How we use your data
Privacy Policy
Last updated: 12 September 2026
This notice explains what personal information Forever Yours collects, why we collect it, who we share it with and what rights you have over it. It covers this website, our consultation and booking process, and our email correspondence with you.
Who we are
Whitley Hall Hotel Limited, trading as Forever Yours, is the data controller for the information described here.
Registered office: Whitley Hall Hotel, Elliot Lane, Grenoside, Sheffield, South Yorkshire, S35 8NR
Company number: 01593427
Address: Whitley Hall Hotel, Elliot Lane, Grenoside, Sheffield, South Yorkshire, S35 8NR
Privacy enquiries: privacy@foreveryours.love
Forever Yours is a trading name of Whitley Hall Hotel Limited, which also operates Whitley Hall Hotel. The two are one company, not two, so information you give us may be used across both brands where you have dealt with us through each — for example, where we supply flowers for a wedding held at the hotel. We do not use details you gave one brand to market the other unless you have agreed to it. The hotel publishes its own notice at whitleyhall.com/privacy.
Information we collect
When you book a consultation or appointment. Your name, email address and telephone number, the date and time, and what you would like to discuss.
When you order flowers, styling, stationery, or hair and make-up. Your contact details, the delivery or venue address, the date of your event, your order and any notes you give us about it — colours, preferences, timings and the names of others involved, such as a venue coordinator or another supplier.
For weddings and events. Your partner’s name where you give it, your guest numbers, your venue and your schedule for the day.
For funeral flowers. The name of the person who has died, the funeral director, the date and place of the service, and the wording you would like on a card or tribute. We treat this information with particular care and keep it only as long as we need it to complete your order.
When you pay us. Card details are entered directly into our payment provider’s systems and are not stored on our servers. We receive confirmation of the payment, the card type and the last four digits.
When you sign up for offers. Your email address and your preferences.
When you use this website. Your IP address, browser and device type, the pages you visit and how you arrived, collected through cookies and similar technologies. See “Cookies and tracking” below.
When you telephone us. Calls may be recorded for training and quality purposes.
Some of what you tell us — about a bereavement, a religious ceremony or a medical condition affecting an appointment — can be sensitive. We only record what you choose to tell us, we use it solely to carry out your order, and we share it internally only with the people working on it.
Why we use it, and our lawful basis
| What we do | Our lawful basis |
|---|---|
| Arrange and carry out a consultation, appointment or order | Performance of a contract with you |
| Take payment, and prevent and investigate fraud | Performance of a contract; our legitimate interest in preventing fraud |
| Reply to an enquiry | Our legitimate interest in answering people who contact us |
| Deliver to a venue and co-ordinate with other suppliers | Performance of a contract with you |
| Send marketing emails about offers and seasonal collections | Your consent; or, if you have ordered from us before, our legitimate interest in telling you about similar services. You can opt out at any time |
| Ask for feedback, and show photographs of our work | Our legitimate interest in improving and promoting what we do. We ask for your permission before publishing photographs of a wedding or private event |
| Keep accounting and tax records | Legal obligation |
| Record telephone calls | Our legitimate interest in training staff and maintaining service quality |
| Analytics, advertising and other non-essential cookies | Your consent, given through our cookie banner |
Photographs of our work
We photograph the flowers and styling we create, and we use those photographs on this website, in our portfolio and on social media. Where a photograph shows a private event, or identifies you or your guests, we ask your permission first, and you can withdraw it later by emailing us — we will remove the images from anywhere we control.
Marketing, and how to stop it
Every marketing email we send carries an unsubscribe link, and it works immediately. You can also email privacy@foreveryours.love and we will remove you.
Opting out of marketing does not stop messages we have to send you about an order you have placed.
We do not sell, rent or trade your personal information, and we never share it with third parties for their own marketing.
Email correspondence
When you email us, or we email you, the message and any attachments pass through and are stored in our email system, which is provided by Microsoft (Microsoft 365). Signatures and disclaimers are added to our outgoing messages by Exclaimer, which processes messages in transit for that purpose alone and does not use their contents for anything else. Automated emails — order confirmations, enquiry acknowledgements and the like — are sent through Mailgun.
