Privacy Policy for Flowers Seven Sisters Customers
Introduction
At Flowers Seven Sisters, safeguarding your privacy is of paramount importance to us. This Privacy Policy is designed to clearly explain how we collect, process, store, and protect your personal information when you place orders with us. Our policy is in accordance with the General Data Protection Regulation (GDPR) and applies to all customers who place orders with Flowers Seven Sisters in Seven Sisters and the surrounding districts.
Personal Data We Collect
When you engage with Flowers Seven Sisters, we collect and process certain types of personal data to fulfill our services and comply with legal obligations. Depending on how you interact with us, the following information may be collected:
- Contact Information: Includes your full name, delivery address, billing address, and order recipient’s name and address (if different).
- Order Details: Includes information about the products you order, delivery instructions, date and time preferences, and any personalized messages provided during the ordering process.
- Payment Information: Depending on the method used, we collect information required to process payments, such as payment card details or transaction references.
- Communication History: Contains records of correspondence between you and Flowers Seven Sisters, including order confirmations, queries, and feedback.
- Technical Data: Includes data from your use of our website, such as IP address, browser type and version, device identifiers, and access times.
Our Lawful Basis for Processing Your Data
We collect and process your personal data based on the following lawful grounds as defined by the GDPR:
- Contractual Necessity: Most of the information we collect is directly related to fulfilling orders you place with us. Processing your data allows us to process payments, deliver products, and communicate important order information.
- Legal Compliance: We may process data to meet statutory or regulatory responsibilities, such as relevant tax and accounting requirements.
- Legitimate Interests: On occasion, we may use your information to analyze purchase trends or improve our services. We ensure these interests do not override your fundamental data rights and freedoms.
- Consent: If required by law, or for purposes not directly related to your order (such as marketing), we will ask for your explicit consent prior to processing your data. You may withdraw your consent at any time where it is the lawful basis.
How We Use Your Data
Your information is used for the following purposes:
- To process and deliver your Flower Seven Sisters orders as requested.
- To communicate with you about your orders, changes to our services, and to respond to your queries or feedback.
- To fulfill our bookkeeping, tax, and legal obligations.
- To maintain and improve our products and customer service.
- To prevent fraud and secure our services.
Retention of Your Personal Data
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy. Typically, this means retaining order and customer information for up to seven years to comply with accounting and tax requirements, unless a longer retention period is required or permitted by law. Afterward, your data is securely deleted or anonymized so it can no longer be associated with you.
Data Processors and Third Parties
To provide our services, we may engage third-party service providers (data processors) who process your data strictly on our behalf and under strict contractual obligations. Data processors may include payment providers for secure transactions, courier or delivery services for order fulfillment, and IT providers supporting our website. We require all third parties to respect the security of your personal data and process it in accordance with GDPR and our instructions. We do not sell or share your information with third parties for their marketing purposes.
Your Data Protection Rights
Under the GDPR, customers of Flowers Seven Sisters have the following rights regarding their personal data:
- Right to Access: You have the right to request a copy of your personal data we hold about you.
- Right to Rectification: If you believe any personal data we hold is inaccurate or incomplete, you may request a correction.
- Right to Erasure: In certain circumstances, you can ask us to delete or remove your personal information, subject to any legal obligations for retention.
- Right to Restrict Processing: You can request us to limit the way we use your data under specific conditions.
- Right to Data Portability: Where applicable, you have the right to request transfer of your data to you or another service provider.
- Right to Object: You may object to processing of your data in some situations, such as direct marketing or activities based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time without affecting the lawfulness of the processing before withdrawal.
To exercise any of these rights, please contact us using the details provided on our website or with your order documents. We may need to verify your identity before processing your request, in line with GDPR standards.
Data Security
We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, use, alteration, or loss. These safeguards include secure payment processes, access controls, encrypted storage, and staff data privacy training.
Policy Updates
We may update this Privacy Policy to reflect changes to our practices, services, or legal obligations. Where relevant, we will notify you of significant updates. Please revisit this page regularly to ensure you understand how we process and protect your data.
Contact and Enquiries
If you have questions or concerns about this Privacy Policy or how we handle your data, please refer to the contact information available on our website or with your order confirmation documentation.