Flowers Borehamwood Privacy Policy
About this Privacy Policy
This Privacy Policy explains how Flowers Borehamwood collects, uses, stores, and protects your personal data when you place an order with us. It applies to all customers ordering from Flowers Borehamwood within Borehamwood and surrounding districts. We are fully committed to complying with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.
Personal Data We Collect
When you place an order, contact us, or interact with our services, Flowers Borehamwood may collect and process the following categories of personal data:
- Identity Data: Full name, title.
- Contact Data: Delivery address, billing address, and phone number.
- Order Data: Details of orders placed, order history, purchase preferences.
- Payment Data: Payment method (note: actual payment details such as credit card numbers are processed securely by third-party payment providers and not stored by Flowers Borehamwood).
- Correspondence: Records of communications, such as queries, feedback, or complaints.
- Technical Data: IP address, browser type and version, time zone setting, device identifiers, and information about your use of our website (if applicable).
Why We Collect Your Data: Lawful Basis for Processing
Under GDPR, we must have a valid legal basis to collect and use your personal data. Flowers Borehamwood processes your personal data based on the following legal grounds:
- Performance of a Contract: We process data to fulfill your flower order, arrange delivery, and provide customer support related to your purchase.
- Legal Obligation: To meet legal and regulatory requirements (taxation, accounting, or regulatory authorities).
- Legitimate Interests: Where necessary for our business interests, such as improving our services, managing our relationship with you, or ensuring IT security, provided these interests are not overridden by your rights.
- Consent: Where required, such as for sending you marketing communications, we will only do so with your explicit consent. You may withdraw your consent at any time.
How We Use Your Personal Data
Flowers Borehamwood uses your personal data for the following purposes:
- To process, fulfill, and deliver your orders for flowers and related products.
- To communicate order updates or respond to your enquiries.
- For customer service and managing our relationship with you.
- To comply with legal or regulatory obligations.
- With your consent, to send information about our products and special offers.
- To maintain accurate business records and improve our services.
Data Retention: How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for legal, accounting, or reporting requirements. Our typical retention periods are:
- Order and Customer Data: Retained for up to six years from the date of your last order, to comply with accounting and regulatory obligations.
- Marketing and Communication Preferences: Retained until you withdraw your consent or opt-out of receiving such communications.
- Technical Data: Retained for up to two years for analytic and security purposes.
After expiration of the retention period, your data will be securely deleted or anonymised.
Data Sharing and Processors
Flowers Borehamwood may share your personal data with trusted third parties or processors, only where necessary for business operations and always in accordance with data protection laws. These may include:
- Payment processors, to handle secure payment transactions.
- Delivery partners, to ensure timely and accurate delivery of your orders.
- IT and website service providers, for data storage, web hosting, and technical support.
- Professional advisors, such as accountants or legal consultants, where required.
- Regulatory bodies or law enforcement, where required by law.
All third-party service providers are contractually required to safeguard your information, process it only for specified purposes, and not to use it for their own purposes. We do not sell or rent your personal data to third parties.
International Transfers
We generally process and store your data within the UK or European Economic Area (EEA). If, on occasion, personal data must be transferred outside the EEA, we will ensure appropriate safeguards are in place to uphold your data rights and security, as required by GDPR.
How We Protect Your Data
Data security is important to Flowers Borehamwood. We implement technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure servers, encryption where applicable, access controls, and regular reviews of our data handling processes.
Your Rights under GDPR
You have a range of rights in relation to your personal data, including:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Ask us to correct or complete inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: Ask us to restrict how your data is processed (e.g., while a concern is investigated).
- Right to Data Portability: Request transfer of your data to another provider where technically feasible.
- Right to Object: Object to processing based on legitimate interests, or withdraw consent at any time for data processed based on consent (such as marketing emails).
If you wish to exercise any of your rights, please contact us using our website contact form or postal address. We may ask for proof of your identity before processing your request and will respond in accordance with applicable laws.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal or operational changes. The most current version will always be available on our website. We recommend reviewing it periodically for any changes.
Contacting Us
If you have any questions, concerns, or wish to exercise your data protection rights, please contact Flowers Borehamwood through our online contact form or by post. We take your privacy seriously and are committed to promptly addressing your concerns.