Privacy Policy for Flowers South Wimbledon Customers

Introduction

This Privacy Policy outlines how Flowers South Wimbledon collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). The policy applies to all customers who place orders with Flowers South Wimbledon from South Wimbledon and the surrounding districts. We are committed to safeguarding your privacy and ensuring transparency about your data rights and our responsibilities.

Scope of This Policy

This Privacy Policy applies to all personal information gathered from customers when placing orders with Flowers South Wimbledon, whether via our website, telephone, or in-person in South Wimbledon and its nearby districts. By using our services, you acknowledge and agree to the terms described in this document.

What Data We Collect

Flowers South Wimbledon collects the following categories of personal data to process orders and provide an optimal customer experience:

• Contact Information: Such as your name, delivery address, billing address, and phone number, required for delivering flowers and managing orders.
• Order Details: Including specific floral selections, card messages, preferred delivery dates and times, and special instructions.
• Payment Information: Payment card details and billing information are processed securely through trusted payment processors.
• Communication Data: If you contact us with queries, feedback, or requests, we may retain details of these communications.
• Website Usage Information: When interacting with our website, technical data such as IP addresses, browser type, and pages visited may be automatically collected to improve site functionality and security.

Lawful Basis for Processing

Flowers South Wimbledon processes your personal data using the following GDPR-compliant legal bases:

• Contractual Necessity: The majority of data we collect is required to fulfill our contract with you—such as processing, delivering your order, and communicating about your purchase.
• Legitimate Interests: We may use your details to resolve queries or enhance our services, ensuring these activities do not override your rights or interests.
• Legal Obligations: Certain data may be retained or processed to comply with UK legal and regulatory requirements, such as financial record-keeping.
• Consent: For any direct marketing or promotional activities outside your orders, we will seek your explicit consent, which you can withdraw at any time.

How We Use Your Data

Personal information provided by customers is used only as necessary to:

• Process and deliver your flower orders accurately and efficiently.
• Communicate with you regarding your order or respond to your inquiries.
• Maintain records of past purchases to improve customer service or handle returns and complaints.
• Analyze trends and usage patterns to improve website performance and service delivery.
• Comply with legal accountancy and business obligations.

Third-Party Processors

We work with select third-party service providers ("processors") to provide parts of our service efficiently and securely. For example:

• Payment Processors: Secure payment gateways handle financial transactions and do not retain your card information on our systems after processing.
• Delivery Partners: Reliable couriers may receive necessary delivery details to ensure prompt order fulfillment.
• IT Service Providers: Technical partners support and maintain our website and data storage infrastructure.

All processors are required by contract to safeguard your information and are prohibited from using your data for their own purposes.

Data Retention

Flowers South Wimbledon retains your personal data only as long as necessary for the purposes for which it was collected and as required by law. Typically, order records are retained for up to seven years to comply with accounting regulations. After this period, personal data is securely deleted or anonymized. If you make a data erasure request, we will carry this out in accordance with legal requirements unless we still have contractual or legal obligations to retain certain information.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Examples include encrypted transaction processing, secure data storage, and restricted access for authorized personnel only. We regularly review these measures to maintain high data protection standards.

Your Rights Under GDPR

You have several rights regarding how we process your personal data:

• Right of Access: You can request a copy of your personal data we hold.
• Right to Rectification: If any information is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: In certain circumstances, you may request your data be deleted, unless retention is legally required.
• Right to Restrict Processing: You may ask us to restrict the way we use your information under certain conditions.
• Right to Data Portability: You can request a copy of your information in a machine-readable format to transfer to another provider.
• Right to Object: Where we process data based on legitimate interests or for direct marketing, you can object to this processing.
• Right to Withdraw Consent: Where your specific consent is required (e.g. marketing), you may withdraw it at any time.

Making a Request

To exercise any of your GDPR rights, please contact us through the communication channels provided on our website or in our store. We will handle all requests promptly and in accordance with applicable law, typically responding within one month. If you are not satisfied with our response, you can lodge a complaint with the UK Information Commissioner's Office (ICO).

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in law or our business practices. The date of the latest revision will always be indicated at the bottom of the policy. We encourage you to review the policy periodically to remain informed about how your personal data is handled.

Contacting Us

If you have any questions or concerns about this Privacy Policy, or about how your data is processed, please reach out to us using the contact details provided on our website or by visiting our premises in South Wimbledon. We are committed to addressing your concerns promptly and transparently.

This Privacy Policy was last updated in June 2024.