Privacy Policy for Flowers Thamesmead Customers

Introduction

Flowers Thamesmead is committed to safeguarding and respecting the privacy of our customers. This Privacy Policy explains how we collect, use, store, and protect your personal data when you place an order with us. It also outlines your rights regarding your information and our data handling practices in line with the General Data Protection Regulation ('GDPR'). This policy applies to all customers ordering flower arrangements and related products from Flowers Thamesmead within Thamesmead and surrounding districts.

What Personal Data We Collect

When you interact with Flowers Thamesmead, we may collect and process the following categories of personal data:

• Identity Data: Your name, title, and (where applicable) recipient’s details for deliveries.
• Contact Data: Delivery address, billing address, and contact details such as telephone numbers (where provided).
• Transaction Data: Details of orders placed, payments made, and delivery details.
• Technical Data: Your IP address, browser type, device information, and cookies (when interacting with our website).
• Correspondence Data: Any communications you send to us, such as messages, reviews, or feedback regarding our products or services.

Lawful Basis for Processing

Flowers Thamesmead only processes your personal data when the law allows us to do so. Our primary lawful bases under GDPR include:

• Contractual Necessity: Processing your data is necessary to perform the contract of sale or service, including order processing, payment collection, and delivery.
• Legitimate Interests: We may process your data for legitimate business interests such as record-keeping, customer service, or improving our products and services, provided these interests are not overridden by your rights and interests.
• Legal Obligation: Where necessary, we may process your information to comply with legal requirements, such as taxation or accounting obligations.
• Consent: In certain situations, such as direct marketing (where required by law), we will obtain your explicit consent before processing your data for that purpose.

How We Use Your Information

Your data is processed for the following purposes:

• Processing and delivering your flower orders, including handling payments and arranging deliveries.
• Contacting you regarding your order, including order confirmations, delivery updates, or to resolve queries.
• Improving our internal processes and services based on customer feedback and usage patterns.
• Complying with legal, regulatory, and contractual obligations.
• Sending occasional customer service information or, if you have opted in, marketing communications about our products and special offers.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, order and transaction data are retained for up to seven years, in line with legal obligations around record-keeping. Any data processed for marketing purposes will be retained until you withdraw your consent or unsubscribe.

Data Processors and Sharing of Information

We may engage trusted third-party service providers ('processors') to assist with activities such as payment processing, delivery logistics, website hosting, and IT support. These processors are bound by contracts to protect your data and process it only in accordance with our instructions and GDPR requirements. We do not sell or rent your personal data to third parties. Aside from approved processors and where legally obliged (such as with authorities or regulators), your data will not be shared with others.

Your Rights Under GDPR

You have several rights relating to your personal information under the GDPR. These include:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your data where there is no legal reason for us to retain it.
• Right to Restrict Processing: You can ask us to suspend the processing of your personal data under certain circumstances.
• Right to Data Portability: Where applicable, you can request that we transfer your data to you or another service provider.
• Right to Object: You have the right to object to our processing of your data for direct marketing based on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent for certain processing, you may withdraw it at any time.

To exercise these rights, you may contact us using the details provided on our website, and we will respond in accordance with GDPR timeframes.

Data Security

We are committed to keeping your data secure. We have implemented appropriate technical and organisational measures to prevent unauthorised access, accidental loss, misuse, or disclosure of your personal data. Our processors and staff are trained to handle your information responsibly and confidentially.

International Data Transfers

Your personal information is generally processed in the UK and the European Economic Area (EEA). If data needs to be transferred outside these regions using our processors, we will ensure adequate protection is in place according to applicable data protection laws.

Children's Privacy

Flowers Thamesmead does not knowingly collect or process personal information from children under the age of 16 without appropriate parental consent. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices, legal requirements, or for other operational reasons. The updated version will always be published on our website, with the revision date.

Contact and Complaints

If you have any questions about this Privacy Policy, your data, or if you wish to make a complaint, please use the contact methods available on the Flowers Thamesmead website. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).