Privacy Policy for Flowers Brondesbury Customers

Introduction

This Privacy Policy sets out how Flowers Brondesbury collects, processes, retains, and protects your personal data when you place an order with us. It applies to all customers in Brondesbury and surrounding districts who use our services. We are committed to safeguarding your privacy and handling your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

The types of personal data we collect depend on your interaction with Flowers Brondesbury, primarily for the purpose of processing and delivering your order. The personal data we collect includes:

• Identification Data: Name, address (billing and delivery), and other order-related details
• Contact Details: Phone number, and in some cases, email address if provided when placing an order
• Order Information: Details about the products you order, delivery preferences, and any card or message you include with a bouquet
• Payment Information: Payment confirmation (handled securely by payment processors; Flowers Brondesbury does not directly store or process your full card details)
• Communication Records: Records of any communications you have with us (for example, questions you ask about your order or complaints)

Lawful Basis for Processing Your Data

We only process your personal data when there is a lawful basis to do so. According to GDPR Article 6(1), our processing relies on one or more of the following lawful bases:

• Performance of a Contract: To process and deliver your flower order and fulfil the contract between you and Flowers Brondesbury.
• Legal Obligation: To comply with any applicable laws and regulations regarding business record keeping (e.g., tax and accounting requirements).
• Legitimate Interests: To improve our services, respond to queries or complaints, and maintain records of transactions for business operations, security, and fraud prevention.
• Consent: If we ever wish to send you marketing communications or require your consent for any specific data processing activity, we will obtain your explicit consent beforehand. You have the right to withdraw this consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• To process, confirm, and deliver your order to the specified address
• To communicate with you about your order or any issues relating to it
• To manage payments and refunds
• For internal record keeping, legal, and business purposes
• To respond to your queries or complaints
• To enhance the security of our systems and protect against fraud

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to satisfy any legal, accounting, or reporting requirements. Typically, your order-related data will be retained for up to seven years in accordance with UK tax and business regulations. Communication records may be kept for a shorter period unless they are relevant to current or anticipated disputes. After these retention periods, your personal data will be securely deleted or anonymised.

Processors and Third Parties

We do not sell or rent your personal data to third parties. However, we use certain trusted third-party service providers (data processors) to facilitate our business, including:

• Payment Processors: To securely process payments. These providers operate under contract and comply with applicable data protection laws.
• Delivery and Courier Services: To deliver your flowers to the intended recipient.
• IT and System Providers: For secure data storage, website hosting, and order management.

All processors are required to handle your data according to our instructions and in line with the GDPR. They may only use your data for the specific purpose of delivering Flowers Brondesbury’s services and cannot use it for their own benefit.

When required by law, we may also disclose information to public authorities (such as law enforcement agencies or tax authorities).

Your Rights Under GDPR

The GDPR provides you with various rights regarding your personal data. As a Flowers Brondesbury customer, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of incomplete or inaccurate data.
• Erasure: Request deletion of your data, subject to certain legal limitations.
• Restriction: Request restriction of processing of your personal data in certain circumstances.
• Data Portability: Request transmission of your data to you or another organisation, where feasible.
• Object: Object to processing based on legitimate interest or direct marketing (if applicable).
• Withdraw Consent: Where we process your data based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us through your preferred method, such as by mail or in person at our shop. Your request will be processed without undue delay and in accordance with our legal obligations.

How We Protect Your Data

We take the security of your personal data seriously. Flowers Brondesbury uses appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure. Access to your data is strictly limited to staff and service providers who need it to carry out their work. Regular reviews ensure ongoing effectiveness of our security practices.

Changes to this Policy

Flowers Brondesbury reserves the right to update this Privacy Policy as needed to reflect changes in legal requirements, our processing activities, or improvements in our services. The most current version of the policy will always be available at our shop and by request. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact and Complaints

If you have any questions, concerns, or complaints about our use of your personal data, or if you wish to exercise any of your rights, please contact us directly at our shop. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local data protection authority.

Thank you for trusting Flowers Brondesbury. We are dedicated to respecting and protecting your privacy at every step.