Privacy Policy

Last updated: 9 August 2026

Paper & Flora (“Paper & Flora”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and share personal data when you visit paperandflora.com, purchase products from our online shop, subscribe to marketing communications, contact us, or otherwise interact with us.

Paper & Flora is based in Ireland and sells products to customers worldwide. Where the EU General Data Protection Regulation (“GDPR”) applies, Paper & Flora, trading as Paper & Flora, is the data controller responsible for your personal data.

1. Who We Are

Business: Paper & Flora
Legal/business name: Paper & Flora
Website:paperandflora.com
Email: hello@paperandflora.com
Business address: 2 Clogher, The Headlands, Cork, Ireland

If you have questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. Personal Data We Collect

The information we collect depends on how you interact with Paper & Flora.

When You Place an Order

When you purchase something from our online shop, we may collect:

  • Your name

  • Email address

  • Billing address

  • Shipping address

  • Telephone number, where required for delivery

  • Products ordered

  • Order value and transaction details

  • Delivery and fulfilment information

  • Communications relating to your order

We use this information to process your purchase, fulfil and deliver your order, provide customer service, process returns or refunds, prevent fraud, and maintain appropriate business records.

Payment Information

Payments on our website are processed using Squarespace Payments and the payment infrastructure associated with our Squarespace online shop.

Payment information necessary to complete your transaction is processed by the relevant payment service providers.

Paper & Flora does not need to independently store your complete payment card details in order to fulfil your purchase.

Payment providers may process your information in accordance with their own privacy policies and legal obligations.

When You Contact Us

If you contact Paper & Flora, we may collect your name, email address, the contents of your message, and any other information you choose to provide.

We use this information to respond to your enquiry, provide customer support, and resolve issues relating to orders, deliveries, payments, or our products.

When You Subscribe to Marketing Communications

Paper & Flora may offer you the option to subscribe to marketing communications, such as emails about new products, collections, launches, offers, and other news.

If you choose to subscribe, we may collect:

  • Your name

  • Email address

  • Subscription preferences

  • Information relating to your interaction with our marketing communications

We may use a third-party email marketing service provider to manage subscriptions and send marketing communications on our behalf.

Where required by applicable law, we will only send marketing communications with your consent or another appropriate legal basis.

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting us.

Information Collected When You Visit Our Website

When you visit paperandflora.com, certain technical information may be collected automatically, including:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Pages viewed

  • Referring website or source

  • Date and time of visits

  • Interactions with our website

  • Approximate location derived from technical information

  • Cookie and similar technology information

Our website is built and hosted using Squarespace. Squarespace may process certain information in order to provide website hosting, ecommerce, security, analytics, checkout, and related functionality.

We also use Google Analytics to help us understand how visitors find and use our website.

3. Google Analytics

We use Google Analytics to understand how visitors interact with paperandflora.com and to help us improve our website and customer experience.

Google Analytics may collect information about your use of our website, such as:

  • Pages visited

  • Website interactions

  • Traffic and referral sources

  • General device and browser information

  • Approximate geographic information

  • Dates and times of visits

  • Other website usage information

Google may process information collected through Google Analytics in accordance with its own privacy practices.

Where required by applicable law, including EU data protection and electronic privacy rules, Google Analytics will only be activated after you have provided the appropriate consent through our cookie consent mechanism.

Where available, you can change or withdraw your consent through the cookie preferences provided on our website.

4. How We Use Your Personal Data

We may use your personal data to:

  • Process and fulfil orders

  • Process payments and refunds

  • Arrange shipping and delivery

  • Send order confirmations and delivery information

  • Respond to customer enquiries

  • Provide customer service

  • Manage returns, exchanges, complaints, and disputes

  • Maintain and operate our website and online shop

  • Detect and prevent fraud, misuse, and security incidents

  • Maintain financial, tax, and accounting records

  • Understand how visitors use our website

  • Analyse website traffic and performance

  • Improve our website, products, and customer experience

  • Manage marketing subscriptions

  • Send marketing communications where permitted

  • Measure the performance of marketing communications

  • Comply with our legal and regulatory obligations

  • Establish, exercise, or defend legal claims

We will not use your personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.

