Privacy Policy for Customers Ordering with Flowers Blackheath

Introduction

This Privacy Policy explains how Flowers Blackheath collects, uses, stores, and shares your personal information in accordance with the United Kingdom General Data Protection Regulation (UK GDPR). This policy is applicable to all customers placing orders for flowers and associated products with Flowers Blackheath from Blackheath and surrounding districts. We are committed to respecting your privacy, handling your data responsibly, and ensuring transparency in our practices.

What Data We Collect

When you place an order or interact with Flowers Blackheath, we may collect the following categories of personal data:

• Personal Identification Data: Full name and, if provided, company name
• Contact Information: Delivery address, billing address, and phone number (if applicable for order updates)
• Order Details: Items purchased, delivery preferences, delivery date, and recipient information (if different from customer)
• Transaction Data: Payment confirmation details such as method (we do not store card numbers), invoice details, and amounts
• Communications: Any correspondence (written or oral) relating to orders, queries, or feedback
• Technical Data: IP address, device type, browser type, and usage data for visitors to our website, if any

Lawful Basis for Processing Your Data

Flowers Blackheath processes your data only when there is a lawful basis for doing so under the UK GDPR. The lawful bases that apply include:

• Contractual necessity: We need your personal data to fulfil your order, deliver products, process payments, and provide after-sales support.
• Legal obligation: In certain cases, we may be required to retain records for VAT, taxation, or consumer law compliance.
• Legitimate interests: We may process your data to improve our services, manage risk, prevent fraud, or communicate service-related information, provided our interests do not override your fundamental rights and freedoms.
• Consent: Where required (such as for marketing communications), we seek your explicit consent, which can be withdrawn at any time.

How We Use Your Personal Data

Your personal information is used to:

• Process and fulfil your orders, including payment processing and arranging delivery
• Contact you in relation to your order or respond to your queries
• Issue invoices, receipts, and maintain accurate transaction records
• Ensure compliance with legal obligations
• Provide customer support if any problems arise
• Anonymously improve services, subject to appropriate safeguards

How Long We Retain Your Data

We retain your personal data only for as long as it is necessary for the purpose for which it was collected:

• Order and transaction data: Retained for up to seven years from the date of your transaction for accounting, tax, and record-keeping purposes.
• Correspondence: Held for up to two years after last contact to respond to any subsequent queries or disputes.
• Marketing consent data (where applicable): Retained until you withdraw your consent or request deletion.
• Technical data: Retained for a maximum of one year for website analytics and security monitoring.

After these periods, your data will be securely deleted or anonymised.

Data Processors and Sharing of Data

Your personal data may be shared with trusted third-party service providers who act as data processors under written agreement. These may include:

• Payment processors facilitating secure transactions
• Delivery partners and couriers responsible for order fulfilment
• IT hosting and support service providers
• Accountants and legal professionals (where compliance requires)

Each processor is engaged only to the extent necessary to provide their services and is contractually required to protect your information and comply with applicable data protection laws. We do not sell, rent, or trade your personal data for marketing purposes.

Your Rights Under GDPR

As a data subject under the UK GDPR, you have the following rights in relation to your personal data:

• Right to access: You have the right to request a copy of the personal information we hold about you.
• Right to rectification: If any of your information is inaccurate or incomplete, you may ask us to correct it.
• Right to erasure: You may request deletion of your personal data when it is no longer necessary or where you withdraw consent (if consent was the lawful basis).
• Right to restrict processing: You may request the restriction of processing under certain circumstances.
• Right to data portability: You may request your data be transferred to another organisation or provided to you in a machine-readable format where applicable.
• Right to object: Where we rely on legitimate interests, you may object to processing; we will assess if we can meet your objection.
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without prejudice.

To exercise your rights, please contact us using the details available on our ordering page or via your regular customer communication channel. We aim to respond to all requests within one month.

Security of Your Data

Flowers Blackheath takes all reasonable measures to protect your personal data from loss, theft, or unauthorised alteration. This includes the use of secure payment gateways, password-protected systems, and data processor agreements ensuring confidentiality and integrity. Access to your personal data is restricted to employees and processors who need it for the provision of services and compliance with legal obligations.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be clearly flagged with a new effective date. Please review this policy periodically to ensure you understand how your information is handled.

Contact and Complaints

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact us via the communication channels you used to place your order. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled in accordance with the law.

This policy applies to all customers placing orders with Flowers Blackheath from Blackheath and the surrounding districts. By making a purchase or enquiry, you acknowledge that you have read and understood this Privacy Policy.