Your Privacy at Flowers Ilford: Data Collection and Rights

Flowers Ilford Privacy Policy

Introduction and Scope of Policy

This Privacy Policy explains how Flowers Ilford collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). It applies specifically to all individuals placing orders with Flowers Ilford from Ilford and surrounding districts. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Types of Data We Collect

Flowers Ilford collects personal data necessary to process your orders and provide our services efficiently. The types of data we may collect include:

Contact information: such as your name, delivery address, billing address, phone number, and any associated recipient details.
Order details: including products ordered, messages for flower cards, and delivery instructions.
Payment information: including transaction details, but not full card numbers unless required by our payment processor. Card information is securely handled and not stored by Flowers Ilford.
Communication records: such as your queries, feedback, and any correspondence with our customer service team.
Technical Data: including your IP address, browser type, and device details, which may be collected automatically when you interact with our website, in order to enhance security and user experience.

Lawful Basis for Processing Personal Data

Flowers Ilford processes your personal information only when there is a lawful basis under the GDPR. These bases include:

Contractual necessity: To fulfil your order, process payment, and arrange delivery, we must process and use your information.
Legal obligations: We may need to retain certain data to comply with applicable tax, accounting, or other legal requirements.
Legitimate interests: Where it is in our legitimate interest to enhance services, improve website functionality, or prevent fraud, provided such interests do not override your own privacy rights.
Consent: We may ask for your consent to send you marketing communications or to process data for specific purposes beyond what is described above. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used to provide and improve our floral delivery services. Specifically, data is used to:

Process and manage orders, including payment and delivery.
Communicate with you regarding your purchase or to respond to inquiries.
Personalise your experience and improve our website.
Meet legal and regulatory requirements.

How Long We Keep Your Data (Data Retention)

Flowers Ilford retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typically, order and transaction data are retained for a period required by local laws, such as six years for tax and accounting records, unless a longer period is needed to resolve disputes or enforce our agreements. After the relevant retention period, your information is securely deleted or anonymised.

Processors and Sharing Your Data

We may use trusted third-party service providers (known as "processors" under the GDPR) to help process your data. These processors only act in accordance with our instructions and are required to safeguard your information:

Payment processors to secure transactions.
Delivery and logistics partners to ensure flowers reach their intended recipients.
IT and cloud service providers that host our website and secure customer data.

Wherever we engage processors, we ensure that appropriate data processing agreements are in place to protect your personal information. We do not sell or rent your personal data to any third parties for marketing purposes.

International Data Transfers

Your data is generally processed and stored within the UK. If we need to transfer your data outside the UK or EEA, these transfers will only occur where adequate protection is ensured for your rights and freedoms in line with GDPR requirements, through appropriate safeguards such as Standard Contractual Clauses or similar mechanisms.

Your Data Protection Rights

Under the GDPR, you have several rights regarding your personal data. These include:

Right to access: You can request a copy of all personal data that we hold about you.
Right to rectification: You may ask us to correct or update any inaccurate or incomplete information.
Right to erasure: You have the right to request deletion of your personal data under certain conditions, such as where it is no longer necessary for the purpose for which it was collected.
Right to restrict processing: You may request we restrict our processing of your data in certain scenarios.
Right to data portability: You can request that your data be provided to you or another controller in a machine-readable format, where technically feasible.
Right to object: You may object to the processing of your data under certain circumstances, including for direct marketing purposes.
Right not to be subject to automated decision-making: Flowers Ilford does not conduct automated profiling or decision-making that would produce legal or similarly significant effects for customers.

How to Exercise Your Rights

If you wish to exercise any of your rights under the GDPR or have any questions about your data, you are welcome to contact us by post or via the web contact form on our website. We will respond within the appropriate statutory timeframe and may request verification of your identity before responding to help protect your data.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, or disclosure. These measures include secure servers, encryption, and strict access controls. Despite these safeguards, no method of transmission or storage can ever be guaranteed 100% secure, but we are committed to maintaining a high standard of data security.

Policy Updates

This Privacy Policy may be updated to reflect changes in our practices or relevant laws. Any updates will be posted on our website with a revised effective date. We encourage you to review this policy regularly to remain informed about how your information is protected.

Contact and Complaints

If you have concerns about how we handle your personal data, you may contact us using the details available on the Flowers Ilford website. You also have the right to lodge a complaint with the data protection authority if you believe your rights have been infringed.