Privacy and Data Protection Policy – Flowers Chadwell Heath

Privacy Policy Overview

This Privacy Policy describes how Flowers Chadwell Heath collects, uses, stores, and protects your personal information when you place orders with us in Chadwell Heath and surrounding districts. The policy is designed to comply with the General Data Protection Regulation (GDPR) and outlines your data protection rights as our valued customer.

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Flowers Chadwell Heath, whether in person, online, or over the phone, from Chadwell Heath and its surrounding districts. By using our services or providing your personal information, you agree to the use of your information as set out in this policy.

Types of Data We Collect

Flowers Chadwell Heath only collects the minimum necessary personal data required to process and fulfil your orders and provide a high standard of customer service. The types of data we may collect include:

  • Contact Information: Name, delivery address, billing address.
  • Order Details: Product selections, card messages, special delivery instructions.
  • Payment Information: Partial payment card data (such as the last four digits) as processed by third-party payment processors. We do not store full payment card details.
  • Communication Data: Records of communications with our customer service (e.g., order clarifications).
  • Device and Usage Data: IP address, browser type, and order interaction data for online orders.

Lawful Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

  • Contractual Necessity: Processing your personal data is necessary to fulfil the contract of completing and delivering your flower order.
  • Legal Obligation: We may process some information to comply with tax, accounting, or other legal requirements.
  • Legitimate Interests: For purposes such as improving our services, addressing customer queries, or sending communications about your orders. We ensure these interests do not override your privacy rights.
  • Consent: We may request your explicit consent for specific uses of your data that go beyond core order fulfilment, such as sending direct marketing. Consent can be withdrawn at any time.

Data Retention

Your personal data is retained only as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, or to resolve disputes. Specifically:

  • Order and contact data is typically kept for up to six years after your last order, in line with accounting and record-keeping regulations.
  • Payment information is not stored by Flowers Chadwell Heath; it is handled securely by our payment processors.
  • Any communications data is retained only as long as needed to resolve your queries and will be deleted within twelve months unless legally required otherwise.

Data Processors and Third Parties

Flowers Chadwell Heath engages several trusted third-party processors to help provide our services. These include:

  • Payment Processors: To securely process payments for orders.
  • IT Providers: For website hosting, order management, and delivery logistics support.
  • Delivery Partners: Third-party couriers who require delivery information to fulfil your orders.

All our third-party processors are contractually obligated to protect your information and process it only for the specific purposes we outline. Your data will not be transferred outside the UK or European Economic Area unless adequate safeguards are in place as required by GDPR.

Your Data Protection Rights

Under GDPR, you have a number of rights in relation to your personal data held by Flowers Chadwell Heath, including:

  • Right of Access: You can request a copy of your personal information we hold.
  • Right to Rectification: You can ask us to correct any incomplete or inaccurate information.
  • Right to Erasure ("Right to be Forgotten"): You may request deletion of your data where there is no longer a legal reason for us to keep it.
  • Right to Restrict Processing: You can ask us to limit our use of your data in specific circumstances.
  • Right to Object: You can object to our processing of your personal data in certain situations, such as for direct marketing.
  • Right to Data Portability: You may request your data in a commonly used format, where applicable.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please get in touch with us via the contact details provided on our website or in store. We may need to verify your identity before processing your request.

Data Security

Flowers Chadwell Heath implements appropriate technical and organisational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. This includes secure storage, restricted system access, encryption where suitable, and staff training on data protection.

Changes to This Policy

We may update this Privacy Policy to reflect changes in legal or regulatory requirements, our data processing practices, or the services we offer. The most up-to-date version will always be available in-store and on our website. We recommend reviewing the policy periodically.

Contact and Complaints

If you have concerns or questions about how we handle your personal data, please contact us using the details available through our official communication channels. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

Thank you for trusting Flowers Chadwell Heath. We are committed to safeguarding your privacy and ensuring that your personal information is handled with the utmost care.