Flowers Belsize Park Privacy Policy
Introduction
Your privacy is important to us at Flowers Belsize Park. This Privacy Policy outlines how we collect, use, store, and safeguard your personal information whenever you place an order with us. This policy applies to all customers and users who place orders for flowers from Belsize Park or the surrounding districts. We comply fully with the General Data Protection Regulation (GDPR), ensuring the security and lawful processing of your data.
What Personal Data We Collect
When you interact with Flowers Belsize Park, we may collect the following categories of data:
- Contact information: Your name, delivery address, billing address, and telephone number.
- Order details: Recipient name, delivery address, preferred delivery date and time, and any special instructions.
- Payment data: Payment method, transaction identifiers (note: we do not store or process full card details—these are handled securely through payment processors).
- Communication records: Any messages, notes, or correspondence sent to us during your order or in customer service queries.
- Technical data: IP address, browser type, and usage data captured via cookies when using our website (where applicable).
Lawful Basis for Collecting Data
All data collected by Flowers Belsize Park is processed on one or more of the following lawful bases, as defined by the GDPR:
- Contractual necessity: Most of the data we collect is required to fulfil your order, deliver products, and provide customer service. Without this information, we cannot complete your transaction.
- Legitimate interests: We occasionally process your data for reasons such as improving our products, protecting against fraud, or managing our customer relationships, provided those interests do not override your data protection rights.
- Legal obligation: In certain circumstances, we may be required to retain and disclose certain data for tax, accounting, or regulatory compliance purposes.
- Consent: Where required by law or where no other legal basis applies, we will request your explicit consent before processing your data (for instance, for marketing communications if applicable).
How We Use Your Information
Your personal data is used to:
- Process and deliver your flower orders accurately and on time.
- Communicate with you about your order status, delivery, and customer service queries.
- Fulfil our legal and administrative obligations.
- Improve our products, services, and overall customer experience.
- Prevent or detect fraudulent or unlawful activities.
Data Processors and Sharing Information
Flowers Belsize Park only shares your personal information with third parties where necessary, and always in accordance with GDPR standards. Trusted third parties (called ‘processors’) may handle data for the following reasons:
- Payment processing: To securely process payments, we use professional payment gateway providers who comply with applicable financial security standards.
- Delivery services: Where required, your delivery information may be shared with couriers or logistics professionals to ensure timely order fulfilment.
- IT and website support: Website developers, hosting providers, and technical support services that assist in maintaining our website, databases, and order management systems.
We require all processors to adhere to strict data protection and confidentiality obligations. Your information will never be sold to third parties for marketing purposes.
How Long We Keep Your Data
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our general retention periods are:
- Order and contact details: Retained for up to seven years for accounting, tax, and customer service purposes.
- Payment information: We do not store card details ourselves; payment processors retain transaction data according to legal and industry standards.
- Communication records: Retained for up to two years to assist with customer service and complaints resolution.
- Website data: Technical and usage data collected through cookies may be kept for up to two years, unless you delete or block cookies sooner.
After these durations, data is securely deleted or anonymised, unless further retention is required by law.
Your Data Protection Rights
As a customer of Flowers Belsize Park, you have the following rights under GDPR:
- Right of access: You can request a copy of the personal information we hold about you.
- Right to rectification: You have the right to correct any inaccurate or incomplete personal data.
- Right to erasure: You may ask us to delete your personal data in certain circumstances, such as when it is no longer necessary for the original purpose.
- Right to restrict processing: You can request that we limit the use of your data, for example while a correction is in process.
- Right to data portability: You have the right to receive your data in a commonly used format.
- Right to object: You may object to certain data processing activities (such as direct marketing) at any time.
- Right to lodge a complaint: If you are unsatisfied with our data handling, you have the right to contact the relevant supervisory authority.
To exercise any of these rights, please contact us using the details provided on our website or in your order confirmation. Please be aware that we may need to authenticate your identity before processing your request and that some rights may be subject to legal exceptions.
Data Security and International Transfers
We implement appropriate technical and organisational measures to protect your data from accidental loss, misuse, unauthorised access, or disclosure. This includes encrypted storage, restricted access, password protection, and regular data audits. We do not transfer your personal data outside the UK, European Economic Area (EEA), or equivalent jurisdictions unless adequate protections are in place in accordance with GDPR requirements.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation or company practices. The date of the latest version will always be noted at the top of this document. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
Contact and Further Information
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us through the methods provided on our website. Our team is committed to addressing your queries and upholding your data protection rights.