Flowers Deptford Privacy Policy

Introduction

This Privacy Policy explains how Flowers Deptford collects, uses, shares, and protects your personal information when you place orders with us in Deptford and surrounding districts. We recognise your right to privacy and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (GDPR).

Who Does This Policy Apply To?

This policy applies to all customers who place orders with Flowers Deptford, whether online, in person, or over the phone, and who are located in Deptford or the neighboring districts. By using our services, you acknowledge your understanding of this Policy and agree to the collection and use of your personal data as described.

What Data We Collect

When you interact with Flowers Deptford, we may collect various types of data to fulfil your orders and provide a quality service. The categories of data we process include:

• Identity Data: Name, title.
• Contact Data: Delivery address, billing address, postcode, recipient's name and address (if different from purchaser), and contact numbers.
• Order Data: Details of floral products ordered, order notes, delivery instructions, and gift card messages.
• Payment Data: Transaction information. Please note, full card details are processed by our payment processor and are not stored by Flowers Deptford.
• Communication Data: Correspondence with our team, including any feedback or inquiries.
• Technical Data: IP address, browser type, operating system, and information about how you interact with our website (this is typically collected through cookies and analytics tools).

Lawful Basis for Processing Your Data

Under the GDPR, we are required to process your personal data only for specific reasons ("lawful bases"). Flowers Deptford collects and processes your data on the following grounds:

• Performance of a contract: To process and fulfil your flower order, and deliver the products as requested.
• Legal obligations: To comply with relevant laws, for example, maintaining transaction records for tax or accounting purposes.
• Legitimate interests: To improve our services, prevent fraud, handle inquiries, and carry out business analytics, provided these interests do not override your rights and freedoms.
• Consent: Where you have provided explicit permission, for example, to receive marketing communications. You may withdraw consent at any time.

How We Use Your Personal Data

Your personal data will only be used for the purposes stated in this policy. This includes:

• Processing and completing your flower orders and purchases.
• Facilitating payment transactions via trusted payment processors.
• Providing delivery updates and handling any customer service queries.
• Complying with legal, regulatory, or tax requirements.
• Improving our website, services, and customer experience.
• Sending you promotional offers or news about Flowers Deptford, if you have opted in.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we keep:

• Order and identity data for up to 7 years, in compliance with tax and business regulations.
• Communication data for up to 3 years from the last interaction, unless required for longer by legal obligations.
• Marketing data until you withdraw your consent or request deletion.

Following the retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

Data Sharing and Processors

We only share your data with trusted third parties who help us deliver our services, and who act as our data processors. These processors may include:

• Payment processing companies handling secure payments for your orders.
• IT and system administration providers supporting our website and data storage.
• Delivery and courier partners responsible for fulfilling your orders.
• Professional advisors (such as accountants) as required by law.

All our data processors comply with legal and contractual obligations to protect your personal data, and we do not allow them to use your data for their own purposes. Flowers Deptford does not sell your personal data to any third party.

International Transfers

Your personal data is primarily stored within the UK and European Economic Area (EEA). If we need to transfer data outside of these regions, we ensure appropriate safeguards are in place to protect your rights, such as using standard contractual clauses or ensuring that a country is deemed to provide adequate protection by applicable laws.

Your Rights Under the GDPR

As a data subject, you have specific rights regarding your personal data held by Flowers Deptford:

• Right to access: Request access to your personal data and obtain a copy of the information we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no valid reason for us to continue processing it (right to be forgotten).
• Right to restriction: Ask us to limit the processing of your data in certain circumstances.
• Right to data portability: Request transfer of your data to you or to another provider in a structured, commonly used, machine-readable format.
• Right to object: Object to the processing of your data in certain cases, such as direct marketing.
• Right to withdraw consent: If we process your data based on consent, you may withdraw it at any time.
• Right to lodge a complaint: Contact the relevant supervisory authority if you believe your rights have been violated.

Security Measures

We employ robust technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction. We regularly review and update these measures in accordance with technological developments and best practices.

Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in law, technology, or our data processing practices. Any updates will be posted on our website with the date of revision. We encourage you to review this page regularly for the latest information.

Contact and Further Information

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact Flowers Deptford using the details provided on our website or within our communications. We are committed to addressing your concerns and protecting your information.