Privacy Policy for Flowers Barnsbury Customers

Introduction

At Flowers Barnsbury, we are committed to protecting the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, store, and share your information when you place an order with us. It applies to all individuals placing Flowers Barnsbury orders from Barnsbury and the surrounding districts.

What Data We Collect

When you order from Flowers Barnsbury, we may collect the following types of personal information:

• Contact Information: Your name, delivery address, billing address, and occasionally details for the recipient (if different).
• Order Details: Items ordered, chosen delivery date, gift messages or card notes.
• Payment Information: Limited payment details as processed by our payment service providers (we do not store full payment card details).
• Communication: Records of communications via phone, contact forms, or postal correspondence concerning your order.
• Technical Data: Device and access information, such as IP address, browser type, and session information, collected through cookies and similar technologies to facilitate order processing and website functionality.

Lawful Basis for Processing Your Data

Flowers Barnsbury processes your personal data only when we have a lawful basis under the General Data Protection Regulation (GDPR). The main bases on which we process your data include:

• Performance of a Contract: When fulfilling your order, arranging delivery, and communicating relevant order updates.
• Legitimate Interests: To improve our services, maintain records, prevent fraud, and ensure the secure operation of our service. We ensure such interests do not override your fundamental rights and freedoms.
• Legal Obligations: To comply with applicable laws, such as tax and accounting regulations.
• Consent: Where you have provided explicit permission, such as for direct marketing. You can withdraw your consent at any time.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which they were collected, including for satisfying legal, accounting, or reporting requirements. E-commerce order records are typically retained for up to six years in line with regulatory obligations, unless a shorter or longer period is required by law. Technical data collected via cookies may be retained for a shorter period, in accordance with our cookie policy. Once retention periods expire, your data will be securely deleted or anonymised.

Use of Data Processors

In delivering our services, Flowers Barnsbury may rely on selected third-party processors who handle personal data on our behalf. These include:

• Payment service providers who process your payment securely (we never store your full credit or debit card information).
• IT and website hosting providers who manage our digital infrastructure and ensure your data's security and availability.
• Delivery and logistics partners involved in order fulfillment.

All our data processors are contractually bound to process your data only as directed, maintain strict security standards, and comply with applicable data protection laws. We do not sell or rent your personal information to third parties.

User Rights Under GDPR

You have several rights regarding your personal data under the GDPR. These rights include:

• Right to Access: You may request confirmation of whether we hold personal information about you and a copy of that information.
• Right to Rectification: If any personal information we hold is inaccurate or incomplete, you can ask us to correct or complete it.
• Right to Erasure: Also known as the 'right to be forgotten', you may request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can request us to restrict processing of your personal data in certain situations.
• Right to Object: You can object to our processing of your personal data when it is based on legitimate interests, or for direct marketing purposes.
• Right to Data Portability: You have the right to request a portable copy of the personal data you have provided to us, in a commonly used and machine-readable format where applicable.
• Right to Withdraw Consent: If the basis for processing your personal data is consent, you may withdraw this at any time.
• Right to Lodge a Complaint: If you believe your rights have been violated, you have the right to raise a complaint with a data protection authority.

How We Protect Your Data

Flowers Barnsbury implements appropriate technical and organisational measures to safeguard your personal data. These include secure order processing, data encryption, regular security reviews, limited access controls, and staff training. We regularly assess our security practices to meet the highest data protection standards.

International Data Transfers

Your data is processed primarily within the UK or European Economic Area (EEA). If we engage processors outside these regions, we ensure adequate safeguards are in place in compliance with GDPR requirements.

Policy Updates

This Privacy Policy may be updated from time to time to reflect legal changes, technological advancements, or business developments. Any updates will be made available on our website, and significant changes will be communicated to you where appropriate.

Contact Us

If you have any concerns regarding your personal data, your rights, or this Privacy Policy, please contact us using the details provided on our website or reach out to our staff in-store. We are always happy to address queries and support you in exercising your data protection rights.

This Privacy Policy was last updated in June 2024.