Flowers Edgware Privacy Policy for Customers

Introduction

At Flowers Edgware, we are dedicated to ensuring the privacy and security of our customers within Edgware and the surrounding districts. This Privacy Policy outlines how we collect, handle, store, and share your personal information when you place orders with us. As part of our ongoing commitment to data protection and customer transparency, we comply with the UK General Data Protection Regulation (GDPR) and related data privacy laws. Please read this policy carefully to understand your rights and our responsibilities regarding your personal data.

Scope of this Privacy Policy

This Privacy Policy applies to all personal data processed by Flowers Edgware relating to customers who place orders from Edgware and nearby districts. The policy covers all interactions, including those made through our website, phone orders, or in person at our physical locations.

Data We Collect

We collect only the essential data needed to process your orders efficiently and enhance your experience. Personal data we may collect includes:

• Contact Details: Your name, delivery address, and (if provided) your physical location.
• Communication Data: Details you provide via phone or other communication channels regarding orders, requests, or feedback.
• Order Information: Details about the products you purchase, gift messages, special preferences, and delivery instructions.
• Payment Information: Payment-related details, such as partial card numbers or transaction confirmations (note that full payment card data is handled by third-party payment processors and not stored directly by us).
• Technical Data: Device type, IP address, browser information, and cookies when using our website, collected to ensure security and functionality.

Lawful Basis for Processing Your Data

Our processing of your personal data is always grounded in a lawful basis as required by the GDPR. These include:

• Performance of a Contract: We need to process your information to fulfill your flower orders, such as delivering to the provided address or contacting you about your request.
• Legal Obligations: Certain data may be required for compliance with financial, tax, and other legal regulations relating to business transactions.
• Legitimate Interests: To safeguard the security of our systems or to improve and optimize our services to you (such as handling customer service queries), we may process data when it does not override your rights and freedoms.
• Consent: In limited cases, such as for electronic marketing or optional features, we will seek your explicit consent for data use, which you may withdraw at any time.

How We Use Your Data

Your personal data is used solely for the following purposes:

• Processing and delivering your orders.
• Handling payment transactions through secure third-party processors.
• Improving our products and services based on your feedback and shopping history.
• Customer support and communication regarding your orders.
• Legal record keeping and compliance with applicable laws.
• Maintaining the security and integrity of our website and systems.
• Marketing communications, only when consent has been given.

Data Retention

We store your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal and regulatory obligations. In general, order and transaction data will be retained as required by law, typically up to six years for tax and accounting purposes. After the retention period ends, personal data will be securely deleted or anonymized so that it can no longer be associated with you.

Data Sharing and Processors

Flowers Edgware respects your privacy and does not sell your personal information. However, we may share your data with trusted third parties strictly for delivering our services, such as:

• Payment Processors: Securely handle and process payment transactions for orders.
• Delivery Partners: To deliver flowers and gifts to your specified address.
• IT Service Providers: Manage and host our systems, website, and data storage securely.
• Professional Advisors: Such as accountants or legal consultants, when required for compliance and business operations.

All processors are required to comply with GDPR obligations. They are only provided with data necessary to perform their specific services and cannot use your information for any other purposes.

International Transfers

As a rule, we aim to store and process your data within the United Kingdom or the European Economic Area. If it is ever necessary to transfer your data outside this area, we will ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Security Measures

We implement organizational and technical measures to protect your data from unauthorized access, misuse, disclosure, alteration, or loss. These include secure servers, access controls, encryption technologies for payment processing, and staff training on data handling best practices.

Your Rights Under GDPR

As a customer, you have various rights regarding your personal data under the GDPR, including:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where legally possible.
• Restriction: Request restricting processing of your information in certain circumstances.
• Portability: Obtain and reuse your data across different services.
• Objection: Object to certain types of processing, including direct marketing.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please reach out to us using the contact details on our website or through our usual communication channels. We may require identification to process requests for security reasons.

Changes to This Privacy Policy

We may periodically update this Privacy Policy as our services evolve or in response to legal changes. The most up-to-date version will always be accessible to customers before placing any orders. Significant changes will be communicated via our standard channels.

Contact and Complaints

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us via the details provided on our website or at our premises. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

This Privacy Policy was last updated on 10 June 2024.