Privacy

Who looks after it

Farid Amiri, trading as Say It In Bloom, of 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London W1T 6EB, United Kingdom, decides how your information is used, and is responsible for it under UK data protection law. Write to us at support@sayitinbloom.com about anything here.

What we keep, and why

When you send a gift

• Your name and email address: to send you its own page, a note when it is opened if you ask, and the reminder a year on if you ask.
• Their name, and their email address if you send it by email: to deliver it.
• Your letter, your recordings and their captions, and what you chose: the occasion, the flower, the paper, the music, the wax, your initials in the seal, and the day it opens.
• That it was paid for: the amount, the currency and Stripe’s reference. Your card details go to Stripe and Link, never to us.

When a gift is received

• When it was first opened and how many times, so its sender can be told if they asked.
• A reply, if the receiver records one: their voice and its captions, sent to the sender.

To keep things safe and working

• The result of the check made before a gift is sent (passed, held for a person, or declined, and the reason), and any report made about a gift or a reply.
• Your IP address, used for a few minutes to stop anyone sending too many requests, and then forgotten.
• Error reports, with every gift’s link, every word and every address taken out before they leave our server.

We never sell your information, never use it for advertising, and never put a letter in an email or a link preview.

Our reasons in law

• To do what you asked: making and delivering the gift, its page, and the opened note (our contract with you).
• Legitimate interests: delivering a gift to the person you name, checking gifts before they are sent, limiting requests, fixing errors and preventing misuse. We keep these to what is needed.
• Your consent: the reminder a year on, which you can switch off from the gift’s page at any time.
• The law: keeping records of payments for tax.

Who helps us

These services handle information for us, only to do their part, under contracts that require them to protect it:

Stripe and Link

Payments, tax and receipts. Link sells each gift to you as the merchant of record.

Vercel

Runs the site, in London.

Neon

Our database, in London.

Cloudflare

Stores recordings and seals, in a private store reached only through links that lapse.

Resend

Sends our emails.

OpenRouter, and the model providers it reaches

Transcribe recordings for captions and check the words before a gift is sent, through providers that may neither keep nor train on them (zero data retention).

Upstash

Counts requests for a few minutes, to limit them.

Sentry

Error reports, in the European Union, with nothing personal in them.

Some of these are in the United States. Where information leaves the UK, it is protected by UK adequacy regulations or the UK’s approved contract terms.

How long we keep it

• A gift, its words and its recordings: 2 years from its day, or until its sender deletes it, whichever is sooner. A reply goes with its gift.
• A gift that was cancelled: its words go thirty days after.
• A gift that was never paid for: thirty days.
• A recording that was never sent with a gift: two days.
• Records of payments: six years, as tax law requires. They hold no letter and no recording.
• Error reports: ninety days.

Cookies and your device

We use no advertising or tracking cookies, so there is nothing to agree to. What we keep in your browser is only what the site needs to do what you ask:

• The writing desk keeps your unfinished letter and recordings (and any letter kept for later while you answer a gift) while you write, so nothing is lost if the page reloads or you go to pay and come back. Close the tab and it keeps them for an hour; after that the desk starts afresh and they are deleted. None of it leaves your device until you pay, unless you ask the desk to write a message’s captions.
• After you send, it remembers your own name and email for your next letter, for ninety days after the last one you sent, and that the gift was sent from this device: its link opened here shows it to you as they will see it, without telling you it has been opened.
• A gift page remembers that it has been opened, so you can go straight back to the letter. When you answer it, it hands the desk the gift’s two names until you close the tab.
• The site remembers whether you turned the sound off.

Our own administrators use one cookie to stay signed in. You can clear any of it from your browser’s settings.

Counting visits

To know whether the site works for people, we count a few moments on our own server: the front page seen, the writing desk opened, the preview watched, the checkout opened. Each is a number added to that day’s total. Nothing is stored on your device for it, and nothing that could identify you is kept. If your browser asks sites not to track it (Global Privacy Control or Do Not Track), we don’t count you at all.

Your rights

You can ask for a copy of your information, ask us to correct it, delete it, restrict or object to how we use it, or have it in a form you can take elsewhere. A gift’s page (from your email) lets you delete it at once. For anything else, write to support@sayitinbloom.com. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk).

If someone sent you a gift

Your name, and your email address if the gift came by email, were given to us by its sender, to deliver it. If you would rather it were gone, use Report a gift or write to us, and we will remove it.

Changes

If we change how we use information, we will update this notice and its date. If the change matters to you, we will tell you before it applies.