5. Our Legal Bases Under GDPR

Where GDPR applies, we process personal data only where we have an appropriate legal basis.

Contract

We process personal data where necessary to perform a contract with you or take steps at your request before entering into a contract.

For example, we need your name, contact information, shipping address, and order details to process and deliver your purchase.

Legal Obligation

We may process and retain information where necessary to comply with legal obligations, including tax, accounting, consumer protection, and other regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These interests may include:

  • Operating and improving Paper & Flora

  • Providing customer support

  • Protecting our website and business

  • Preventing fraud and misuse

  • Maintaining appropriate business records

  • Understanding the general performance of our business

  • Establishing or defending legal claims

Consent

Where required, we rely on your consent for activities such as:

  • Marketing communications

  • Non-essential cookies

  • Google Analytics

  • Certain similar tracking technologies

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

6. Cookies and Similar Technologies

Paper & Flora uses cookies and similar technologies in connection with our Squarespace website.

Essential Cookies

Some cookies are necessary for our website and online shop to operate correctly.

These may support functionality such as:

  • Website security

  • Shopping-cart functionality

  • Checkout

  • Payment processing

  • Website preferences

  • Session management

These cookies may be used where necessary to provide the website or services you request.

Analytics Cookies

We use Google Analytics to help us understand website traffic and how visitors interact with paperandflora.com.

Where consent is required, Google Analytics and other non-essential analytics technologies will only be used after you have given your consent.

Managing Cookies

Where available, you can change or withdraw your cookie preferences using our website's cookie consent mechanism.

You can also control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

For more detailed information about the cookies and technologies used on paperandflora.com, please see our Cookie Policy.

7. Email Marketing

Paper & Flora may offer customers and website visitors the option to receive marketing communications.

These communications may include information about:

  • New products

  • Collections

  • Product launches

  • Special offers or promotions

  • Paper & Flora news and updates

If you subscribe, we may use a third-party email marketing platform to manage our mailing list, record subscription preferences, send communications, and measure email performance.

Where required by applicable law, we will only send marketing communications where you have provided consent or where another appropriate legal basis applies.

Unsubscribing

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our marketing emails or by contacting us.

If you unsubscribe, we may retain limited information necessary to record and respect your opt-out request.

Unsubscribing from marketing communications will not prevent us from sending transactional or service-related messages that are necessary in connection with an order, payment, delivery, customer-service request, or other transaction with you.

8. Who We Share Personal Data With

We do not disclose personal data unnecessarily.

We may share information with trusted third parties where necessary to operate Paper & Flora and provide our products and services.

Squarespace

Our website and online shop are built and hosted using Squarespace.

Squarespace may process personal data in connection with website hosting, ecommerce functionality, security, checkout, analytics, and related services.

Squarespace Payments and Payment Providers

Payment information is processed through Squarespace Payments and the payment infrastructure associated with our online shop.

These providers may receive information necessary to authorise, process, secure, or refund payments.

Google Analytics

We use Google Analytics to measure and understand website usage.

Information relating to your interaction with our website may therefore be processed by Google where you have consented to analytics cookies when such consent is required.

Email Marketing Service Providers

If Paper & Flora uses a third-party email marketing platform, we may share relevant personal data with that provider for purposes such as:

  • Managing mailing lists

  • Recording subscription preferences

  • Sending marketing communications

  • Processing unsubscribe requests

  • Measuring email performance

We will only provide information reasonably necessary for these purposes.

Shipping and Delivery Providers

When you place an order, we may provide information necessary to deliver your purchase to postal services, couriers, fulfilment providers, or other delivery partners.

This may include your name, shipping address, contact details, and relevant order information.

