Flowers Elm Park Privacy Policy

Introduction

This Privacy Policy explains how Flowers Elm Park (“we”, “our”, or “us”) collects, uses, stores, and protects your personal data as a customer purchasing from Elm Park or surrounding districts. We are committed to safeguarding your information in compliance with the General Data Protection Regulation (GDPR) and applicable UK data privacy legislation.

Scope of This Policy

This Privacy Policy applies to all customers placing orders with Flowers Elm Park for delivery or pickup in Elm Park and its neighbouring districts. This includes all orders submitted through our website, by telephone, or in-person. By placing an order, you acknowledge that you have read and understood this Privacy Policy.

What Data We Collect

When you place an order or interact with Flowers Elm Park, we may collect the following categories of personal data:

• Personal identification data: Name, address, and contact details such as phone number.
• Order details: Items ordered, recipient name and address, and delivery instructions.
• Payment information: Transaction details (note: we do not store full card numbers, but you may use third-party payment processors who may have their own privacy policies).
• Communication data: Records of correspondence with us regarding your enquiry or order.
• Technical data: Device and browser information, IP address, and data collected through cookies when you use our website.

Lawful Basis for Processing

We process your personal data on the following lawful bases, as provided for by the GDPR:

• Contractual necessity: We use your data to fulfil your order, process payments, and provide customer service in relation to your purchases.
• Legal obligation: To comply with financial, taxation, and regulatory obligations.
• Legitimate interest: We may process your data for business purposes, such as managing orders, business record-keeping, or improving our services, provided our interests do not override your rights and freedoms.
• Consent: In circumstances where we seek your additional consent, such as for marketing emails, we will request your explicit permission before processing your data for these specific purposes.

How We Use Your Information

Your personal data is used strictly for the following purposes:

• Processing and fulfilling your flower orders, including arranging delivery or pickup.
• Communicating with you regarding your order, service updates, and responding to your enquiries.
• Managing payments and verifying transactions.
• Complying with legal obligations related to record-keeping and financial transactions.
• Improving our business services, subject to our legitimate interests.

Data Retention

We retain your personal data only as long as necessary for the purposes detailed above and in accordance with applicable legal requirements. Typically, we retain customer order records for up to six years for financial and legal compliance. After this period, your data is securely deleted or anonymised.

Use of Data Processors

We may share certain personal data with third-party service providers (“data processors”) who assist us in managing your order. This may include payment processors, IT service providers, or delivery partners. These processors are contractually required to handle your data only according to our instructions, maintain confidentiality, and implement appropriate security measures. We do not sell your data to any third party.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request a correction if your information is inaccurate or incomplete.
• Right to erasure: Under certain circumstances, you can request deletion of your personal data (“right to be forgotten”).
• Right to restrict processing: You may request that we restrict the processing of your personal data under specific conditions.
• Right to data portability: You can ask us to provide your data in a format that allows you to transfer it to another service provider.
• Right to object: You have the right to object to our processing of your data based on our legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, please contact us using the details provided at the end of this policy. We will respond to your request within the statutory timeframe required by law.

How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. This includes keeping digital records secure, training staff on data privacy, and vetting third-party processors for security compliance.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect or process data from individuals under 16 years of age. If we learn that such data has been provided without appropriate consent, we will delete it as soon as possible.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in law or our business practices. We encourage customers to check this page from time to time. Material changes will be communicated clearly where appropriate.

Contacting Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please get in touch with our data protection team using the contact details provided on our website or by visiting our premises in Elm Park.