Flowers Bounds Green Privacy Policy
Privacy Policy Overview
This Privacy Policy describes how Flowers Bounds Green ("we", "us", "our") collects, uses, discloses, and protects your personal information when you place orders with us or engage with our services in Bounds Green and surrounding districts. We are committed to safeguarding your privacy, acting on our obligations under the UK General Data Protection Regulation (GDPR) and related data privacy laws.
Scope of the Policy
This policy applies to all customers ordering flowers or any other products and services offered by Flowers Bounds Green in Bounds Green and neighbouring districts. By ordering from us, you agree to the practices outlined in this policy.
What Data We Collect
When you interact with Flowers Bounds Green, we may collect the following types of personal information as necessary to provide our services:
- Contact Information: Your full name, address, delivery address, and other contact details such as billing address.
- Communication Details: Any phone number(s) you provide for order confirmation or delivery coordination, and correspondence with our team.
- Order Information: Details about your orders, including products bought, delivery preferences, and any personal messages.
- Payment Details: Transaction information necessary to process payments, such as partial card details or payment confirmation (we do not store full card details).
- Website Usage Data: Information about visits to our website, including IP address, device details, and browsing actions, gathered via cookies or similar technologies for analytics and website improvements.
Lawful Basis for Processing
Under the GDPR, we require a lawful basis to process your personal data. Our main lawful bases are:
- Contractual Necessity: To process and deliver your orders, respond to queries, provide customer support, and fulfill our contractual obligations.
- Legal Obligation: To comply with financial, tax, and other statutory requirements regarding our services and transactions.
- Legitimate Interests: To conduct business operations effectively, improve our services, prevent fraud, and communicate with you about your order (provided these interests do not override your rights and freedoms).
- Consent: In certain situations, such as sending marketing communications, we will seek your explicit consent, which you may withdraw at any time.
How We Use Your Data
We process your personal data for the following purposes:
- To accept, process, and fulfill your flower orders.
- To arrange delivery and communicate order updates.
- To respond to enquiries and provide customer service.
- To process and record payments.
- To maintain business records and meet legal accounting requirements.
- To address complaints and resolve disputes.
- To improve our services and website experience.
Who Has Access to Your Data (Processors and Sharing)
Your personal data is shared confidentially and only when necessary. We may engage trusted third-party service providers (also known as "processors") who help us operate our business, such as:
- Payment processing companies (to handle card or online transactions).
- Delivery partners or couriers (to ensure successful delivery of your orders).
- IT service providers and web hosts (to support our website and maintain data security).
- Accountants and legal advisers (to fulfil regulatory obligations).
All our processors are contractually bound to protect your personal data in accordance with applicable laws and may only process it for specified purposes on our behalf. We do not sell your data to third parties.
Data Retention Policy
We retain your personal information only as long as necessary for the purposes set out in this Policy, notably:
- The duration of our business relationship and order fulfilment.
- A period after your last order for record-keeping and accounting (typically six years, as required by law for tax and business records).
- For marketing communications, until you withdraw consent or request erasure.
After these periods, your data is securely deleted or anonymised so it can no longer be associated with you.
Security of Your Data
We implement appropriate security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. Measures include secure servers, restricted access, and staff training in data protection. While we do our best to ensure data security, no system is completely immune to risks. If a data breach occurs that affects your rights and freedoms, we will notify you and relevant authorities as required by law.
Your Rights Under GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right to Access: You may request confirmation of the data we hold about you and receive a copy of it.
- Right to Rectification: You can ask us to correct or update inaccurate or incomplete personal data.
- Right to Erasure: You can ask us to delete your personal data when there is no good reason for us to retain it.
- Right to Restriction of Processing: You may request us to restrict the use of your data in certain circumstances.
- Right to Data Portability: You have the right to receive your data in a commonly used, machine-readable format and transfer it to another service provider.
- Right to Object: You can object to certain uses of your data (such as direct marketing), at any time.
- Right to Withdraw Consent: Where you have given consent, you may withdraw it at any time without affecting prior processing.
- Right to Lodge a Complaint: You can raise a concern with the UK Information Commissioner's Office if you believe we have not processed your data lawfully.
We respond to all legitimate requests within one month and do not charge a fee unless requests are unfounded or excessive.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically to stay informed about how we protect your information.
Contacting Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details provided on our website or through our standard customer service channels.