Professional and Technical Service Providers

Where necessary, information may also be shared with providers that assist us with services such as:

  • IT and website support

  • Website security

  • Accounting

  • Legal services

  • Insurance

  • Fraud prevention

  • Other professional services

We may also disclose information where required by law or where reasonably necessary to protect our legal rights, our customers, or our business.

We do not sell your personal data in the ordinary meaning of the term.

9. International Transfers

Paper & Flora is based in Ireland, but we sell products worldwide and use service providers that may operate internationally.

Squarespace, Google, payment providers, email marketing providers, and other service providers may process personal data outside Ireland or the European Economic Area (“EEA”).

Where GDPR applies and personal data is transferred outside the EEA, appropriate safeguards will be used where required by law.

Depending on the destination and provider, these safeguards may include:

  • An adequacy decision recognised by the European Commission

  • Approved contractual protections such as Standard Contractual Clauses

  • Another legally recognised transfer mechanism

10. How Long We Keep Your Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, and regulatory requirements.

Orders and Transactions

Order and transaction information may be retained after an order has been completed where necessary for accounting, tax, consumer protection, fraud prevention, dispute resolution, or other legal purposes.

Customer Communications

Customer-service communications may be retained for an appropriate period to deal with enquiries, complaints, returns, disputes, or legal claims.

Marketing Information

Marketing information may be retained while you remain subscribed to our marketing communications.

If you unsubscribe, we may retain limited information necessary to record and respect your opt-out request.

Analytics Information

Analytics information is retained according to the settings configured for the analytics services we use and applicable legal requirements.

We may delete or anonymise information when it is no longer reasonably necessary to retain it.

11. Your Rights Under GDPR

If GDPR applies to you, you may have the right to:

  • Request access to the personal data we hold about you

  • Request correction of inaccurate or incomplete personal data

  • Request deletion of personal data in certain circumstances

  • Request restriction of processing in certain circumstances

  • Object to certain processing based on legitimate interests

  • Receive certain personal data in a portable format

  • Withdraw consent where processing is based on consent

  • Object to direct marketing

  • Lodge a complaint with a data protection supervisory authority

These rights are subject to applicable legal conditions and exceptions.

You have the right to object to the use of your personal data for direct marketing at any time.

To exercise your rights, contact us at hello@paperandflora.com.

We may need to verify your identity before completing certain requests.

12. Complaints

If you have concerns about how Paper & Flora handles your personal data, please contact us first so that we have an opportunity to address your concern.

As an Ireland-based business, you may also have the right to make a complaint to the Data Protection Commission (Ireland).

Depending on where you live, you may also be entitled to complain to another competent data protection supervisory authority.

13. Customers Outside Ireland and the EEA

Paper & Flora sells products worldwide.

Depending on where you live, local privacy laws may provide additional rights relating to your personal information.

Where those laws apply to Paper & Flora, we will respond to eligible privacy requests in accordance with applicable requirements.

If you wish to make a privacy request, contact us at hello@paperandflora.com and include your country or region so that we can appropriately assess your request.

14. Children’s Privacy

Paper & Flora does not knowingly collect personal data directly from children where parental or guardian consent would be required under applicable law.

If you believe a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

15. Data Security

We take reasonable technical and organisational measures designed to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure.

We also rely on Squarespace, payment providers, Google, email marketing providers, and other service providers to maintain appropriate security measures for information processed through their systems.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

16. Third-Party Links

paperandflora.com may contain links to websites or services operated by third parties.

We do not control those third parties and are not responsible for their privacy practices.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information to it.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Paper & Flora, our website, the services we use, or applicable legal requirements.

When we make changes, we will update the “Last updated” date at the top of this page.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

If you have questions about this Privacy Policy, would like to exercise your privacy rights, or have concerns about how your personal data is handled, please contact:

Paper & Flora
Legal/business name: Paper & Flora
Email: hello@paperandflora.com
Address: 2 Clogher, The Headlands, Cork, Ireland
Website:paperandflora.com