How Flowers Grove Park Protects Your Data: Privacy Information

Flowers Grove Park Customer Privacy Policy

Introduction

This Privacy Policy sets out how Flowers Grove Park collects, processes, and safeguards your personal information when you place orders with us from Grove Park and neighbouring districts. We are committed to respecting your privacy and ensuring that all data processing is conducted in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Flowers Grove Park. It covers individuals residing in Grove Park, as well as those from the surrounding districts who utilize our products or services. By ordering from Flowers Grove Park, you agree to the terms outlined in this policy.

Personal Data We Collect

When you interact with Flowers Grove Park, we collect certain personal data necessary to process your orders and support your customer experience. The types of data we may collect include:

Identity Data: Full name, title.
Contact Data: Delivery address, billing address, telephone number, other contact details.
Order Data: Details of the items ordered, specific delivery instructions, payment confirmation details.
Payment Data: Payment method identifiers (such as card type) and transaction reference information provided by the payment service provider. We do not store full credit/debit card numbers.
Correspondence Data: Records of communications with you, including emails, written feedback, or complaints.
Technical Data: When you visit our website, we collect your IP address, browser type, and activity logs for security and analytics purposes.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to collect and process your data. Our processing activities rely on the following lawful grounds:

Performance of a Contract: To process and deliver your order and communicate with you about your purchase.
Legal Obligation: To comply with legal requirements regarding record-keeping and taxation.
Legitimate Interests: To enhance customer service, improve our products, and prevent fraud, provided these interests do not override your rights.
Consent: In specific situations, such as when you opt in to receive marketing materials, we rely on your explicit consent. You may withdraw this consent at any time.

How We Use Your Personal Information

Your personal data may be used for the following purposes:

Processing and fulfilling your flower orders.
Managing payments and refunds.
Communicating with you about your order, delivery, or customer queries.
Improving our services and products based on aggregated user feedback.
Meeting our legal, accounting, and regulatory requirements.
Preventing fraud and ensuring security of transactions.
Sending you marketing communications, only where you have specifically consented.

Data Retention

We will only retain your personal data for as long as is reasonably necessary to fulfil the purposes outlined above, including for legal, regulatory, or reporting obligations. Generally, we will keep:

Order and invoicing records for up to six years after the transaction to comply with tax and accounting regulations.
Customer service correspondence for up to two years from the date of last contact.
Marketing consent records for as long as you remain subscribed or until you withdraw your consent.
Technical and analytical data for up to thirteen months to enable usage analysis and security monitoring.

When retention is no longer required, your personal data will be securely deleted or anonymised.

Data Processors and Subprocessors

In order to provide our services efficiently, we may use trusted third-party data processors to support activities such as payment processing, website hosting, analytics, delivery logistics, and marketing. These processors only process personal data under strict instructions from Flowers Grove Park and are required to maintain the confidentiality and security of your information.

Such processors are only selected if they demonstrate compliance with applicable data protection laws and provide sufficient guarantees regarding data security. We do not transfer personal data outside the United Kingdom or the European Economic Area unless adequate safeguards are in place.

Your Rights Under GDPR

As a customer of Flowers Grove Park, you have various rights regarding your personal data, including:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You may ask us to correct or update inaccurate or incomplete data.
Right to Erasure: In certain circumstances, you can request your data to be deleted.
Right to Restrict Processing: You may limit the way we use your data in specific cases.
Right to Object: You can object to processing in certain circumstances, including direct marketing.
Right to Data Portability: You have the right to request your personal data in a commonly used and machine-readable format.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw such consent at any time.

If you wish to exercise any of these rights, please contact us in writing with reasonable proof of your identity. We will respond to your request in accordance with applicable GDPR timelines and requirements.

Children’s Privacy

Flowers Grove Park does not knowingly collect or process personal data relating to children under 16 years of age. Should we become aware that such data has been collected, we will take appropriate steps to remove it from our records.

Security of Your Data

We recognise the importance of keeping your information secure. We implement appropriate technical and organisational measures to safeguard your data against accidental loss, unauthorised disclosure, alteration, or access.

Policy Updates

We may review and update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. The date of the latest update will always be published at the end of this document. We encourage you to review this policy periodically to remain informed of how we are protecting your information.

Contact and Complaints

If you have questions about this Privacy Policy or how we handle your data, or if you wish to make a complaint, please contact us in writing. We take all privacy concerns seriously and will investigate any matters raised promptly. If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority.

Last updated: June 2024