Flowers Eastcote Privacy Policy: Your Data & Rights

Introduction

This Privacy Policy sets out how Flowers Eastcote collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Eastcote, whether residing in Eastcote itself or the surrounding districts. We are committed to ensuring your information is secure and handled transparently.

What Data We Collect

When you place an order with Flowers Eastcote, we collect only the personal data necessary to process your order efficiently and provide customer service. The types of personal data we may collect include:

Personal Identification Information: Your name, delivery address, billing address, and contact details.
Order Details: Information regarding your order such as product selections, delivery instructions, and purchase history.
Payment Information: Transaction data such as payment method, although card and bank details are handled securely by approved payment processors and are not stored directly by Flowers Eastcote.
Correspondence: Records of communication with us regarding your orders or enquiries.

We do not knowingly collect or process data relating to children under 16 without parental consent.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to process your personal data. For Flowers Eastcote, these are:

Contractual Necessity: We process your personal data to fulfil our contract with you for purchasing and delivering flowers or related products.
Legitimate Interests: We may use your information to improve our services, respond to your enquiries, and manage our relationship with you, where our interests are not overridden by your rights and interests.
Legal Obligation: We retain certain data to comply with our legal and regulatory obligations, such as accounting and taxation requirements.
Consent: If we wish to use your data for direct marketing or where required by law, we will seek your explicit consent beforehand. You can withdraw consent at any time.

How We Use Your Personal Data

The purposes for which we use your personal data include:

Processing and fulfilling your flower orders.
Communicating with you regarding your order or queries.
Managing returns, complaints, and customer care.
Accounting and record-keeping as required by law.
Improving our product and service offerings.

Retention of Personal Data

We retain your personal data only as long as is necessary to fulfill the purposes we collected it for, including any legal, accounting, or reporting requirements. In general, order-related data is retained for up to seven years to satisfy our legal obligations and resolve any disputes. After this period, your data is securely deleted or anonymised unless a longer retention period is required by law.

Processors and Sharing of Data

We do not sell or rent your personal information to third parties. However, in order to process your orders and operate efficiently, your data may be processed by trusted third-party service providers (processors) who assist us in areas such as payment processing, delivery logistics, and IT support. These providers act on our instructions, are bound by strict data protection obligations, and are not permitted to use your data for their own purposes.

Where required by law or for fraud prevention, we may also share your information with regulatory authorities. If there is ever a need to transfer your data outside the UK or European Economic Area, we will ensure that suitable safeguards are in place as required by the GDPR.

Data Security

We take the security of your personal data seriously and have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure it. Access is limited to authorised staff and processors who require it for processing your order or providing support. Regular assessments are made to ensure our practices remain robust.

Your Rights Under the GDPR

The GDPR grants you a range of rights with respect to your personal data:

Right to Access: You can request confirmation of what personal data we hold about you and obtain a copy of it.
Right to Rectification: You may request corrections to any incomplete or inaccurate data we hold about you.
Right to Erasure: Also known as the 'right to be forgotten', you can ask for your data to be deleted in certain circumstances.
Right to Restrict Processing: You can request limiting how we use your data, for example, when you contest its accuracy.
Right to Data Portability: Where applicable, you may request your data in a structured format to transfer to another provider.
Right to Object: You can object to the processing of your data where we rely on our legitimate interests or for marketing purposes.
Right to Withdraw Consent: Where consent is the basis for processing, you have the right to withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the details provided at the end of this policy or through our official website. If you are dissatisfied with how we handle your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy regularly. Any significant updates will be highlighted on our website or communicated to you where appropriate.

Contact Information

If you have any questions or concerns regarding your personal data or this Privacy Policy, please get in touch using the contact details published on our website. We are committed to dealing with all requests and concerns promptly and transparently.