Privacy Policy

1. Who We Are

Flourish (“we”, “us”, or “our”) operates the commercial space activation, retail commercialisation, and shopping centre management platform at https://thisisflourish.co.uk. We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For all data protection queries or subject access requests, you can contact our team directly at info@thisisflourish.co.uk or by telephone on +44 7951 029 880.

2. Information We Collect

We may collect and process the following categories of personal data:

• Enquiry & Pitch Booking Data: Your name, email address, telephone number, company/brand name, preferred shopping centre(s), trading dates, space usage type (e.g., Retail Pop-Up, Brand Activation, Permanent Long-Term), and enquiry message when you submit a form on our website.
• Landlord & Managing Agent Partnership Data:Contact details, organisation name, and property portfolio details submitted via our “List Your Space” or partnership channels.
• Trader Compliance & Onboarding Data:Public Liability Insurance certificates, Risk Assessments & Method Statements (RAMS), electrical PAT testing records, and invoicing details required to authorise trading at managed shopping centres.
• Technical & Usage Information: IP address, browser type, operating system, referring URLs, and page interaction metrics collected via essential cookies and analytics to keep our website secure and responsive.

3. How We Use Your Personal Data & Lawful Basis

Under the UK GDPR, we process your personal information on the following lawful bases:

• Contractual Necessity: To process your pitch enquiry, allocate you to the relevant Regional Commercialisation Manager, issue licence agreements, and coordinate on-site access with shopping centre management.
• Legitimate Interests: To operate, improve, and secure our B2B commercialisation services, match retail operators with suitable shopping centre category opportunities, and respond promptly to business enquiries.
• Legal & Regulatory Obligations: To maintain statutory financial, tax, health and safety, and insurance compliance records.
• Consent: Where you have opted in to receive marketing updates, podcast announcements, or availability alerts (which you may withdraw at any time).

4. Data Sharing & Recipients

We never sell your personal data to third parties. We only share data where necessary to deliver our services:

• Assigned Regional Managers & Shopping Centre Partners: When you enquire about a specific shopping centre or region, your enquiry is shared with the responsible Flourish Regional Manager and, where required for centre approval, the relevant centre management or managing agent.
• Trusted Infrastructure Providers: Secure cloud hosting, database storage, and transactional email delivery providers operating under strict GDPR data processing agreements.

5. Data Retention

We retain enquiry and commercial booking records only for as long as necessary to fulfil the purposes for which they were collected, including satisfying any legal, accounting, insurance, or reporting requirements (typically up to 6 years for executed commercial licence agreements and 24 months for general website enquiries).

6. Your Rights Under UK GDPR

You have the right to:

• Request access to the personal data we hold about you (Subject Access Request).
• Request correction of inaccurate or incomplete personal data.
• Request erasure of your personal data where there is no compelling reason for continued processing.
• Object to processing based on legitimate interests or direct B2B outreach.
• Request restriction of processing or data portability.

To exercise any of these rights, please email info@thisisflourish.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.