Privacy Policy for Flowers Harrow Customers

Introduction

At Flowers Harrow, we are committed to protecting your privacy and handling your personal data transparently, securely, and in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains what personal information we collect from customers placing Flowers Harrow orders in Harrow and the surrounding districts, the purposes for which we use your data, how long we retain it, the processors we use, and your rights over your data. By using our services, you acknowledge this policy applies to you.

What Data We Collect

When you place an order with Flowers Harrow, we may collect the following personal data directly from you for the purpose of processing and fulfilling your order:

  • Identity Data: Name, title
  • Contact Data: Delivery address, billing address, telephone number
  • Order Information: Details of the products you order, order instructions, delivery preferences
  • Payment Data: Payment card details (processed securely via third-party payment processors—we do not store card details on our own servers)
  • Communication Data: Information contained within correspondence with us, including queries and feedback
  • Technical Data: IP address, browser information, and other data collected via cookies when you use our website (if applicable)

We do not intentionally collect or process special category data (such as health information) or data relating to children under 16.

Lawful Basis for Processing

Under GDPR, we must have a valid lawful basis for every type of personal data processing we conduct. Flowers Harrow primarily processes your data on the following bases:

  • Contractual Necessity: Processing your data is necessary to enter into and fulfill our contract with you – for example, so that we can deliver your order as requested.
  • Legal Obligation: Some data processing is necessary to comply with our legal obligations, such as tax or accounting requirements.
  • Legitimate Interests: At times, processing may occur for our legitimate business interests, such as improving our services, handling customer queries, or preventing fraud.
  • Consent: Where legally required, such as for certain marketing activities, we will seek your explicit consent. You may withdraw consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfill your flower orders, including arranging delivery to the specified address
  • To communicate with you about your order status and respond to your customer service requests
  • To process payments securely
  • To administer and improve our website and customer services
  • To comply with legal or regulatory requirements
  • For internal business analytics and record-keeping
  • If you have given consent, to send you marketing information about our products or services

Data Retention

We only retain your personal data for as long as is necessary for the purposes it was collected, including to satisfy any legal, accounting, or reporting requirements. The period for which we retain your data depends on the type of data and our relationship with you:

  • Order and transaction records: Retained for up to 7 years after your last order, to comply with tax and financial regulations.
  • Correspondence: Kept for up to 3 years after your last communication with us.
  • Marketing data: Retained for as long as you remain opted-in, or until you withdraw consent.
  • Technical data: Retained for a maximum of 24 months for analytical or security purposes.

Your personal data will be deleted or anonymised after the relevant period.

Processors and Third Parties

We sometimes share your data with carefully selected third-party service providers (data processors), only to the extent necessary for them to perform services on our behalf. These include:

  • Payment processors for handling payments securely
  • Delivery partners to fulfil the delivery of orders
  • IT and hosting providers who assist in hosting our website and storing data
  • Professional advisers such as accountants or legal consultants, where legally required

We require all third-party processors to respect the security of your personal data and to treat it in accordance with the law. They are not allowed to use your data for their own purposes and will only process your personal data on our instructions.

Your data may be stored or processed outside the United Kingdom or European Economic Area; if so, we ensure appropriate safeguards are in place as required by GDPR.

How We Protect Your Data

We implement appropriate technical and organisational measures designed to protect your personal information against unlawful access, accidental loss, destruction, or damage. These include secure servers, encryption of sensitive data in transit and at rest, and restricting access to your data to authorised staff only. We regularly review our data security practices and protocols, and any third-party services or software in use.

Your Rights Under GDPR

You have a number of important rights concerning your personal data under the GDPR:

  • The right to access the personal data we hold about you
  • The right to have inaccurate or incomplete data rectified
  • The right to request the erasure (deletion) of your data, where appropriate
  • The right to restrict or object to certain processing of your data
  • The right to request that your data is provided to you or to another data controller in a commonly used, machine-readable format (data portability)
  • The right to withdraw consent at any time where we rely on consent for processing
  • The right to lodge a complaint with a supervisory authority if you believe your data rights are not being upheld

To exercise any of these rights, please contact us using the details provided on our website or via your usual Flowers Harrow point of contact.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for compliance with the law. Please review this policy regularly for updates. The date of the most recent version will be indicated at the bottom of this policy.

Contact Us

If you have any questions about this policy or how Flowers Harrow uses your data, please get in touch via the contact methods listed on our website. We are committed to addressing your privacy concerns promptly and transparently.

This Privacy Policy applies to all customers placing Flowers Harrow orders from Harrow and surrounding districts. Last updated: June 2024.