Legal
Privacy Policy
Last updated: July 2026
Your privacy matters to us. This Privacy Policy explains how Rose & Birch collects, uses, and protects your personal information when you visit our website or place an order.
1. Information We Collect
We collect information you provide directly to us, including your name, email address, postal address, and payment details when you place an order. We may also collect information about how you use our website through cookies and analytics tools.
2. How We Use Your Information
We use your personal information to process and fulfil your orders, communicate with you about your purchases, send you order confirmations and shipping updates, and improve our website and services. With your consent, we may also send you marketing communications about new products and offers.
3. Sharing Your Information
We do not sell or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and fulfilling orders — such as payment processors and delivery couriers — under strict confidentiality agreements.
4. Payment Security
All payment transactions are processed securely through our payment provider. We do not store your full card details on our servers. Our payment processing complies with PCI DSS standards.
5. Cookies
Our website uses cookies to enhance your browsing experience, remember your preferences, and analyse site traffic. You can control cookie settings through your browser. Disabling cookies may affect some functionality of our website.
6. Your Rights
Under UK data protection law, you have the right to access, correct, or delete your personal data, object to or restrict its processing, and request data portability. To exercise any of these rights, please contact us and we will respond within 30 days.
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Order records are typically retained for 7 years in line with financial record-keeping requirements.
8. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us via our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.
Rose & Birch — Thoughtfully curated gift boxes for every occasion. Made with care, ready to give."