Flowers Rickmansworth Privacy Policy

Introduction

At Flowers Rickmansworth, we are deeply committed to protecting your privacy and the security of your personal data. This Privacy Policy is intended to clearly explain how we process, store, and use the information we collect from customers who place orders for our services in Rickmansworth and the surrounding districts. We comply fully with the General Data Protection Regulation (GDPR) and any relevant UK data protection laws. Please read this policy carefully to understand your rights and our responsibilities regarding your personal data.

Scope of This Policy

This Privacy Policy applies to all individual customers who order from Flowers Rickmansworth, whether the orders are placed via our website, over the phone, or in person, and who reside, work, or order for delivery in Rickmansworth or neighbouring districts. It covers the collection, use, retention, and protection of your data throughout your engagement with us.

What Data We Collect

We collect various types of personal data in order to process your flower orders and provide an exceptional service. Depending on how you interact with Flowers Rickmansworth, we may collect the following categories of data:

• Contact Details: Name, address (for both billing and delivery), and phone number.
• Order Information: Details of orders you have placed, including specific products, delivery instructions, and gift messages.
• Payment Information: Payment card details are securely processed via approved payment providers. For in-shop payments, only transaction records are stored, not the full payment details.
• Communication Records: Correspondence via telephone, website contact forms, and any feedback or complaint information you provide.
• Technical Data: IP address, browser type and version, time zone setting, and device information collected through our website for security and analytical purposes.

Lawful Bases for Processing

Under GDPR, we process your personal data only when we have a valid legal basis to do so. The lawful bases applicable to Flowers Rickmansworth include:

• Contract: Data is processed to carry out our contractual obligations with you, such as accepting, processing, and fulfilling your flower orders.
• Legal Obligation: We may retain and process certain information as required by UK laws (e.g., for accounting or tax purposes).
• Legitimate Interests: We process data to improve our services, prevent fraud, ensure security, and respond to queries, only where these interests do not override your rights.
• Consent: Where we require your explicit permission (for example, for marketing communications), you have the right to withdraw consent at any time.

How We Use Your Data

Your data is used solely to provide you with our products and services efficiently and safely. Specifically, we use your data to:

• Process and fulfil your flower orders, including arranging delivery and payments.
• Communicate with you regarding your orders, respond to your queries, and manage any issues you raise.
• Improve our products and customer experience.
• Comply with legal and regulatory obligations.
• Detect and prevent fraud or misuse of our services.

Sharing and Data Processors

We may share your personal data only when necessary and always under strict contractual agreements. Data may be disclosed in the following circumstances:

• Payment Service Providers: Your payment details are securely processed through third-party payment processors. We do not retain full payment card information.
• IT and Communication Providers: We engage reputable external parties to maintain our website, email, and communication infrastructure. These processors may access data only as necessary and under our instructions.
• Delivery Partners: Your contact and address information may be shared with trusted local couriers in order to deliver your order.
• Legal Requirements: We may need to share data with law enforcement or regulatory authorities where required by law.

We do not sell or rent your personal data to third parties. All processors are required under contract to comply with the GDPR and maintain the confidentiality and security of your data.

International Transfers

Your data is stored and processed within the UK or the European Economic Area (EEA), except where necessary for specific IT solutions, always under GDPR-compliant safeguards.

Data Retention

We retain your personal data for only as long as necessary to fulfil the purposes for which it was collected, and as required by applicable laws. Typically, order and transaction details will be held for no more than seven years in accordance with legal and tax requirements. If you contact us with a query, your contact details and correspondence will be retained as long as necessary to resolve your enquiry, after which they will be deleted or anonymised appropriately. Where you have provided consent for marketing, we will continue to hold your data for that purpose until you withdraw consent.

Your Rights

Under the GDPR, you have several important rights in relation to your personal data. These include:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: If your data is incorrect or incomplete, you can request us to correct it.
• Right to Erasure: In certain circumstances, you can ask us to delete your personal data.
• Right to Restrict Processing: You may request limitations on how we process your data.
• Right to Object: You can object to certain types of processing, such as direct marketing.
• Right to Data Portability: Where applicable, you can request a copy of your data in a machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the methods provided on our website or in your order confirmation materials. We will respond to your request in accordance with GDPR requirements.

Security Measures

We implement a range of technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our systems are regularly updated and access to your data is limited to only those staff and processors who require it to fulfil their responsibilities.

Changes to This Privacy Policy

From time to time, we may update this Privacy Policy to reflect changes in our practices, regulatory requirements, or for other operational reasons. The latest version will always be available on our website, and we encourage you to review it periodically.

Contacting Us

If you have any questions or concerns regarding this Privacy Policy or your personal data, please refer to the contact details available on the Flowers Rickmansworth website or your order receipt. We are committed to resolving your queries quickly and transparently.