Flowers Mottingham Data Use & Customer Privacy Guide

Flowers Mottingham Privacy Policy

Introduction

This Privacy Policy explains how Flowers Mottingham collects, uses, retains, and protects personal data when you place flower orders in Mottingham and the surrounding districts. Our commitment is to safeguard your privacy according to the requirements of the General Data Protection Regulation (GDPR).

Scope of This Policy

This policy applies to all customers placing orders with Flowers Mottingham, whether online, by phone, or in person, for delivery in Mottingham and neighboring areas. By placing an order, you agree to the practices described herein.

Personal Data We Collect

When you use our services, we may collect and process the following types of personal information:

Identity Data: Name, and, if provided, preferred title or nickname.
Contact Data: Delivery address, billing address, and (if provided) phone numbers.
Order Information: Details about orders you place, including recipients' names and delivery addresses, and any special message.
Payment Data: Payment method, transaction details, and related invoicing information. Note: We do not store your payment card details; these are processed securely through our payment service providers.
Technical Data: IP address, device type, operating system, browser type and version, and referring website (when ordering online).
Marketing Preferences: Your preferences in receiving marketing communications from us, where applicable.

Lawful Basis for Processing Your Data

Under the GDPR, we are required to have a lawful basis for each processing activity. Flowers Mottingham processes your personal data under the following bases:

Contractual Necessity: To fulfil your order (processing, delivery, and customer support).
Legal Obligations: For compliance with laws relating to sales, tax, and accounting.
Legitimate Interests: To improve our products, services, and customer experience; to secure our systems; and to prevent fraud.
Consent: For sending you marketing communications, where you have opted in. You can withdraw this consent at any time.

How We Use Your Data

Your data may be used in connection with the following purposes:

To process and deliver your flower orders, including confirming order details, arranging delivery, and handling payment.
To communicate order updates or resolve customer queries.
To comply with lawful record-keeping and accounting practices.
To enhance and personalize your customer experience with us.
To manage marketing activities, subject to your preferences.
To ensure the security and integrity of our business and digital platforms.

Retention of Your Data

Flowers Mottingham retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by legal, tax, or regulatory requirements. Typically, we retain order-related data for six years after the end of the accounting period in line with accounting and tax requirements. Data used purely for marketing purposes is retained until you withdraw consent or unsubscribe, after which it is deleted or anonymized.

Sharing Your Data: Processors and Third Parties

Flowers Mottingham uses reputable third-party service providers ("processors") to assist in delivering our services. The categories of processors we use include:

Payment Processors: To securely process your payments. Your payment information is processed directly by these partners and is not stored by us.
Delivery Partners: To facilitate efficient delivery of orders to you or your recipients.
IT Service Providers: To host and maintain our website, manage email communication systems, and provide necessary IT infrastructure.

All service providers we engage must comply with GDPR requirements, process your data only as instructed by us, and are monitored for data security standards. Data is not sold or shared for unrelated third-party marketing.

User Rights Under GDPR

If you are a data subject in the United Kingdom or the European Economic Area, you have the following rights regarding your personal data:

Right of Access: You may request access to your personal data and receive information about its use.
Right to Rectification: You may update or correct inaccurate or incomplete data held about you.
Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances, subject to legal retention requirements.
Right to Restrict Processing: You may request restriction of processing in specific cases.
Right to Data Portability: You may request to receive your personal data in a commonly used, machine-readable format.
Right to Object: You may object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where consent has been given, you can withdraw it at any time.
Right to Lodge a Complaint: You have the right to contact a data protection supervisory authority if you believe your data has not been handled in accordance with the law.

Security of Your Data

We take reasonable steps to ensure your information is kept secure, including the use of encrypted communications (SSL), restricted access to personal data, and comprehensive staff training on data protection. While no transmission over the Internet is guaranteed to be completely secure, we strive to protect your data using industry best practices.

International Data Transfers

Your personal data is stored and processed within the UK or the European Economic Area (EEA) wherever possible. If we must transfer data outside these areas, we ensure an adequate level of protection in accordance with GDPR requirements, such as the use of standard contractual clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law or how we operate. The date of the most recent update will always be displayed at the start of the policy. Please review this page periodically for the latest information on our privacy practices.

Contacting Flowers Mottingham

If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights regarding your personal data, please contact us using the details provided on our website or in your order confirmation. We are committed to resolving queries and concerns in an effective and timely manner.