA/CPRA), you possess distinct rights regarding your personal records:
- Right of Access: Request a complete copy of any personal data stored about you.
- Right to Rectification: Request correction of inaccurate or incomplete contact records.
- Right to Erasure: Request immediate destruction of your contact records ("Right to be Forgotten").
- Right to Restrict Processing: Request suspension of active processing under statutory dispute conditions.
- Right to Lodge a Complaint: You maintain the legal right to submit complaints to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local European supervisory authority.
7. Contact Procedure for Privacy Requests
To exercise any statutory data right, transmit a signed request to [email protected] with the subject header "Data Subject Rights Request". We verify identity prior to disclosure and respond within 30 statutory days without charge.