Flowers Earlsfield Privacy Policy

Introduction

This Privacy Policy explains how Flowers Earlsfield collects, uses, stores, and processes your personal data in compliance with the General Data Protection Regulation (GDPR). This Policy applies to all customers placing orders from Earlsfield and surrounding districts. By placing an order with Flowers Earlsfield, you acknowledge and accept the terms provided.

What Data We Collect

Flowers Earlsfield is committed to only collecting personal information that is necessary and relevant. The data we collect may include:

• Name: First and last name for order and delivery purposes.
• Contact Information: Delivery address, billing address, and contact phone number.
• Email Address: For order confirmations and customer communication.
• Order Details: Information about items ordered, delivery preferences, requested card messages, and special instructions.
• Payment Information: Last four digits of your payment card number for referencing payments (full payment details are not stored by us directly).
• Customer Interaction Records: Communications regarding order queries or after-sales service.

We do not deliberately collect sensitive data, nor do we knowingly collect personal data from individuals under 16 years old without consent from a parent or guardian.

Lawful Basis for Processing

Flowers Earlsfield processes your personal data under several legal bases, as required by GDPR:

• Contractual Obligation: We use your data to process and fulfil your order and to provide related customer service. These activities are necessary for the performance of a contract between you and us.
• Legitimate Interest: We may use your information for internal record-keeping, improving services, or defending our interests (for example, to handle claims or detect fraud), where such interests are not overridden by your rights.
• Legal Requirements: We may process certain data in order to comply with legal obligations, such as tax or accounting regulations.
• Consent: Where applicable, if we wish to use your information for email marketing or similar purposes, we will request your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal information is used strictly for the purposes specified below:

• To manage and fulfil your orders, including delivery and order communications.
• To process payments securely via our payment service providers.
• To improve our products and services, such as analyzing purchase patterns (using aggregated, anonymised data only).
• To respond to your enquiries, requests, or complaints.
• To comply with legal or regulatory requirements.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, order and delivery information is retained for up to seven years for financial and legal compliance. Customer account data may be retained for as long as you maintain an active customer relationship with us. After this period, your data will be securely deleted or anonymised so it can no longer be associated with you.

Data Processors and Sharing

Flowers Earlsfield may share your information with trusted third-party service providers (“data processors”) only where necessary to deliver our services. This includes:

• Payment Processing Providers: To process your order and verify payments.
• Delivery Partners: To ensure your flowers reach the right recipient at the correct address.
• IT and Hosting Providers: For secure storage, website functionality, and keeping data safe.
• Professional Advisors: Including accountants or auditors for compliance purposes.

All data processors are contractually obliged to safeguard your data and follow GDPR requirements. Flowers Earlsfield does not sell or rent your personal information to third parties for marketing or other purposes.

International Data Transfers

We seek to ensure that your personal data is kept within the UK or European Economic Area (EEA). Should it be necessary to transfer your personal data outside these areas, we will ensure that adequate safeguards (such as Standard Contractual Clauses) are in place as required by the GDPR.

Your GDPR Rights

Under the General Data Protection Regulation, you have a number of rights concerning your personal data, which include:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that incorrect or incomplete data be corrected.
• Right to Erasure: You can ask for your data to be deleted, subject to certain legal limitations.
• Right to Restrict Processing: You have the right to limit the way we process your data in certain situations.
• Right to Data Portability: Where applicable, you can request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on direct marketing, or under certain other circumstances.
• Right to Withdraw Consent: When processing is based on your consent, you may withdraw it at any time.
• Right to Lodge a Complaint: If you believe your rights have been violated, you can lodge a complaint with the relevant supervisory authority.

We will respond to any rights requests within one month, unless the matter is particularly complex, in which case we will keep you informed about any delays.

Security Measures

Flowers Earlsfield employs appropriate technical and organisational security measures intended to prevent unauthorised access, disclosure, accidental loss, or destruction of your personal data. These measures include secure servers, restricted access, and regular training for our staff.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in legal requirements or operational practices. If significant changes are made, we will update the policy details on our website before such changes take effect. Your continued use of our services after updates constitutes your acceptance of those changes.

Contacting Flowers Earlsfield

If you have any questions about this privacy policy or wish to exercise your GDPR rights, please use the contact form available on our website or write to us at our registered business address.