How we use your data

Privacy Policy

Last updated: 12 September 2026

This notice explains what personal information Forever Yours collects, why we collect it, who we share it with and what rights you have over it. It covers this website, our consultation and booking process, and our email correspondence with you.

Who we are

Whitley Hall Hotel Limited, trading as Forever Yours, is the data controller for the information described here.

Registered office: Whitley Hall Hotel, Elliot Lane, Grenoside, Sheffield, South Yorkshire, S35 8NR
Company number: 01593427
Address: Whitley Hall Hotel, Elliot Lane, Grenoside, Sheffield, South Yorkshire, S35 8NR
Privacy enquiries: privacy@foreveryours.love

Forever Yours is a trading name of Whitley Hall Hotel Limited, which also operates Whitley Hall Hotel. The two are one company, not two, so information you give us may be used across both brands where you have dealt with us through each — for example, where we supply flowers for a wedding held at the hotel. We do not use details you gave one brand to market the other unless you have agreed to it. The hotel publishes its own notice at whitleyhall.com/privacy.

Information we collect

When you book a consultation or appointment. Your name, email address and telephone number, the date and time, and what you would like to discuss.

When you order flowers, styling, stationery, or hair and make-up. Your contact details, the delivery or venue address, the date of your event, your order and any notes you give us about it — colours, preferences, timings and the names of others involved, such as a venue coordinator or another supplier.

For weddings and events. Your partner’s name where you give it, your guest numbers, your venue and your schedule for the day.

For funeral flowers. The name of the person who has died, the funeral director, the date and place of the service, and the wording you would like on a card or tribute. We treat this information with particular care and keep it only as long as we need it to complete your order.

When you pay us. Card details are entered directly into our payment provider’s systems and are not stored on our servers. We receive confirmation of the payment, the card type and the last four digits.

When you sign up for offers. Your email address and your preferences.

When you use this website. Your IP address, browser and device type, the pages you visit and how you arrived, collected through cookies and similar technologies. See “Cookies and tracking” below.

When you telephone us. Calls may be recorded for training and quality purposes.

Some of what you tell us — about a bereavement, a religious ceremony or a medical condition affecting an appointment — can be sensitive. We only record what you choose to tell us, we use it solely to carry out your order, and we share it internally only with the people working on it.

Why we use it, and our lawful basis

What we doOur lawful basis
Arrange and carry out a consultation, appointment or orderPerformance of a contract with you
Take payment, and prevent and investigate fraudPerformance of a contract; our legitimate interest in preventing fraud
Reply to an enquiryOur legitimate interest in answering people who contact us
Deliver to a venue and co-ordinate with other suppliersPerformance of a contract with you
Send marketing emails about offers and seasonal collectionsYour consent; or, if you have ordered from us before, our legitimate interest in telling you about similar services. You can opt out at any time
Ask for feedback, and show photographs of our workOur legitimate interest in improving and promoting what we do. We ask for your permission before publishing photographs of a wedding or private event
Keep accounting and tax recordsLegal obligation
Record telephone callsOur legitimate interest in training staff and maintaining service quality
Analytics, advertising and other non-essential cookiesYour consent, given through our cookie banner

Photographs of our work

We photograph the flowers and styling we create, and we use those photographs on this website, in our portfolio and on social media. Where a photograph shows a private event, or identifies you or your guests, we ask your permission first, and you can withdraw it later by emailing us — we will remove the images from anywhere we control.

Marketing, and how to stop it

Every marketing email we send carries an unsubscribe link, and it works immediately. You can also email privacy@foreveryours.love and we will remove you.

Opting out of marketing does not stop messages we have to send you about an order you have placed.

We do not sell, rent or trade your personal information, and we never share it with third parties for their own marketing.

Email correspondence

When you email us, or we email you, the message and any attachments pass through and are stored in our email system, which is provided by Microsoft (Microsoft 365). Signatures and disclaimers are added to our outgoing messages by Exclaimer, which processes messages in transit for that purpose alone and does not use their contents for anything else. Automated emails — order confirmations, enquiry acknowledgements and the like — are sent through Mailgun.

