Flowers Blackwall Privacy Policy

Introduction

This Privacy Policy outlines how Flowers Blackwall (“we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you place an order with us. The policy applies to all customers who order floral products and related services in Blackwall and the surrounding districts. We are committed to complying with the UK General Data Protection Regulation (GDPR) and ensuring your information is handled securely and transparently.

What Data We Collect

When you order from Flowers Blackwall, we may collect and process the following categories of personal data:

• Contact Details: Such as your full name, address (delivery and billing), phone number, and any other details necessary to fulfill your order.
• Order Information: Details about your orders, including product choices, delivery instructions, and recipient information (if sending as a gift).
• Payment Information: Only limited information such as card type and transaction status; we do not store your full card numbers or security codes as payments are processed via secure third-party providers.
• Communication Records: Correspondence between you and Flowers Blackwall regarding enquiries, complaints, and feedback.
• Website Usage Data: When you use our website, we may collect technical information such as IP addresses, browser type, device details, and your interactions with the site through cookies and similar technologies.

Lawful Basis for Processing

Flowers Blackwall processes your personal data on the following lawful bases as defined by GDPR:

• Contractual Necessity: Processing is required to fulfill your order, deliver products, and provide customer support services.
• Legal Obligation: We may be required to retain transaction data to comply with accounting, taxation, or regulatory requirements.
• Legitimate Interests: Pursuing our legitimate business interests in providing and improving our services, ensuring security, and handling customer queries, always balanced against your rights.
• Consent: In limited cases, such as email marketing, we will only process your information with your explicit consent. You may withdraw this consent at any time.

How We Use Your Data

Your personal data is used only as required to serve you as a customer and to ensure we can deliver our products and services efficiently. Primary uses include:

• Processing and fulfilling your orders
• Delivering flowers and gifts to you or to recipients indicated by you
• Communicating about your order status, delivery, and customer support
• Improving our website and services based on usage data and feedback
• Fulfilling legal and regulatory requirements

Data Retention

Your personal data is retained only for as long as is necessary to fulfill the purposes outlined in this policy and to meet legal obligations:

• Order records and transactional data: Retained for up to seven years to meet accounting and legal requirements.
• Communication records: Retained for up to two years following the resolution of your enquiry or complaint.
• Website usage data: Retained for a maximum of 26 months, unless otherwise required for ongoing investigation of security incidents.

Once your data is no longer required, it will be securely deleted or anonymised unless continued retention is required by law.

Processors and Data Sharing

Your information may be shared with carefully selected third-party service providers (“processors”) who assist us in fulfilling your orders and operating our business. Examples include:

• Payment processors for handling card payments securely.
• Couriers or delivery partners to deliver your orders.
• IT support services and website hosting providers to maintain operational systems.

We ensure that all processors have committed to handling your data confidentially and in compliance with GDPR requirements. Personal data may also be shared with authorities where required by law, such as regulatory or law enforcement agencies. Your data will not be sold or otherwise passed to third parties for marketing purposes without your consent.

Your Rights as a Data Subject

Under GDPR, you have the following rights regarding the personal data we hold about you:

• Right of Access: You may request a copy of your personal data and information about how it is processed.
• Right to Rectification: You may ask us to correct inaccurate or incomplete data.
• Right to Erasure: In certain situations, you can request your data to be deleted (‘right to be forgotten’).
• Right to Restrict Processing: You may limit how we process your data in particular circumstances.
• Right to Data Portability: You can ask us to provide your data in a structured, commonly used format for transfer to another service provider.
• Right to Object: You may object to processing that is based on our legitimate interests.
• Right to Withdraw Consent: Where you have provided consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the appropriate means provided on our website. We will respond within one month, except in exceptional circumstances, in which case you will be informed of any delay.

Security of Your Data

Flowers Blackwall employs appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include secure servers, encrypted communications, access controls, and regular data protection training for staff.

Policy Scope and Updates

This Privacy Policy applies to all Flowers Blackwall customers placing orders from Blackwall and neighbouring districts. As data protection regulations and our business practices evolve, we may update this policy. Any changes will be posted clearly on our website, and we recommend you revisit this page to stay informed of our latest practices.

Contact and Complaints

Should you have questions regarding your personal data or wish to exercise your rights, please contact us through the channels outlined on our website. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your relevant data protection authority.

This policy was last updated in June 2024.