Privacy Policy for Customers Ordering from Flowers Brompton

Introduction

This Privacy Policy explains how Flowers Brompton collects, processes, stores, and protects personal data of individuals who place orders with us from Brompton and surrounding districts. We are committed to safeguarding your privacy and ensuring your rights under the General Data Protection Regulation (GDPR) are respected. This policy applies to all customers ordering Flowers Brompton products and services in our delivery areas.

What Data We Collect

Flowers Brompton collects and processes different categories of personal data to provide our services effectively. The types of data we may collect include:

  • Contact Information: Full name, delivery address, billing address, and telephone number.
  • Order Details: Product selections, delivery preferences, and special instructions.
  • Payment Information: Payment card details (collected and processed securely via approved payment processors), transaction amounts, and order receipts.
  • Communication Data: Any information you voluntarily provide in correspondence with us (for instance, when you make enquiries or provide delivery notes).
  • Technical Data: IP address, browser type, and information about your device and visits to our website, collected via cookies (where applicable and consented to).

Lawful Basis for Processing

We process your personal data based on the following lawful grounds as permitted under GDPR:

  • Performance of a Contract: Most data is collected and processed because it is necessary to fulfil your order and meet our contractual obligations to you.
  • Legal Obligations: We may process data to comply with applicable taxation, record-keeping, and accounting laws.
  • Legitimate Interests: Certain processing, such as quality control, service improvement, fraud prevention, and customer service, is performed when it does not override your rights and interests.
  • Consent: Where required (for example, for direct marketing or use of certain cookies), we seek your explicit consent.

How We Use Your Data

Your data is used strictly for the purpose of delivering our goods and services, managing your account, responding to your queries, processing payments and refunds, and fulfilling your delivery requests. Additionally, we may process your data to improve our services or, when you have given your consent, to send you marketing information about our products and offers.

Retention Periods

Flowers Brompton keeps your personal data for no longer than is necessary for the purposes outlined in this policy or as required by law. The retention periods are determined by the following principles:

  • Order and Transaction Data: Retained for up to seven years to comply with legal and financial obligations.
  • Communication History: Retained for up to three years for customer service and potential dispute resolution.
  • Marketing Data: Retained until you withdraw consent or unsubscribe.
  • Cookie Data: Retention periods vary depending on your browser settings and any preferences you update; please refer to your browser’s settings for more detail.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised.

Data Processors and Third Parties

To fulfil our services and process orders, we share necessary information with trusted third-party service providers (data processors). These may include:

  • Payment Processors: Established payment providers who process your transactions securely.
  • Delivery Partners: Couriers or delivery services who require your address and contact information to deliver your order.
  • IT and Web Service Providers: Companies who host our website, facilitate customer service, or provide technical support.

All data processors have been vetted to ensure they comply with GDPR and handle your information securely and confidentially. We only disclose data necessary for each processor to perform their services. Flowers Brompton does not sell or share your personal data with third parties for their independent marketing purposes.

Your Rights Under GDPR

As a customer in Brompton or surrounding districts, you have the following rights concerning your personal data:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: If any information we hold is incorrect or incomplete, you have the right to request its correction.
  • Right to Erasure: You may ask us to delete your data. Certain legal or contractual requirements may prevent immediate deletion.
  • Right to Restrict Processing: You have the right to restrict how your data is used in certain circumstances.
  • Right to Object: You can object to the processing of your data for direct marketing, or where the processing is based on our legitimate interest.
  • Right to Data Portability: You may request your data in a machine-readable format for transfer to another provider.
  • Right to Withdraw Consent: Where we rely on your consent (such as for marketing), you can withdraw it at any time.

Data Security

Flowers Brompton takes the protection of your data seriously and implements appropriate organisational and technical measures to prevent unauthorised access, loss, or misuse. This includes the use of encryption technologies, secure payment gateways, password protection, and regular reviews of our data handling practices. Only authorised personnel and contracted partners who need access to your data to fulfil their roles are permitted to do so.

International Data Transfers

Your personal data is generally stored and processed within the United Kingdom or European Economic Area (EEA). If, on rare occasions, data is transferred outside the EEA, we ensure this is done in compliance with GDPR requirements, with appropriate safeguards in place to protect your rights and freedoms.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal obligations. When significant changes are made, we will notify you via our website or other appropriate means.

Contacting Us About Your Privacy

If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, please reach out to Flowers Brompton using the contact details provided on our website. We are committed to responding to all enquiries regarding your privacy and data rights in a timely and transparent manner.