Privacy Policy for Customers of Flowers Shepherd's Bush

Introduction

This Privacy Policy explains how Flowers Shepherd's Bush collects, uses, processes, and stores personal data from our customers. Our commitment is to safeguard your privacy and comply fully with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy applies to all customers who place orders with Flowers Shepherd's Bush located in Shepherd's Bush and the surrounding districts.

What Data We Collect

When you interact with Flowers Shepherd's Bush, we collect personal data to provide our services effectively. The information we may collect includes:

  • Name: To identify or address you in correspondence or for delivery purposes.
  • Contact Information: Such as address for delivery, as well as optional means like phone number for resolving order issues.
  • Order Details: Including products purchased, delivery instructions, preferred dates, and messages to recipients.
  • Payment Information: Such as payment method details required to process transactions (handled securely via payment processors; card details are not stored by us unless explicitly required and permitted by law).
  • Correspondence: Any communications (e.g. via enquiry forms or feedback) you send to us regarding your order or our service.
  • Technical Data: Limited technical information such as IP address and browser type may be collected automatically when you use our website to help ensure security and improve functionality.

Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so in accordance with GDPR. These bases include:

  • Contractual Necessity: To fulfil our contract with you, such as processing and delivering your order.
  • Legal Compliance: To comply with legal obligations, such as tax records or requests from regulators.
  • Legitimate Interests: To improve our services, communicate about your order, or prevent fraud, provided these interests are not overridden by your data rights and interests.
  • Consent: Where you have provided specific consent, such as subscribing to marketing communications (not obligatory for purchasing).

Data Retention

Flowers Shepherd's Bush retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period varies according to the category of data:

  • Order and Transaction Data: Typically retained for up to seven years in line with statutory tax and accounting obligations.
  • Customer Correspondence: Retained as necessary to resolve queries or complaints, but not longer than three years after resolution.
  • Marketing Preferences: Retained until you withdraw your consent or unsubscribe from communications.
  • Technical Data: Retained for up to one year for analytical or security purposes.

Once personal data is no longer required, it is securely deleted or anonymised.

Data Processors and Third Parties

Flowers Shepherd's Bush uses authorised third-party service providers (data processors) to help with business operations and the fulfilment of your orders. Examples of such processors include:

  • Payment processing companies (to securely process payments)
  • Delivery and courier services (for the delivery of your order)
  • IT and web hosting providers (to maintain our website and email communications)
  • Professional advisors such as accountants or legal consultants

All processors handling your data do so based on written contracts which require them to protect your personal data in accordance with GDPR and only to act on our instructions. We do not sell or rent your personal information to any third party for their own use.

User Rights Under GDPR

You have several important rights under data protection law in relation to your personal data. These rights include:

  • Right of Access: To request confirmation of whether we process your personal data and to request a copy of that data.
  • Right to Rectification: To correct any information that you believe is inaccurate or incomplete.
  • Right to Erasure: To request the deletion of your data under certain circumstances.
  • Right to Restrict Processing: To request a temporary halt to processing your data under defined conditions.
  • Right to Data Portability: To obtain and reuse your data across different services.
  • Right to Object: To object to processing carried out on the basis of legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, to withdraw it at any time without affecting previous processing.

If you would like to exercise any of these rights, please contact us. Verifying your identity may be necessary to process certain requests. We are committed to responding within the stipulated legal timeframe.

International Data Transfers

Generally, we do not transfer your personal data outside the United Kingdom or the European Economic Area (EEA). If we ever need to do so (for example when utilising a service provider based outside these areas), we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses approved by the European Commission or other equivalent measures.

Data Security

Flowers Shepherd's Bush implements technical and organisational measures to safeguard personal data against unauthorised access, disclosure, alteration, or loss. These include secure servers, restricted access to personal information, and periodic training for staff on data protection. However, no method of online transmission is fully secure, and customers are encouraged to take care when submitting personal data online.

Children’s Privacy

We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data without parental consent, please notify us so we can take appropriate measures.

Policy Updates

Flowers Shepherd's Bush may occasionally update this Privacy Policy to reflect changes in laws, technology, or our operations. When we do, we will revise the date of the most recent update at the end of this policy. You should review this statement periodically to stay informed about how we are protecting your information.

Contact and Complaints

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please contact us. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been violated.

Last updated: June 2024