Privacy Policy – GDPR Commitment at Flowers Bickley
Introduction
This Privacy Policy explains how Flowers Bickley ('we', 'us', 'our') collects, uses, protects, and manages your personal data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Bickley from Bickley and surrounding districts. Please read this statement carefully to understand our practices concerning your personal information.
What Data We Collect
To provide our services, we collect a range of personal data depending on the nature of your interaction with us. The types of data we may collect include, but are not limited to:
- Identity Data: Full name, title.
- Contact Data: Address, delivery address, town/city, postal code.
- Communication Data: Order details, personal messages accompanying your floral order, and any relevant communication relating to your order.
- Transaction Data: Details of products purchased, purchase amounts, date and time of orders.
- Payment Data: Payment method (e.g., card type), payment reference, but not card details or bank account numbers (these are processed directly by payment service providers).
- Technical Data: IP address, device information, browser type, access times (for online orders).
Lawful Basis for Processing
We process your personal data according to the lawful bases outlined in GDPR, namely:
- Contractual Necessity: To process and deliver your floral order, including taking payment and managing delivery.
- Legal Obligations: To comply with legal and regulatory requirements, such as applicable tax laws and record-keeping.
- Legitimate Interest: To communicate with you about your order, resolve disputes, maintain accurate business records, and improve our services.
- Consent: Where we rely on separate consent, such as for direct marketing, this will be clearly obtained and may be withdrawn at any time.
How We Use Your Information
Your personal data is used strictly for the following purposes:
- Processing and fulfilling your order, including confirming order details and arranging delivery.
- Managing payments and addressing payment-related queries.
- Administering and improving our service and customer support.
- Meeting regulatory, financial, tax, or legal requirements.
- Responding to queries, complaints, or requests for information.
- Where applicable, sending you direct marketing communication, if you have given consent.
How We Share and Store Your Data
Flowers Bickley may need to share some of your personal data with trusted third parties to fulfil our services and legal obligations:
- Payment Processors: Secure payment service providers process your card or payment information. We do not receive or store your card details ourselves.
- Delivery Providers: Couriers or drivers may be given recipient details in order to complete delivery.
- IT Service Providers: Companies that provide website hosting, IT support, or customer software.
- Professional Advisors: Accountants, auditors, or legal advisors may access certain data for compliance and auditing purposes.
- Regulatory Authorities: If legally required, we may share data with public authorities.
We require all our third-party partners who act as data processors to comply with GDPR and ensure your data is kept secure, confidential, and is only processed on our instructions.
Data Retention
We retain personal data only for as long as it is necessary for the purposes set out in this policy, and in accordance with our legal, tax, and regulatory obligations. Typically, we keep your data for up to 6 years after the completion of your last order to comply with applicable record-keeping laws. In certain instances, data may be kept longer if required for auditing or legal defense. Once the retention period is over, your data is securely deleted or anonymized.
International Transfers
Your data is primarily stored within the United Kingdom or the European Economic Area (EEA). Should any personal data be transferred outside the EEA, we ensure appropriate safeguards are in place to protect your rights, either through adequacy decisions or approved contractual clauses.
Your Rights as a Data Subject
Under GDPR, you have a number of important rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right of Rectification: You can ask us to correct inaccurate or incomplete personal data.
- Right of Erasure: You are entitled to request deletion of your personal data, provided no overriding legal reason exists to retain it.
- Right to Restrict Processing: You may restrict the processing of your data in certain circumstances.
- Right to Data Portability: You may request to receive your personal data in a structured, commonly used format.
- Right to Object: You have the right to object to the processing of your data for certain purposes, such as direct marketing.
- Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting prior processing.
- Right to Lodge a Complaint: You may lodge a complaint with the supervisory authority if you believe your data rights have been breached.
We will always facilitate these rights as far as possible in accordance with the law. If you wish to exercise your rights, please contact us via the details provided on our website or in store.
How We Protect Your Data
Flowers Bickley is committed to securing your information. We implement appropriate technical and organisational measures to protect against unauthorised access, accidental loss, destruction, or disclosure of personal data. This includes using secure networks, restricting access to authorised staff, and regular review of our data protection practices.
Policy Scope and Updates
This policy applies to all customers orderings goods and services from Flowers Bickley in Bickley and neighbouring areas. We may update this privacy policy as required to reflect changes in legislation, our data practices, or service offerings. Updates will be posted on our website, and where substantial changes are made, we may notify you by other means.
Contact Us
If you have questions about this policy, your personal data, or wish to exercise any of your rights, please visit our website or contact us in store. We are committed to addressing and resolving any concerns you may have regarding your information.