Privacy Policy for Flowers Charing Cross Orders

Introduction

This Privacy Policy explains how Flowers Charing Cross collects, uses, and protects the personal data of individuals who place orders with us from Charing Cross and surrounding districts. We are committed to safeguarding your privacy and ensuring that all data is handled in accordance with the General Data Protection Regulation (GDPR) as applicable in the United Kingdom.

Scope

This policy applies to all customers who place orders with Flowers Charing Cross, whether through our website, by phone, or in person, provided they are residents or are making orders within Charing Cross and its neighbouring districts.

What Data We Collect

To process and fulfil your orders, Flowers Charing Cross collects the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and contact telephone numbers.
• Order Details: Products ordered, special instructions, delivery preferences, and order history.
• Payment Information: Payment card details (processed securely and not stored by us), or other payment method information.
• Communication Records: Correspondence via phone, written notes, and records of your communications with our customer service team, including feedback or complaints.
• Technical Data: IP address, device type, browser data, and usage information, where you use our website.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to process your personal data. Our lawful bases include:

• Contractual Necessity: Processing your data in order to manage and deliver your orders.
• Legal Obligation: Complying with applicable laws, such as accounting or tax requirements.
• Legitimate Interest: To improve our services, prevent fraud, or resolve disputes, and to send you information related to your orders.
• Consent: Where we rely on your consent to process certain types of data, you may withdraw your consent at any time.

How We Use Your Data

Flowers Charing Cross uses your personal information for the following purposes:

• To process and deliver your flower orders accurately and efficiently.
• To communicate with you regarding your orders, delivery status, or any issues requiring your attention.
• To update you with important notices regarding our services or changes to our terms.
• To maintain records as required by law.
• To improve our products, services, and website experience based on your feedback and usage data.

How Long We Retain Your Data

Your personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, personal data related to orders is kept for a maximum duration of 7 years, in line with legal and regulatory requirements. Technical or website usage data may be retained for up to 2 years for analytics and service improvement purposes. Once no longer required, your data is securely destroyed or anonymised.

Our Data Processors

Flowers Charing Cross utilises trusted third-party service providers to assist in delivering our services and to process personal data on our behalf. Data processors may include:

• Payment processing providers to handle financial transactions safely.
• Delivery partners and couriers to fulfil and deliver your orders.
• IT hosting and communications service providers to manage our website and customer records.
• Professional advisers including accountants, insurers, and legal experts as required.

All processors are contractually bound to process your data only in accordance with our instructions, maintain data security, and comply with GDPR requirements.

Your Rights Under GDPR

As a data subject, you have several rights in respect of your personal data held by Flowers Charing Cross:

• Right of Access: You may request access to your personal data that we hold.
• Right to Rectification: You can ask us to correct any inaccuracies in your personal data.
• Right to Erasure: You may ask for your personal information to be erased, subject to certain legal constraints.
• Right to Restrict Processing: You may request that we restrict the processing of your personal information in certain circumstances.
• Right to Data Portability: You can request a copy of your personal data in a common format for transfer to another provider.
• Right to Object: You have the right to object to us processing your data for particular purposes, such as marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to Lodge a Complaint: You have the right to complain to a data protection authority if you believe your data has not been handled appropriately.

Data Security

We take the security of your data very seriously. Robust technical and organisational measures are in place to protect your personal data from unauthorized access, disclosure, misuse, or destruction. These include secure data storage, encrypted payment processing, and strict access controls for our staff and service providers.

International Transfers

In general, your data is stored and processed within the United Kingdom. Should it be necessary to transfer data outside the UK (for example, for technical support), we ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

Updates to Our Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Us

If you have any questions about how we handle your personal data, or wish to exercise your rights, please contact the Flowers Charing Cross data protection representative using the contact methods available through our website or by visiting our shop in person.