Privacy notice

What happens to the information you send us, in plain terms. This site collects data in exactly one place — the quotation form — and does not track you.

In short

This website collects personal information in one place only: the Get a quote form. There is no analytics, no advertising, no tracking and no third-party scripts anywhere on this site. We do not build a profile of you, and we do not sell or share what you send us.

What we collect, and only when you send it

When you complete the quotation form, we receive what you typed into it. Depending on which fields you fill in, that can include:

Your identity and role — name, job title, company, company website, VAT or company number, buyer type
How to reach you — email address, telephone number, country, and optionally WhatsApp and LinkedIn
Your requirement — products, specification, volumes, frequency, destination, timing, Incoterms, import arrangements and anything you write in the free-text fields

We also record four technical items alongside it:

the date and time the enquiry arrived
your browser's user-agent string
a one-way cryptographic hash of your IP address — not the address itself
which page on this site you were reading before you opened the form, if you arrived from one

We hash the IP rather than storing it because the only thing we need it for is telling repeated automated submissions apart from genuine ones. A hash does that. It cannot be turned back into your address.

On the last item, the limits matter more than the item. We record it only when the previous page was on this site — if you arrived from Google, LinkedIn or anywhere else, that referrer is discarded, not stored. We keep the path only, never the query string, so nothing you typed into a search box travels with it. It is recorded once, at the moment you choose to send an enquiry. Nothing is written to a cookie or to browser storage, and you are not followed from page to page. We record it for one reason: to learn which pages on this site actually help a buyer, so the next ones are better.

Why we hold it

To read your requirement, come back to you with questions, and respond with relevant commercial information. That is the only purpose.

Where it is held

Your enquiry is written to a file on our web server, which is provided by our hosting company, Hostinger, in a directory that sits outside the public website and cannot be reached from the internet. It is not published, not indexed, and not placed anywhere a search engine or visitor could read it.

Who sees it

Kenya Flower Merchant, and our hosting provider as described here. We do not sell, rent or share your details with anyone else, and we do not add you to a marketing list. Two emails are generated when you submit the form: a notification to us, and an acknowledgement to the address you gave, so you have a record and a reference number. Those emails travel through our email provider, as any email does. Our website, the server that stores your enquiry and our email are all provided by our hosting company, Hostinger, which stores and carries the data on our behalf as a hosting provider.

Cookies

One cookie, and it is strictly necessary. A session cookie keeps the quotation form working across the steps and protects it against cross-site request forgery. It expires when your session does.

Your draft answers stay in your own browser. While you work through the form, the JavaScript version keeps the answers you have typed in your browser's session storage, so moving between steps or reloading the page does not lose them. That storage never leaves your device, is not read by this site's server until you press submit, is cleared when the enquiry is sent, and disappears when you close the tab. Without JavaScript the form is one long page and nothing is stored in the browser at all.

We set no analytics cookies, no advertising cookies and no tracking cookies of any kind. There is no Google Analytics, no tag manager, no pixel, no heatmap, no session recorder and no third-party embed on this site. This is why you have not been shown a cookie banner: there is nothing to consent to.

This site makes no third-party requests at all. Every file it loads — stylesheets, scripts, images and the two typefaces — comes from this domain. The fonts are deliberately self-hosted rather than loaded from Google Fonts, because a webfont fetched from another company's servers would disclose your IP address and browser to them on every page view. You can verify this: open your browser's network tab and look at where the requests go. They all go here.

What we do not do

We do not track your browsing, on this site or anywhere else.
We do not enrich your details from data brokers or other sources.
We do not use your enquiry to train anything.
We do not send marketing you did not ask for.

How long we keep it

Twelve months after our last meaningful interaction with you — the last reply, quotation, order or message either way. After that the enquiry record is deleted.

If a commercial relationship develops, the records that belong to that relationship are kept separately and for as long as the relationship and our tax and accounting obligations require. This section is about enquiries.

This twelve-month period is our own operational policy, not a legal requirement. We chose it as a conservative period: long enough that a buyer who returns after a season still finds their requirement on file and does not have to repeat it, and short enough that we are not holding a named individual's contact details indefinitely for no reason. It remains subject to a final privacy and legal review before this site is published, and we will say so here if it changes.

You do not have to wait twelve months. Ask us to delete your enquiry and we will.

What exactly is kept, and where


What	Your answers to the quotation form — company and contact details, and the requirement you described. Plus the date and time, your browser's user-agent string, a one-way hash of your IP address, and which page on this site you came from
Why	To read your requirement, come back to you, and hold the thread of a commercial conversation if one develops. The hash is kept only to tell repeated automated submissions apart from genuine ones
Where	In a file on our web server, provided by our hosting company, Hostinger, in a directory outside the public website, not reachable from the internet, not published and not indexed
Who can access it	Kenya Flower Merchant. Our hosting company, Hostinger, stores and carries it as our hosting provider. It is not shared with anyone else and you are not added to any marketing list
When it is deleted	Twelve months after the last meaningful interaction, or sooner if you ask
How deletion is done	The stored record is deleted from the server, along with any working copy. Deletion is a real removal of the file, not a flag on a database row

Your choices

Write to info@kenyaflowermerchant.com, quoting your reference number if you have one, and ask us to:

send you a copy of what we hold about you
correct anything that is wrong
delete your enquiry

Say what you would like and we will do it.

Changes to this notice

If this notice changes we will say so here, with the date. This version is dated below.