Privacy Policy for Flowers Anerley Customers

Introduction

This Privacy Policy explains how Flowers Anerley ('we', 'our', 'us') collects, uses, stores, and protects your personal data when you place an order with us in Anerley or the surrounding districts. We are committed to safeguarding your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy applies to all customers who order from Flowers Anerley, whether online, by telephone, or in person.

What Personal Data We Collect

To process your order and provide our floral services, we will collect and process certain types of personal data. The information we may gather includes the following:

• Identity Data: Your full name, title, and, if applicable, recipient's name.
• Contact Data: Your address, recipient's delivery address, town or district, and contact numbers (where supplied).
• Transaction Data: Details about your purchase, order history, payment method (excluding full payment card details), and any correspondence related to your order.
• Message Content: Personal messages to be included with flower orders, as provided by you.
• Technical Data: When you order online, information such as your device’s IP address, browser type, access times, and pages visited may be collected for security and analysis purposes.
• Marketing Preferences: Your choices regarding receiving marketing communications from us.

We do not intentionally collect sensitive personal data unless it is provided by you for the fulfillment of your order (e.g., allergy information related to the recipient).

Lawful Basis for Processing Your Data

We process your personal data only when permitted by law. Our primary lawful bases for processing customer data are:

• Contractual necessity: To fulfill your order, delivery, and provide customer support.
• Legal obligation: To comply with accounting, tax, and legal requirements.
• Legitimate interests: To manage daily business operations, prevent fraud, and improve our services.
• Consent: For direct marketing communications, where you have given explicit consent. You may withdraw consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your flower order, including delivery to the address provided.
• Handling payment and billing, through secure, compliant payment processors.
• Communicating with you about your order status, delivery, or any queries you may raise.
• Improving our products and services through analysis of order patterns and customer feedback.
• Sending marketing communications (where you have opted in).
• Complying with applicable laws and regulations.

Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy, including fulfilling your order, meeting legal and accounting requirements, and as necessary for legitimate business interests. Typically, we retain order information and associated personal data for up to six years to comply with UK tax and record-keeping rules. After this period, data will either be securely deleted or anonymised so that it can no longer be associated with you.

Data Processors and Sharing

Your information may be shared with selected third parties who provide essential services to us. These include:

• Payment processing partners for secure transaction handling (such as card payment providers, who do not receive or retain full payment card details).
• IT and website support providers responsible for the functioning and security of our order systems.
• Delivery agents in cases where external partners assist with order fulfillment or delivery.

All data processors we use are required to comply with GDPR and process your data only for agreed purposes. Flowers Anerley does not sell or lease your personal data to third parties for marketing purposes. Your data will not be transferred outside the UK or European Economic Area unless adequate data protection safeguards are in place.

Security of Your Personal Data

We take the security of your data seriously and implement appropriate technical and organisational security measures. These may include encryption, secure storage, access controls, and regular staff training to prevent unauthorised access, loss, or misuse of your data.

Your Data Protection Rights

Under GDPR, you have several rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct incomplete or inaccurate information.
• Right to erasure: In certain circumstances, request that we delete your personal data.
• Right to restrict processing: Request that we restrict how your data is used in some situations.
• Right to object: Object to our processing where applicable, including direct marketing.
• Right to data portability: Obtain your personal data in a structured, machine-readable format and transfer it to another service provider where feasible.

If you wish to exercise any of these rights or have concerns about how we handle your data, please contact us using the details provided on our website or in your order confirmation. We may need to verify your identity before processing requests for your security.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Please review this page regularly to be aware of any updates. The latest version will always be available via our website or on request.

Contact Us

If you have questions or concerns regarding this Privacy Policy or your personal data, please contact us via our usual communication channels. We are committed to resolving any privacy issues promptly and transparently.

This Privacy Policy applies to all customers placing orders with Flowers Anerley in Anerley and the surrounding districts.