Flower Delivery Blackfriars Customer Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Blackfriars ('we', 'our', or 'us') collects, uses, and protects personal information relating to individuals placing flower delivery orders in Blackfriars and its surrounding districts. We are committed to upholding your privacy rights in accordance with the UK General Data Protection Regulation (GDPR) and ensuring transparent processing of your data.

Scope and Application

This policy applies to all customers who order floral products and associated services from Flower Delivery Blackfriars, whether the order is placed online, in person, or via telephone, and specifically covers processing activities relating to orders for delivery within Blackfriars and adjacent areas.

Personal Data We Collect

In order to process your flower delivery orders and provide our services, we may collect the following categories of personal data:

• Contact Information: Your name, delivery address, billing address, email address, and contact telephone number.
• Order and Transaction Details: Information relating to the products or services you purchase, including recipient details.
• Payment Information: Payment method details (e.g., type of card), though we do not store complete card numbers or security codes.
• Special Instructions: Notes or instructions you provide with your order, which may occasionally reveal sensitive data (such as information about allergies or special occasions).
• Technical Data: IP address, device information, and browsing behavior if you order via our website, to support security and improve the customer experience.

Lawful Basis for Processing

We process personal data strictly in accordance with the lawful bases set out in Article 6 of the GDPR. In most instances, these grounds are:

• Performance of a Contract: The majority of data collected is necessary to fulfill your flower delivery order, including communicating with you regarding the order and delivering to the intended recipient.
• Legal Obligation: We may process and retain certain data to meet legal or tax requirements, such as retaining receipts for accounting purposes.
• Legitimate Interests: We may process data to improve our services or to communicate about future offerings, provided this does not override your rights and freedoms.
• Consent: Where required, for example in relation to direct marketing activities, we will only process your data after obtaining your explicit consent, which you may withdraw at any time.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Generally, we retain order-related information for up to seven years to comply with financial regulations. After this period, your data will be securely deleted or anonymised unless we are legally required to retain it for a longer period.

Data Sharing and Processors

To facilitate the efficient delivery of your order and operation of our services, we may share your data with trusted third-party service providers operating under data processing agreements, including:

• Payment Services Providers: To securely process payments and prevent fraud.
• IT and Hosting Providers: To support website operation and data storage.
• Couriers or Delivery Agents: To ensure your order reaches the desired recipient at the correct address.
• Accountants and Legal Advisors: To comply with our legal obligations and to manage our finances.

All processors are carefully selected to ensure they meet GDPR standards, and they are contractually obliged to protect your data and use it only for the specified purposes. We do not sell or rent your personal data to third parties.

International Data Transfers

We strive to process your personal data within the United Kingdom or the European Economic Area (EEA). In circumstances where data must be transferred outside the UK or EEA, such transfer will only occur where adequate safeguards are in place to protect your rights in compliance with GDPR.

Your Data Protection Rights

Under the GDPR, you have several rights in relation to your personal data. These include:

• Right of Access: You may request details of the personal data we hold about you and how we process it.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: You may ask us to restrict the way your data is used in certain circumstances.
• Right to Data Portability: Where applicable, you have the right to obtain and reuse your personal data for your own purposes across different services.
• Right to Object: You can object to processing in some circumstances, including receiving direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before such withdrawal.

If you wish to exercise any of the rights above, please get in touch using our usual correspondence channels. We may need to verify your identity before fulfilling your request to ensure the security of your data.

Data Security

We implement appropriate organisational and technical measures to safeguard your personal data against loss, unauthorised access, or disclosure. These measures are regularly reviewed in line with evolving best practices and legal requirements.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our operations or legal obligations. The latest version will always be made available for your review prior to placing any order with Flower Delivery Blackfriars.

Contact and Complaints

If you have any questions, concerns, or wish to exercise your data protection rights regarding your personal data, please contact us through the methods displayed on our website or in-store. If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Thank you for trusting Flower Delivery Blackfriars with your order and personal data. We are committed to treating your information with care, confidentiality, and respect.