Email is not a secure medium. Please do not send us card details by email.

Who we share it with

We use the following organisations to run our business and this website. Each of them acts on our instructions and is bound by contract to keep your information confidential and to use it only for the purpose we have given them.

WhoWhat for
StripeCard payments
MicrosoftEmail and office systems
ExclaimerEmail signatures and disclaimers
MailgunAutomated email from the website
HetznerWebsite and database hosting
CloudflareWebsite security and content delivery
GoogleWebsite analytics, fonts and tag management
MetaAdvertising measurement, and Instagram content shown on this site

We also pass on what is necessary to deliver your order — your name, the delivery address and the timings — to venues, funeral directors, couriers and other suppliers working on the same event. We share information with our accountants and professional advisers, and with the authorities where the law requires it.

Where your information is held

Our website and database are hosted in Germany, and our email is hosted in the United Kingdom and the European Union. Some of our suppliers — Stripe, Google, Meta and Cloudflare among them — are based in or transfer data to the United States. Where information leaves the UK it is protected by an adequacy decision, or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

WhatHow long
Order and event records7 years from the date of your order — 7 years is usual, to match accounting records
Accounting and payment records7 years, as HMRC requires
Enquiries that did not become orders2 years — 2 years is a reasonable default
Funeral orders7 years, as accounting rules require — kept only as long as accounting rules require
Marketing listUntil you unsubscribe, or after 24 months of no engagement
Photographs of our workIndefinitely in our portfolio, unless you ask us to remove them
Call recordings6 months

Your rights

Under UK data protection law you have the right to:

  • Access — ask for a copy of the information we hold about you.
  • Rectification — have anything inaccurate corrected.
  • Erasure — ask us to delete information where we no longer need it.
  • Restriction — ask us to stop using it while a dispute is resolved.
  • Portability — receive information you gave us in a machine-readable form.
  • Object — object to processing we carry out for our legitimate interests, and object to direct marketing at any time, which we will always honour.
  • Withdraw consent — where we rely on your consent, withdraw it at any time. This does not affect anything done before you withdrew it.

Exercising these rights is free. Email privacy@foreveryours.love. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose your information to somebody else.

Cookies and tracking

Essential cookies keep the website working. We also use analytics and advertising cookies, and cookies set by content we embed from other sites; the full list is in the privacy preferences panel in our cookie banner. You can block or delete cookies at any time in your browser settings, though some parts of the site may then stop working properly.

Third-party cookies and embedded content on this site come from Google (analytics and fonts), Meta (advertising measurement and Instagram) and Interactive Hive.

Security

Traffic between your browser and our website is encrypted. Our systems are password-protected and access is limited to the people who need it. No system is perfectly secure, but if a breach occurs that is likely to put your rights at risk we will tell you and the Information Commissioner’s Office.

Other websites

This notice covers only our own website and systems. Where we link to somebody else’s site, their privacy notice applies to what they do with your information, and we would encourage you to read it.

Changes to this notice

We review this notice periodically and will update this page when it changes. The date at the top tells you when it was last revised.

How to complain

If you are unhappy with how we have handled your information, please tell us first — email privacy@foreveryours.love — and we will try to put it right.

You also have the right to complain to the Information Commissioner’s Office at any time: ico.org.uk/make-a-complaint, or by telephone on 0303 123 1113.

Cookies used on this site

Cookie or providerWhat it doesHow long it lasts
uncode_privacyRemembers the cookie choices you made in our banner1 year
CloudflareSecurity and bot protection. Essential — always onUp to 1 year
Google AnalyticsStatistics on how the site is used, so we can improve it. You can opt out at tools.google.com/dlpage/gaoptout24 hours to 2 years
Google Tag ManagerLoads our analytics and advertising tagsSession
Meta PixelMeasures our advertising on Facebook and Instagram3 days to 2 years
InstagramSet by Instagram content embedded on our pagesSession to 1 year

Privacy Preference Center