Privacy Policy
Last updated: July 2026
Privacy Policy
At Thistle & String, we are committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, make an enquiry, book our services or otherwise interact with us.
Who We Are
This website is owned and operated by Acanthion Ltd, trading as Thistle & String ("we", "our", "us").
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Acanthion Ltd is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy or your personal information, please contact us:
Email: info@thistleandstring.com
Website: www.thistleandstring.com
Information We Collect
Depending on how you interact with us, we may collect the following information:
Your name
Email address
Telephone number
Wedding or event date
Venue details
Budget information
Floral preferences and inspiration
Any information you choose to provide in enquiry forms or emails
Photographs or content you choose to share with us
Information relating to workshop bookings
When you browse our website, we may also automatically collect:
IP address
Browser type
Device information
Website usage statistics
Cookies and analytics information
How We Use Your Information
We use your personal information to:
Respond to your enquiries
Prepare quotations and proposals
Manage bookings
Communicate throughout your wedding or event planning
Process payments and invoices
Deliver workshops and services
Improve our website and customer experience
Comply with legal and accounting obligations
We will never sell your personal information to third parties.
Legal Basis for Processing
We only process your information where we have a lawful basis to do so.
These include:
Your consent
Performance of a contract
Compliance with legal obligations
Our legitimate interests in operating and improving our business
Sharing Your Information
We may share your information with trusted third parties where necessary to provide our services.
This may include:
Payment providers
Accounting software providers
Website hosting providers
Email providers
Delivery companies
Wedding venues (where required)
Trusted freelancers assisting with your event
We only share information where necessary and ensure appropriate safeguards are in place.
How Long We Keep Your Information
We only retain your personal information for as long as necessary.
Typically:
Wedding and event enquiries that do not proceed are retained for up to 24 months.
Client records are retained for up to 7 years to comply with UK tax and accounting requirements.
Marketing consent is retained until you withdraw your consent.
Marketing
We will only send you marketing communications where you have asked to receive them or where we are legally permitted to do so.
You can unsubscribe from marketing communications at any time.
Your Rights
Under UK GDPR you have the right to:
Access your personal information
Request correction of inaccurate information
Request deletion of your information
Restrict processing
Object to processing
Request transfer of your data
Withdraw consent at any time where consent is relied upon
If you wish to exercise any of these rights, please contact us at:
info@thistleandstring.com
Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or disclosure.
While no online system can ever be completely secure, we continually review our processes to help keep your information safe.
Cookies
Our website uses cookies to improve your browsing experience and help us understand how visitors use our website.
For further information, please see our Cookie Policy.
Third-Party Websites
Our website may contain links to third-party websites, including social media platforms.
We are not responsible for the privacy practices or content of these external websites.
Children's Privacy
Our website and services are not intended for children under the age of 18.
We do not knowingly collect personal information from children.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page together with the revised "Last updated" date.
Contact
If you have any questions about this Privacy Policy or how we use your personal information, please contact:
Acanthion Ltd trading as Thistle & String
Email: info@thistleandstring.com
Website: www.thistleandstring.com
If you remain unhappy with how your information has been handled, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).