Flowers Lambeth Privacy Policy for Orders in Lambeth and Districts

Scope of This Privacy Policy

This Privacy Policy explains how Flowers Lambeth collects, uses, retains, and protects your personal data in compliance with the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018. It applies to all customers and users ordering flowers and related services from Flowers Lambeth in Lambeth and the surrounding districts. This policy is designed to ensure clarity on your rights and our responsibilities regarding your data.

What Data We Collect

We collect personal data that is necessary for processing and delivering your orders, providing customer service, and enhancing your experience. The information we may collect includes:

• