Flowers Pinner Privacy Policy

Introduction

At Flowers Pinner, we are dedicated to ensuring that your personal information is protected and handled responsibly. This Privacy Policy explains how we collect, use, store, and protect your data when you place orders with Flowers Pinner in Pinner and surrounding districts. It also outlines your rights under the General Data Protection Regulation (GDPR) and our obligations to you as a customer.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Flowers Pinner located in Pinner and neighbouring areas. By using our services, you agree to the terms set out in this Policy. We encourage you to read this document carefully to understand how and why we process your data.

Data We Collect

To provide our flower delivery and related services, Flowers Pinner may collect the following types of personal data:

• Identification Information: Your name, delivery recipient name, and contact details.
• Contact Details: Address, telephone number, and alternative delivery instructions.
• Order Details: Information about the flowers, gifts, or messages you order, including any special requests or messages for the recipient.
• Payment Information: Details required to process payments, which may include partial payment card information (we do not store full payment card details).
• Transaction History: Records of your orders, delivery history, and feedback you provide regarding your orders.
• Technical Data: Information about your device, browser, and how you interact with our website (such as IP address, browser type, and browsing activity within our site).

Lawful Basis for Processing Your Data

We are committed to processing your data lawfully, fairly, and transparently. The GDPR sets out several lawful bases under which personal data may be processed. Flowers Pinner processes your data under the following lawful grounds:

• Contract: We process personal data as necessary to fulfil our contract with you. This includes taking orders, processing delivery, and providing customer support.
• Legal Obligation: We may need to process data to comply with legal requirements, for example, for tax or accounting purposes.
• Legitimate Interests: We may use your information to improve and personalise our services, prevent fraud, or maintain the security of our website. Our interests never override your fundamental rights and freedoms.
• Consent: Where required, for example in sending direct marketing communications, we will obtain your explicit consent and you may withdraw this at any time.

How We Use Your Personal Data

Your personal data is used for:

• Processing and fulfilling your orders
• Delivering products to you or your chosen recipient
• Managing payments and refunds
• Communicating with you about your orders or in response to your queries
• Improving our products and services
• Complying with legal and regulatory obligations
• Sending you marketing communications if you have opted in

Sharing Your Data: Third-Party Processors

We may share your data with trusted third-party service providers who process information on our behalf to help deliver our services. These may include:

• Payment processing providers
• Delivery and courier services
• Web hosting and IT support companies
• Marketing service providers (only if you have consented to receive marketing)

All processors are required to comply with strict data protection standards and contractual obligations to use your information solely for the purposes specified by Flowers Pinner and not for their own purposes.

International Transfers

Flowers Pinner primarily stores and processes your data within the United Kingdom. Should your data be transferred outside the UK or the European Economic Area, we will ensure that adequate safeguards are in place in accordance with GDPR requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we will retain order and transaction records for a minimum of six years to comply with UK financial regulations. If data is retained for marketing purposes, we keep it until you withdraw your consent or unsubscribe. Data that is no longer required is securely deleted or anonymised.

Data Security

We take appropriate technical and organisational measures to protect your data against loss, theft, and unauthorised access. This includes secure web servers, encryption technologies where appropriate, and regular security reviews of our systems and processes.

Your Rights Under GDPR

Under the GDPR, you have several key rights regarding your personal data. These include:

• Right of Access: You may request a copy of your personal data that we hold.
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: You can ask us to restrict the use of your data in certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format for transfer to another provider.
• Right to Object: You may object to the processing of your data for direct marketing or other forms of processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

If you wish to exercise any of these rights, please contact us. For identification, we may need to request specific information from you to confirm your identity and ensure your right to access your personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to legal or operational requirements. Please review this page regularly to stay informed about any changes. Material changes to our practices will be communicated through appropriate channels.

Contact and Complaints

If you have questions, concerns or complaints about how we handle your personal data, please reach out to us. If you remain dissatisfied, you may contact the UK’s Information Commissioner’s Office (ICO), which is the supervisory authority for data protection matters in the UK.