Flowers Surrey Privacy Policy

Introduction

This Privacy Policy explains how Flowers Surrey collects, uses, stores, and protects the personal data of customers who place orders from Surrey and the surrounding districts. We are firmly committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. Please read this policy carefully to understand your rights and how we process your information.

What Data We Collect

When you order from Flowers Surrey, we collect personal data necessary to fulfil your order, to contact you about your purchase, and to provide our services efficiently. The personal data we may collect includes:

• Contact Information: Name, billing address, delivery address, and sometimes a telephone number for delivery updates.
• Order Details: Products you purchase, preferred delivery date, recipient information (name and address), and any personalized messages included with your order.
• Payment Information: Payment card details or transaction identifiers. Secure third-party payment processors handle payment details; we do not retain full card numbers or security codes.
• Communication Data: Any queries, feedback, or correspondence you send to us regarding flowers, deliveries, payments, or service issues.
• Technical Data: IP address, browser type, and information about how you use our website, collected via cookies and analytics tools. This helps us improve our website and offerings.

Lawful Basis for Processing Personal Data

Flowers Surrey processes your personal data lawfully and transparently. The lawful bases for processing your personal data include:

• Contractual Necessity: Processing your data to fulfil the order and deliver the floral products you purchase.
• Legal Obligation: Complying with relevant accounting, taxation, and consumer protection laws.
• Legitimate Interests: For customer service, order support, and product improvement. We balance our legitimate interests with your rights and expectations.
• Consent: In specific cases, such as for marketing communications, we will ask for your explicit consent before sending you any promotional material. You can withdraw consent at any time.

Retention of Your Data

We retain your personal data for as long as necessary to fulfil your order and for a period required by law for audit or accounting purposes. Typically, this means we will:

• Keep order and contact details for up to 7 years to comply with UK tax and accounting regulations.
• Retain technical data for up to 2 years to help us analyse and improve our service.
• Remove or anonymise data once it is no longer required.

We regularly review our data retention practices to ensure we do not keep personal data longer than necessary.

Use of Data Processors

Flowers Surrey uses select third-party processors to provide a seamless service and comply with industry standards. These third-party service providers assist us in functions such as payment processing, delivery logistics, website hosting, analytics, and customer support. We only engage processors who comply with GDPR requirements and ensure that your personal data is protected and processed only on our instructions. We do not allow our processors to use your data for their own purposes.

How We Protect Your Data

Your personal data is safeguarded using appropriate technical and organisational measures. These include secure servers, encryption protocols for data transmission, regular data access reviews, and staff training on data privacy. We ensure only those employees and processors who need your data to provide our services have access to it.

User Rights Under GDPR

If you reside or place orders from Surrey and the surrounding districts, you are entitled to exercise several important rights regarding your personal data:

• Right of Access: You may request a copy of your personal data and information about how it is processed.
• Right to Rectification: You may request corrections to any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request that we delete your personal data where there is no legal reason for it to be retained.
• Right to Restrict Processing: You may request that we limit the way in which we use your data.
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format for transfer to another provider.
• Right to Object: You may object to processing of your data when we rely on legitimate interests, unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw consent at any time.
• Right to Lodge a Complaint: You can contact your national Data Protection Authority if you are concerned about our data practices.

Policy Scope and Updates

This privacy policy applies to all customers placing orders with Flowers Surrey from Surrey and the surrounding districts, both through our website and via any direct communication channels. We may update this policy periodically to reflect changes in practices or legal requirements. Any substantial updates will be visible within our policy and dated accordingly. Please revisit this policy regularly to stay informed about how we protect your data.

Contact and Further Information

If you have any questions about this policy, your rights, or how we handle your data, you may contact us using the details provided on our website's contact page. We are committed to assisting with any queries or requests regarding your personal information.