Flowers Gidea Park Privacy Policy

Introduction

This Privacy Policy explains how Flowers Gidea Park collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Gidea Park within Gidea Park and the surrounding districts. We are committed to safeguarding your information and ensuring your personal data is handled transparently, lawfully, and securely.

Personal Data We Collect

We collect personal data necessary to process orders, provide customer service, and fulfil our contractual and legal obligations. The types of data we collect may include:

• Name: To identify you and address orders correctly.
• Delivery Address: To deliver orders accurately.
• Billing Address: Where applicable, for invoicing or payment validation.
• Contact Information: Such as telephone numbers to reach you about your order and to provide customer support.
• Email Address: To send order confirmations, delivery updates, and for customer service communication.
• Order Details: Information about your purchases, special instructions, recipient details if you place orders for others, and delivery notes.
• Payment Information: Such as card details or payment confirmations as required to process transactions (these may be managed securely via our selected payment processors and are not stored on our own systems).
• Technical Data: Information collected as a result of your interaction with our website or ordering system, such as IP address, browser type, and device identifiers.

Lawful Basis for Data Processing

We process your personal data based on a combination of the following lawful bases as provided by GDPR:

• Contractual Necessity: Data is required to fulfil your order (e.g., delivery address, contact details).
• Legal Obligation: Compliance with applicable laws (e.g., accounting, tax regulations).
• Legitimate Interest: For certain communications and quality improvements, such as customer feedback and service enhancements, balancing your rights and freedoms.
• Consent: For marketing communications or when sharing data with third parties for purposes not directly related to order fulfilment, only if you have given explicit consent.

How We Use Your Data

Your data is used for the following purposes:

• Processing and delivering your orders.
• Confirming and updating you about the status of your order.
• Communicating with you regarding customer service requests or queries.
• Record keeping, accounting, and administration.
• Improving our products and customer experience.
• Fulfilling our legal and regulatory obligations.

Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Generally, personal data associated with orders is retained for up to seven years in line with statutory requirements for accounting and audit purposes. Where your data is no longer required, it will be securely erased or anonymised.

Data Processors and Third Parties

Flowers Gidea Park may employ trusted third-party suppliers or service providers, known as 'Data Processors,' to support business operations. These may include:

• Payment Service Providers: For secure processing of transactions.
• IT and Cloud Storage Providers: To securely host our systems and backup data.
• Delivery Contractors or Couriers: Where delivery is outsourced to third parties.

All processors and third parties are required to adhere to applicable data protection laws, act only on our instructions, and implement appropriate security measures. They are not permitted to use your personal data for their own purposes.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

• Right to Access: You have the right to request copies of your personal data we hold.
• Right to Rectification: You can request the correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): You may request deletion of your data where it is no longer necessary or if you withdraw your consent.
• Right to Restrict Processing: In certain circumstances, you may request that we limit processing of your data.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to specific processing activities, such as direct marketing.
• Right to Withdraw Consent: Where consent is the lawful basis, you can withdraw this at any time.

To exercise any of these rights, please contact us using the contact information provided on our website or in your order confirmation. We will respond within the required statutory period and assist you, subject to identification and verification.

How We Protect Your Data

We take appropriate technical and organisational measures to secure your personal data and protect it from unauthorised access, loss, destruction, or disclosure. This includes restricted access to records, secure IT infrastructure, encryption where applicable, and regular staff training on data protection matters.

Policy Scope and Updates

This Privacy Policy applies to all orders placed with Flowers Gidea Park by customers located in Gidea Park and surrounding districts. We reserve the right to update this Policy to reflect changes in legal obligations or our data practices. Where substantive changes occur, we will communicate these through our usual channels (such as on our website) and indicate the most recent revision date.

Contact and Further Information

If you have any questions about this Privacy Policy or your personal data, please refer to the contact options provided on our website or in your order communications. You may also refer matters to the data protection authority if you are dissatisfied with how your data is managed.

Thank you for trusting Flowers Gidea Park with your data. We are dedicated to responsible and transparent data handling practices for all our customers in Gidea Park and the surrounding areas.