Flowers Sydenham GDPR Privacy Policy

Introduction

This Privacy Policy details how Flowers Sydenham collects, uses, retains, and protects your personal information in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Flowers Sydenham from Sydenham and the surrounding districts. We are committed to ensuring your privacy is protected and to being transparent about how we use your data.

Personal Data We Collect

When you place an order with Flowers Sydenham, we collect various types of personal data in order to operate and improve our service. The personal data we may collect includes:

Identification Data: Name, billing address, and delivery address.
Contact Information: Phone number and, where required, email address.
Order Information: Details of your order, purchase history, and preferences.
Payment Data: Details necessary to process transactions. Please note that payment card details are processed securely by our payment processors and are not stored by us.
Optional Notes: Personalised messages or notes provided for flower deliveries.

When you visit our website, certain information such as IP address, browser type, and browsing behaviour may also be collected through the use of cookies to help improve user experience and the security of the site.

Lawful Basis for Processing Your Data

Under the UK GDPR, we must have a lawful reason for processing your personal data. The lawful bases under which Flowers Sydenham processes your information include:

Contractual Necessity: Processing your data is necessary to fulfil your order and provide our services to you.
Legal Obligation: We may process your data as required to comply with applicable laws (e.g., tax or accounting obligations).
Legitimate Interests: We may process your data for legitimate business reasons, such as responding to customer enquiries, improving our services, or preventing fraud. We always consider and balance any potential impact on you and your rights before processing for these interests.
Consent: In some cases, we collect and process your information with your explicit consent, such as for marketing communications. You may withdraw your consent at any time.

How We Use Your Data

We use your personal data strictly for the following purposes:

Processing and delivering your flower orders, including personalising bouquets and delivering to specified addresses.
Managing your account and responding to queries or complaints.
Fulfilling legal and regulatory requirements, such as record-keeping for tax purposes.
Improving our products and services based on your feedback and purchase history.
If you have opted in, sending you information or promotions about our products and offers.

Retention of Your Data

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal or accounting requirements. Typically, customer order records are retained for up to seven years to comply with tax and financial regulatory obligations. Data used solely for marketing purposes will be kept until you withdraw your consent or request deletion.

Third-Party Data Processors

To provide our services efficiently and securely, we may share your data with trusted third-party service providers (data processors) who help us deliver our products and services. These may include:

Payment processors: To securely process payments for your orders. Payment details are handled according to Payment Card Industry (PCI) standards and are not stored by us directly.
IT and website hosting providers: For website operation, order management, and data storage.
Delivery partners: To ensure your flower orders are delivered accurately and on time.

We ensure all third-party processors comply with GDPR obligations and process your data only as instructed by us for the specified purposes, with appropriate security measures in place.

Your Data Protection Rights

Under the GDPR, you have the following rights in relation to your personal data:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request the correction of inaccurate or incomplete personal data.
Right to Erasure: You may request, under certain circumstances, the deletion of your personal data.
Right to Restriction: You may ask us to suspend processing of your data.
Right to Portability: You may request the transfer of your data in a commonly used electronic format to yourself or another provider.
Right to Object: You can object to our processing of your personal data in certain situations, such as for direct marketing purposes.
Right to Withdraw Consent: Where we process your data on the basis of consent, you can withdraw this at any time.

To exercise any of these rights, please contact us using the details available on our website. We may need to verify your identity before processing your request and will respond within the timeframes required by law.

Security of Your Data

We are committed to ensuring that your information is secure. We have implemented appropriate technical and organisational measures designed to prevent unauthorised access, accidental loss, destruction, or damage to your personal data.

International Data Transfers

Where any data is transferred outside the UK or the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. Any changes will be made available on our website. We encourage you to check this policy periodically to stay informed of how we are protecting your data.

Contact Us

If you have any questions or concerns about this Privacy Policy, or how your data is handled, please refer to our website for further information on how to get in touch with the Flowers Sydenham team.