Flowers Redbridge Customer Privacy Policy
Introduction and Scope
This Privacy Policy outlines how Flowers Redbridge (“we”, “us”, “our”) collects, uses, stores, and protects the personal data of customers (“you”, “your”) placing orders for flowers and related products in Redbridge and surrounding districts. As a responsible business, Flowers Redbridge is committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This policy applies to all customers making purchases from us, whether online, by telephone, or in person, when these purchases are for delivery to Redbridge and neighbouring districts. By using our services, you consent to the practices described in this Privacy Policy.
Personal Data We Collect
When you place an order or interact with Flowers Redbridge, we may collect the following types of personal data:
- Contact Information: Name, delivery address, billing address, contact telephone number.
- Order Details: Products purchased, special instructions, personalised messages, recipient details (name, address, phone).
- Payment Information: Transaction details (payments are processed via third-party systems; we do not store full card numbers).
- Account Information: If you create an account, email address and password (encrypted).
- Communication Records: Any correspondence, feedback, or queries you submit to us.
- Usage Data: Information about how you use our website, such as browser type, IP address, and time of visit. This is typically collected through cookies and similar technologies.
Lawful Basis for Data Processing
We only process your personal data when we have a lawful basis under the GDPR. These include:
- Contractual Necessity: To fulfill our contract with you, such as processing and delivering your order, confirming your purchase, or handling customer service requests.
- Legal Compliance: To meet our legal and regulatory obligations, for example, tax and financial accounting requirements.
- Legitimate Interests: For purposes relevant to our business and your interests, such as improving our services, internal record keeping, security, and preventing fraud. We always consider your rights and interests before relying on legitimate interests.
- Consent: Where applicable, we may seek your explicit consent for certain types of data processing, such as sending you marketing information.
How We Use Your Personal Data
Flowers Redbridge uses your data for the following purposes:
- Processing and fulfilling your orders.
- Communicating with you regarding your order status or inquiries.
- Improving our website, products, and customer service.
- Complying with legal and financial regulations.
- Where you have provided consent, informing you about special offers, news, or promotions.
Data Retention
We keep your personal data only for as long as necessary to fulfill the purposes outlined in this policy and to comply with applicable legal, accounting, or reporting obligations. Typically:
- Order and transaction information: Retained for up to 7 years for tax and auditing compliance.
- Customer accounts: Retained until you request deletion or deactivate your account.
- Marketing preferences: Retained until you opt out of communications.
- Website usage data: Retained for a period as defined by our cookie policy (usually up to 2 years).
When your data is no longer required, it will be securely deleted or anonymized.
Processors and Data Sharing
To provide our services effectively, we may share your data with third-party data processors strictly as necessary and in accordance with GDPR requirements. These processors include:
- Payment processing providers (for secure payment transactions).
- Delivery partners or couriers (to deliver your orders).
- IT service providers (hosting, website maintenance, and support).
- Professional advisors (accountants, legal consultants where required by law).
All third-party service providers are required to maintain appropriate security measures and are not permitted to use your personal data except for the purposes specified by Flowers Redbridge. We do not sell, rent, or trade your personal data with other companies or organizations for marketing purposes.
Your Data Protection Rights
Under the GDPR, you have various rights concerning your personal data that we hold:
- Right of Access: You may request a copy of your personal data we hold about you.
- Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
- Right to Erasure: You have the right to request deletion of your personal data when it is no longer needed or if you withdraw consent, subject to legal requirements.
- Right to Restrict Processing: You may ask us to restrict the processing of your data in certain circumstances.
- Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format for transfer to another provider.
- Right to Object: You may object to the processing of your data for direct marketing or other purposes based on legitimate interests.
If you wish to exercise any of these rights, please contact us through the appropriate channels on our website. We will respond to your request in accordance with GDPR requirements and applicable laws.
Security Measures
Flowers Redbridge employs robust administrative, technical, and physical security measures to safeguard your personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include secure website encryption, restricted access to data on a need-to-know basis, and regular staff training on data protection.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The "last updated" date will be revised accordingly. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
Contact and Further Information
If you have any questions or concerns regarding this Privacy Policy or your personal data held by Flowers Redbridge, please reach out via the contact details available on our website. You also have the right to lodge complaints about your data protection rights with your national supervisory authority.
