Privacy Policy for Flowers Lower Clapton

Introduction

This Privacy Policy explains how Flowers Lower Clapton collects, uses, stores, and protects personal information provided by our customers. This policy applies to all individuals placing orders with Flowers Lower Clapton, whether residing in Lower Clapton or in surrounding districts. We are committed to processing your data in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

When you place an order, make an enquiry, or otherwise interact with Flowers Lower Clapton, we collect and process the following types of data:

  • Identity Data: Name and, when relevant, company name.
  • Contact Data: Delivery address, billing address, and town or district of the recipient; invoice address where applicable.
  • Contact Channels: Home or business address as provided at checkout.
  • Order Data: Details of the products or services you have ordered or enquired about including delivery, recipient, and payment information (excluding full payment details where processed by external services).
  • Payment Data: We process payment information securely via trusted third-party payment processors. Flowers Lower Clapton does not store any credit or debit card numbers.
  • Communication Data: Records of email correspondence, customer service interactions, and notes related to your enquiry or purchase.
  • Technical Data: IP address, device identifiers, and cookie data associated with website visits (collected in accordance with our Cookies Policy).

Lawful Basis for Processing Your Data

We only collect and process your personal data where we have a lawful basis to do so. The principal lawful bases applicable to our activities are:

  • Contractual Necessity: When you place an order or request a service, we process your data to fulfill our agreement with you, such as processing payment and delivering flowers.
  • Legal Obligation: We may need to process and retain certain information to comply with relevant UK tax and business regulations.
  • Legitimate Interests: Flowers Lower Clapton may process your data to improve services, respond to queries or complaints, and prevent fraud, provided such interests do not infringe on your rights and freedoms.
  • Consent: Where required, we seek your explicit consent to use your data, for example if subscribing you to marketing communications.

How We Use Your Data

Your data is used solely for the purpose for which it was provided, and to:

  • Process and deliver your orders and maintain transaction records.
  • Offer customer support, handle returns, or respond to enquiries and complaints.
  • Maintain our internal accounts and records for administrative, tax, and legal purposes.
  • Send service notifications, such as order confirmation and delivery updates.
  • If you have provided consent, send marketing or promotional materials relating to Flowers Lower Clapton’s products and services.

How We Share and Process Your Data

Your personal data may be shared with third-party service providers solely for the purpose of completing your order or for mandatory legal compliance. These providers act as data processors on our behalf and include companies handling secure payment processing, delivery logistics, IT support, and website hosting. We select trusted partners who are bound by contractual obligations to safeguard your data and not use it for their own purposes.

Personal data is never sold or rented to third parties.

International Data Transfers

Where data processors operate outside the United Kingdom or the European Economic Area, Flowers Lower Clapton ensures that appropriate safeguards are in place, compliant with UK GDPR requirements, to protect your data during any international transfer.

Data Retention

We retain personal information for only as long as necessary to fulfill the purposes for which it was collected, including compliance with legal requirements and resolving potential disputes. As a general guideline:

  • Order and transaction records: Retained for up to 7 years in accordance with UK financial regulations.
  • Account or customer service correspondence: Retained for up to 24 months following the completion of service, unless requested otherwise.
  • Marketing consent data: Retained until you withdraw your consent or unsubscribe.

On expiry of the relevant retention period, your data will be securely deleted or anonymised.

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request confirmation of whether we hold your data and obtain a copy of your personal information.
  • Right to Rectification: You can ask for inaccurate or incomplete data to be corrected.
  • Right to Erasure: You may request deletion of your personal data where there are no overriding legitimate grounds for continued processing.
  • Right to Restriction of Processing: You can request a temporary or permanent restriction on processing of your data in certain circumstances.
  • Right to Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services, where applicable.
  • Right to Object: You may object to processing carried out in our legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Where data processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact details provided on our website or in your order confirmation documents. We may request verification of your identity before fulfilling certain requests and will respond within the timeframe required by law.

Data Security

We take the protection of your data seriously and implement appropriate technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Measures include secure hosting of data, encryption where suitable, regular staff training, and periodic review of our policies and practices.

Changes to This Policy

Flowers Lower Clapton may update this privacy policy from time to time. Any changes will be effective once posted on our website or communicated to you directly if appropriate. We advise checking this policy regularly to stay informed of how we protect your data.

Scope of This Policy

This privacy policy applies to all customers placing orders with Flowers Lower Clapton, whether the order is delivered to Lower Clapton or adjacent districts. By placing an order with us, you acknowledge and agree to the terms outlined in this policy.

This policy is in full compliance with the requirements of the UK GDPR as of the date of publication.