Email is not a secure medium. Please do not send us card details by email.
Who we share it with
We use the following organisations to run our business and this website. Each of them acts on our instructions and is bound by contract to keep your information confidential and to use it only for the purpose we have given them.
| Who | What for |
|---|---|
| Stripe | Card payments |
| Microsoft | Email and office systems |
| Exclaimer | Email signatures and disclaimers |
| Mailgun | Automated email from the website |
| Hetzner | Website and database hosting |
| Cloudflare | Website security and content delivery |
| Website analytics, fonts and tag management | |
| Meta | Advertising measurement, and Instagram content shown on this site |
We also pass on what is necessary to deliver your order — your name, the delivery address and the timings — to venues, funeral directors, couriers and other suppliers working on the same event. We share information with our accountants and professional advisers, and with the authorities where the law requires it.
Where your information is held
Our website and database are hosted in Germany, and our email is hosted in the United Kingdom and the European Union. Some of our suppliers — Stripe, Google, Meta and Cloudflare among them — are based in or transfer data to the United States. Where information leaves the UK it is protected by an adequacy decision, or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
| What | How long |
|---|---|
| Order and event records | 7 years from the date of your order — 7 years is usual, to match accounting records |
| Accounting and payment records | 7 years, as HMRC requires |
| Enquiries that did not become orders | 2 years — 2 years is a reasonable default |
| Funeral orders | 7 years, as accounting rules require — kept only as long as accounting rules require |
| Marketing list | Until you unsubscribe, or after 24 months of no engagement |
| Photographs of our work | Indefinitely in our portfolio, unless you ask us to remove them |
| Call recordings | 6 months |
Your rights
Under UK data protection law you have the right to:
- Access — ask for a copy of the information we hold about you.
- Rectification — have anything inaccurate corrected.
- Erasure — ask us to delete information where we no longer need it.
- Restriction — ask us to stop using it while a dispute is resolved.
- Portability — receive information you gave us in a machine-readable form.
- Object — object to processing we carry out for our legitimate interests, and object to direct marketing at any time, which we will always honour.
- Withdraw consent — where we rely on your consent, withdraw it at any time. This does not affect anything done before you withdrew it.
Exercising these rights is free. Email privacy@foreveryours.love. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose your information to somebody else.
Cookies and tracking
Essential cookies keep the website working. We also use analytics and advertising cookies, and cookies set by content we embed from other sites; the full list is in the privacy preferences panel in our cookie banner. You can block or delete cookies at any time in your browser settings, though some parts of the site may then stop working properly.
Third-party cookies and embedded content on this site come from Google (analytics and fonts), Meta (advertising measurement and Instagram) and Interactive Hive.
Security
Traffic between your browser and our website is encrypted. Our systems are password-protected and access is limited to the people who need it. No system is perfectly secure, but if a breach occurs that is likely to put your rights at risk we will tell you and the Information Commissioner’s Office.
Other websites
This notice covers only our own website and systems. Where we link to somebody else’s site, their privacy notice applies to what they do with your information, and we would encourage you to read it.
Changes to this notice
We review this notice periodically and will update this page when it changes. The date at the top tells you when it was last revised.
How to complain
If you are unhappy with how we have handled your information, please tell us first — email privacy@foreveryours.love — and we will try to put it right.
You also have the right to complain to the Information Commissioner’s Office at any time: ico.org.uk/make-a-complaint, or by telephone on 0303 123 1113.
Cookies used on this site
| Cookie or provider | What it does | How long it lasts |
|---|---|---|
| uncode_privacy | Remembers the cookie choices you made in our banner | 1 year |
| Cloudflare | Security and bot protection. Essential — always on | Up to 1 year |
| Google Analytics | Statistics on how the site is used, so we can improve it. You can opt out at tools.google.com/dlpage/gaoptout | 24 hours to 2 years |
| Google Tag Manager | Loads our analytics and advertising tags | Session |
| Meta Pixel | Measures our advertising on Facebook and Instagram | 3 days to 2 years |
| Set by Instagram content embedded on our pages | Session to 1 year |

