Flowers Bloomsbury Privacy Policy for Customers
Introduction
At Flowers Bloomsbury, we are committed to safeguarding the privacy of all customers placing orders with us from Bloomsbury and the surrounding districts. This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.
Scope of Policy
This policy applies exclusively to individual customers and recipients whose information is provided for Flowers Bloomsbury orders placed for delivery in Bloomsbury and adjacent districts. By placing an order or providing your information, you acknowledge and agree to the practices described in this Privacy Policy.
What Data We Collect
When you interact with Flowers Bloomsbury, we may collect and process some or all of the following types of personal data:
- Contact Details: Such as your name, delivery address, billing address, telephone number, and communication preferences.
- Order Information: Details of the products you order, instructions for delivery, and gift messages.
- Payment Information: Limited payment data, as processed securely by our third-party payment service providers. Flowers Bloomsbury itself does not store full payment card numbers or security codes.
- Account Information: If you register for an online account, we may store your login credentials and order history.
- Correspondence: Any information provided when contacting us for support, feedback, or general enquiries related to your orders.
- Technical Data: IP address, browser type, device identifiers, and similar details as inferred from website interactions or to enable transaction processing.
Purpose and Lawful Bases for Data Processing
Flowers Bloomsbury processes your personal data only as permitted by the GDPR. Specifically, we rely on the following lawful bases:
- Contractual Necessity: To process your orders, deliver flowers, manage payments, communicate regarding your purchases, and provide related customer service. If you do not provide the required information, we may be unable to fulfil your order.
- Legitimate Interests: For our legitimate business purposes, such as for fraud prevention, maintaining service quality, protecting our premises, or improving our website, provided these interests do not override your data protection rights.
- Legal Obligation: To fulfil legal and regulatory requirements, such as maintaining transaction records for tax purposes.
- Consent: If you voluntarily consent to marketing communications or optional services, we will process your data only as you have agreed.
How We Use Your Data
Your personal data is used strictly for the following purposes:
- To process, confirm, and fulfil your orders.
- To arrange and manage the delivery of your flowers and gifts.
- To send service communications relevant to your orders or account.
- To respond to your requests, queries, or feedback about our products and services.
- To comply with applicable legal requirements and defend our legal interests.
- To improve our website, offers, or customer experience, based on aggregated and anonymised data.
- If consented, to send you information about Flowers Bloomsbury offers or news.
Sharing and Processing of Your Data
Flowers Bloomsbury treats your data confidentially and does not sell your information. We may share your data only with trusted service providers ("data processors") to enable us to deliver our services. Common categories of data processors include:
- Payment Service Providers: For secure electronic payment processing.
- Delivery and Courier Partners: For fulfilment and delivery of your orders.
- IT and Website Support Providers: For secure data storage, website management, and technical support.
- Accounting and Record-Keeping Services: Where necessary for compliance with legal and tax requirements.
All our appointed data processors operate under written contracts and are required to uphold appropriate security, confidentiality, and processing standards in line with GDPR requirements.
International Transfers
Flowers Bloomsbury stores and processes customer data within the UK and the European Economic Area (EEA). If any customer data must be transferred outside these locations, it will only be done where an adequate level of data protection exists, or with appropriate standard contractual safeguards, as required under the GDPR.
Data Retention
We will retain your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements. As a general rule:
- Order-related data is retained for up to 6 years to comply with accounting and tax obligations, unless a longer period is required by law.
- Account information will be retained for as long as the customer holds an account with us, and for a reasonable period thereafter.
- Marketing consent preferences will be retained until consent is withdrawn.
After these periods, data is deleted or appropriately anonymised.
Your Rights
You have rights regarding your personal data, subject to certain limitations and conditions under GDPR:
- Right of Access: You can request access to your personal data held by us.
- Right to Rectification: You may request correction of inaccurate or incomplete data.
- Right to Erasure: You can ask for your data to be deleted when it is no longer needed, or if processing is unlawful.
- Right to Restriction: You may restrict the processing of your data in certain circumstances.
- Right to Data Portability: Where applicable, you can receive your data in a structured, commonly used format or request transmission to another data controller.
- Right to Object: You have the right to object to certain processing activities, including direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights or make a query regarding your data, please contact Flowers Bloomsbury using our published contact details on our website or written correspondence address. We may require verification of your identity before responding to any request.
Data Security
We employ appropriate security measures, both technical and organisational, to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure or access. These measures are reviewed and updated regularly to maintain ongoing confidentiality and integrity.
Updates to This Policy
This Privacy Policy may be updated periodically to reflect changes in our services, legal requirements, or best practices. Any significant updates will be posted clearly on our website. We encourage you to review this policy from time to time to remain informed about how we protect your information.
Questions or Complaints
If you have any questions about this Privacy Policy, your data, or how it is handled, please contact us using the contact page on the Flowers Bloomsbury website or our registered office address. You also have the right to lodge a complaint with the Information Commissioner’s Office or your local supervisory authority if you are concerned about how your data has been processed.