Flowers Shacklewell Privacy Policy

Introduction

This Privacy Policy explains how Flowers Shacklewell collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Flowers Shacklewell from Shacklewell and the surrounding districts. We are committed to safeguarding your privacy and ensuring you are informed about how your personal data is managed.

What Data We Collect

When you place an order or interact with Flowers Shacklewell, we may collect the following types of personal data:

  • Contact Details: Your name, address, and delivery address if different, to fulfill your orders.
  • Contact Preferences: Your communication preferences, such as opting in or out of promotional messages.
  • Order Information: Details about your orders such as bouquets, delivery dates, greeting messages, and special requests.
  • Payment Information: Payment methods, transaction details (excluding full card numbers, which are processed securely), and billing information.
  • Technical and Usage Data: Information about your use of our website, including IP address, browser type, device information, and cookies, to help us improve our services and website performance.

We do not knowingly collect or process data from individuals under 16 years of age.

Lawful Basis for Processing Data

Flowers Shacklewell processes your data under the following lawful bases as defined in GDPR:

  • Contractual Necessity: We require your personal data to process and deliver your orders, provide customer support, and fulfill our contract with you.
  • Legal Obligations: In some cases, we are legally required to retain transactional and accounting records.
  • Legitimate Interests: We may use your data to improve our products and services, prevent fraud, maintain security, and ensure the best customer experience, provided these interests are not overridden by your rights and interests.
  • Consent: Where required, we will obtain your consent before sending you marketing communications or when collecting certain optional information.

How We Use Your Data

Your personal information is used for the following purposes:

  • Fulfilling and managing bouquet orders and deliveries within Shacklewell and nearby areas.
  • Processing payments securely through trusted third-party payment processors, ensuring we never store your full card details.
  • Communicating with you about your order status or to resolve any queries relating to your requests.
  • Providing customer support and responding to feedback or complaints.
  • Conducting analysis to improve our service offerings, website functionality, and customer experience.
  • When consensually agreed, sending you updates, offers, or marketing promotions relevant to our services.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected and to meet legal, accounting, or reporting requirements. Typically, this includes:

  • Order and transaction records: Retained for up to 7 years for legal and financial reporting purposes.
  • Customer communications: Retained for up to 3 years from the date of your last contact unless a longer period is required by law or justified by legitimate interest.
  • Marketing preferences: Retained until you withdraw your consent or opt-out.

After these periods, your data will be securely deleted or anonymised.

Data Processors and Third Parties

Flowers Shacklewell works with trusted third-party service providers to deliver parts of our services. These may include:

  • Payment Processors: To securely handle payment transactions.
  • Delivery Partners: To deliver flowers in Shacklewell and adjacent districts.
  • IT Service Providers: Providing website hosting, data storage, and IT support.
  • Marketing Services: (where your consent is given) for sending out communications or newsletters.

All data processors act on our instructions and are under contractual obligations to ensure the security and confidentiality of your data. They are not permitted to use your personal information for their own purposes.

User Rights Under GDPR

As a customer of Flowers Shacklewell, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccuracies in your data.
  • Right to Erasure: You can request deletion of your data, provided it is not required for legal or contractual obligations.
  • Right to Restrict Processing: You can limit the way we use your data in specific circumstances.
  • Right to Object: You can object to the processing of your data for direct marketing or legitimate interests.
  • Right to Data Portability: You can request to receive your data in a machine-readable format to transfer to another service.
  • Right to Withdraw Consent: Where we rely on your consent for processing, you can withdraw this consent at any time for future processing.

If you wish to exercise any of these rights, please contact us via the methods provided on our website.

Data Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access or disclosure. These include restricted access to sensitive information, secure transmission of payment details, regular security reviews, and staff training on data privacy obligations.

International Data Transfers

Your data is generally processed and stored within the United Kingdom. If, for technical reasons, it is transferred outside the UK or European Economic Area (EEA), we will ensure appropriate safeguards are in place to provide an adequate level of protection for your information.

Updates to This Policy

We may occasionally update this Privacy Policy to reflect changes in legal requirements, business operations, or to clarify our practices. The latest version will always be available on our website. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Contacting Us

If you have any questions or concerns about how your personal data is handled, or you wish to exercise your rights, please get in touch through the contact methods shown on our website. We are committed to respecting your privacy and will respond to all enquiries as promptly as possible.