Flowers Abbey Wood Privacy Policy

Introduction

Your privacy and the protection of your personal data are of utmost importance to us at Flowers Abbey Wood. This Privacy Policy outlines how we collect, use, and safeguard your information when you place orders with us from Abbey Wood and surrounding districts. Our practices fully comply with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. By engaging with our services, you acknowledge that you have read and understood this policy.

Scope of Policy

This Privacy Policy applies to all customers who place orders for flowers and related products or services with Flowers Abbey Wood, whether placing orders by phone, in person, or through our website, for delivery within Abbey Wood and nearby districts. The policy details our approach to managing and protecting customer data throughout your interaction with us.

What Personal Data We Collect

When you place an order or interact with Flowers Abbey Wood, we may collect the following types of personal data:

• Contact Information: Name, delivery address, email address, and telephone number.
• Order Details: Flower arrangement selection, delivery instructions, gift messages, and purchase history.
• Payment Details: Partial payment card information (such as the last four digits), but never full card numbers or CVV codes. Payment processing is handled by secure third-party processors.
• Communication Records: Any correspondence you have with us, including feedback, queries, or complaints.
• Technical Data: Limited information about your device or browser used when ordering online (such as IP address), to ensure site security and functionality.

Lawful Basis for Processing Personal Data

Flowers Abbey Wood processes your personal data under the following lawful bases, as defined by the GDPR:

• Contractual Necessity: To process your orders, deliver products, and provide customer service.
• Legitimate Interests: To maintain business operations, improve our services, and communicate with you regarding your orders or similar services, where such interests are not overridden by your data protection rights.
• Legal Obligations: To comply with legal and regulatory requirements, such as maintaining transaction records for tax or auditing purposes.
• Consent: We obtain your explicit consent for direct marketing or promotional communications, and you may withdraw this consent at any time.

How Your Data Is Used

We only use your collected data for the following purposes:

• Processing and fulfilling your flower orders and deliveries.
• Communicating with you regarding your order status, updates, or issues.
• Responding to your queries or feedback.
• Improving our products and customer experience through analysis of purchase trends, feedback, and service performance.
• Complying with relevant laws and regulations.
• If you opt-in, sending marketing communications about our services, updates, or promotions (with the option to unsubscribe at any time).

Who Processes and Has Access to Your Data

Access to your personal information is strictly limited. Your personal data may be processed by:

• Internal Staff: Employees or authorised staff members who need access to complete your orders, provide customer support, or manage transactions.
• Third-Party Processors: Trusted service providers who assist with payment processing, IT hosting, order delivery, or technical support. These parties are contractually obligated to meet GDPR requirements, use your information solely for the agreed purpose, and keep your data secure.
• Legal or Regulatory Authorities: Where required for compliance or lawful enforcement.

We do not sell, rent, or trade your personal data to third parties for commercial purposes.

Data Retention

Your personal data is retained only for as long as necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law. Generally, we retain:

• Order and contact records for up to six years, in line with tax and contractual obligations.
• Marketing consent records until you withdraw consent or unsubscribe.
• Customer feedback and communication records are retained for up to three years to improve our services.

After the specified retention periods, your data will be securely deleted or anonymised.

Data Security

Flowers Abbey Wood is committed to keeping your information safe. We implement appropriate technical and organisational measures to avoid accidental loss, unauthorised access or disclosure, alteration, and destruction of your data. These measures include restricted staff access, encrypted data transmission, and secure storage solutions. Where we engage third-party processors, robust data protection agreements are in place.

Your Rights Under GDPR

As a data subject under the GDPR, you are entitled to the following rights regarding your personal data:

• Access: Obtain a copy of your personal data we hold.
• Rectification: Request correction of any incomplete or inaccurate information.
• Erasure: Request deletion of your personal data when there is no longer a legal basis for processing.
• Restriction: Request restriction of processing under certain circumstances.
• Portability: Receive your data in a structured, commonly used, and machine-readable format, and have it transmitted to another data controller where feasible.
• Objection: Object to the processing of your data for certain purposes, such as direct marketing.
• Withdrawal of Consent: Where we rely on consent, you can withdraw it at any time.
• Lodge a Complaint: Raise concerns with the UK Information Commissioner or your local supervisory authority if you believe your data has not been managed in accordance with applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our services. When we do, updates will take immediate effect upon publication. We recommend reviewing this policy regularly to stay informed about how your data is protected.

Contact and Further Information

If you have questions about how your data is processed, your rights, or require further information about this Privacy Policy, please contact us using the details provided on our website or in our store. We are committed to responding promptly to your concerns and ensuring your data rights are respected.