Flowers West Heath GDPR Privacy Policy

Introduction

At Flowers West Heath, we are committed to protecting your privacy and ensuring that your personal data is handled safely and in compliance with the UK General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and share your information when you place orders with Flowers West Heath as a resident or business in West Heath and the surrounding districts. Understanding your rights and our responsibilities is our priority.

What Data We Collect

When you interact with Flowers West Heath, especially when placing an order, we collect and process several types of personal data. The specific data we collect includes, but may not be limited to:

• Identity Data: Your name, and if applicable, the name of the recipient of the flowers.
• Contact Data: Delivery address, billing address, and in some cases, a contact phone number (if provided for order tracking or delivery arrangements).
• Order Information: Details of the products you order, purchase history, and any special instructions related to your order.
• Transaction Data: Details about payments to and from you, including payment card information if applicable.
• Communications Data: Any correspondence you send us, such as queries, feedback, or complaints.

Lawful Basis for Processing

We collect and process your personal data based on clear lawful bases under the GDPR. For Flowers West Heath, these include:

• Contractual Necessity: We process personal information to fulfil your orders, process your payments, and deliver products. Without this data, we would not be able to perform our contract with you.
• Legal Obligation: We may process your personal data when required to comply with a legal obligation, such as records retention for accounting or tax purposes.
• Legitimate Interests: In certain cases, we may use your data to pursue our legitimate business interests, for instance, to improve our products and services, prevent fraud, or ensure the security of our services. We only do so where these interests do not override your fundamental rights and freedoms.
• Consent: In circumstances where none of the above bases apply and we need your explicit permission, we will seek your consent before processing your data, such as for certain marketing communications. You have the right to withdraw your consent at any time.

How We Use Your Data

We use the personal information collected for purposes including:

• Processing and delivering your orders accurately and efficiently
• Communicating with you regarding your orders or any related enquiries
• Handling payments and verifying transactions
• Keeping internal records for accounting, tax, and regulatory compliance
• Improving our products and customer service based on feedback and purchase history

Data Retention

Your personal data is retained only as long as necessary to fulfil the purposes for which it was collected, as well as to comply with applicable laws and regulations. Typically, we retain order details, payment records, and contact information for up to six years after your transaction to meet tax and accounting requirements. After the relevant retention period, your data will be securely deleted or anonymised.

Data Processors and Sharing

To provide our services, certain personal data may be shared with third-party service providers ("processors") who assist us in delivering our services. These may include:

• Payment processors: to handle your card payments safely and securely
• Delivery service providers: for the successful delivery of your order to your specified address
• IT and hosting providers: to support the secure operation of our internal systems and website

We require all third-party processors to respect the security of your personal data, to use it only in accordance with our instructions, and to comply fully with GDPR requirements. Personal data is not shared with advertisers or unrelated third parties, nor is it sold or leased to others.

Your Rights Under GDPR

As a customer of Flowers West Heath, you have important rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct incomplete or inaccurate information.
• Right to Erasure: You can request deletion of your data when there is no longer a legitimate reason for us to process it, subject to legal or contractual restrictions.
• Right to Restrict Processing: You may ask us to limit how your data is used under certain circumstances.
• Right to Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
• Right to Object: You can object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: If you have given consent for processing, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Complain: You can lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been breached.

Data Security

Your security is paramount. We take appropriate technical and organisational measures to protect your personal data from misuse, loss, unauthorised access, modification, or disclosure. Staff and third-party processors are bound by contractual and legal obligations to ensure your information remains confidential and secure at all times.

Updates to This Policy

We may periodically update this Privacy Policy to reflect changes in our practices or regulatory requirements. The latest version will always be available to customers ordering from West Heath and surrounding districts. We encourage you to review this policy from time to time to remain informed about how we protect your privacy.

Contact and Further Information

To exercise your rights, ask questions, or receive clarification about how we handle your information, please contact us directly or visit our shop. We take privacy matters seriously and will respond to any requests or concerns as promptly and transparently as possible.