How Flowers Wallington Safeguards Your Personal Data

Flowers Wallington Privacy Policy and Your Data Rights

Introduction

This Privacy Policy explains how Flowers Wallington collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers who place Flowers Wallington orders from Wallington and surrounding districts. We are committed to safeguarding your privacy and providing transparency regarding your rights and choices about your personal data.

What Personal Data We Collect

Depending on how you interact with Flowers Wallington, we may collect the following types of personal data:

Contact Details: Name, address, postcode, and delivery details for order fulfillment.
Order Information: Details of flowers or products ordered, special instructions, and messages for recipients.
Payment Information: Payment method and transaction information (Note: Payment details are processed securely by our payment service providers; we do not store full card numbers).
Communication Data: Records of your communications with us, including enquiries, order updates, and complaints.
Usage Data: Information about how you use our website, such as browser type, device type, and pages visited. This helps us improve user experience.

Our Lawful Basis for Processing Your Data

We process your personal data only when the law allows us to do so under GDPR. The main lawful bases we rely upon include:

Contractual Necessity: We require certain personal data to process and deliver your flower order. Without this information, we cannot fulfill your order or provide the requested services.
Legal Obligation: For example, retaining transaction records for tax and regulatory purposes.
Legitimate Interests: We may use your data to improve our services, prevent fraud, or respond to your queries, provided such interests are not overridden by your rights and interests.
Consent: In cases where you opt in to receive marketing communications, we will process your data based on your explicit consent. You may withdraw consent at any time.

How We Use Your Data

Flowers Wallington uses your personal data for the following purposes:

Processing and fulfilling your flower orders.
Arranging deliveries to the addresses you provide.
Communicating with you about your order status or responding to your enquiries.
Improving customer service and website functionality.
Meeting our legal and regulatory obligations.
Sending you marketing materials if you have opted in.

How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes described in this policy:

Order and transaction records are generally kept for up to six years to comply with tax and legal requirements.
Account information and communication records will be kept for as long as your customer relationship with Flowers Wallington remains active or until you request deletion.
Marketing preferences and consent records are held until you withdraw your consent or unsubscribe.
Non-identifiable usage data may be retained for analytics and service improvement purposes.

Third-Party Processors

To provide our services, we may share your data with carefully selected third parties who act as data processors on our behalf. These include:

Payment Processors: Securely handle card payments and financial transactions. We do not store full card numbers or sensitive payment details on our systems.
Delivery Partners: Assist in delivering your flower orders to specified addresses.
IT Service Providers: Support the security and functionality of our website and data storage.

All processors are contractually obliged to process your data securely and in compliance with GDPR. We do not sell or share your personal data for unrelated third-party marketing.

Your Rights Under GDPR

As a customer of Flowers Wallington, you have specific rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You may request corrections to inaccurate or incomplete data.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary or if you withdraw consent (where applicable). Some retention is required for legal compliance.
Right to Restrict Processing: You can request we limit how we use your data in certain circumstances.
Right to Data Portability: You may request a portable copy of your data for use elsewhere.
Right to Object: You may object to processing when done for legitimate interest or direct marketing.
Right to Withdraw Consent: You can withdraw consent to marketing communications at any time.

To exercise any of these rights, please contact us by your preferred communication method. We will respond to requests in accordance with GDPR timelines and requirements.

Protecting Your Data

We are committed to safeguarding your personal data. We implement appropriate physical, technical, and organisational measures to protect your information from unauthorised access, loss, misuse, disclosure, or alteration. Access to your data is strictly limited to those who need it to perform their duties. Any personal data transmitted electronically is encrypted and stored securely.

International Transfers

Your personal data is generally processed within the United Kingdom. Should we need to transfer your data outside the UK or European Economic Area, it will only be to countries that provide an adequate level of data protection, and we will ensure necessary safeguards are in place as required by law.

Policy Updates

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contacting Flowers Wallington

If you have any questions, concerns, or wish to exercise your data protection rights, please contact us using your preferred method of communication. We are committed to responding promptly to any privacy-related queries and to protecting your rights as a valued customer.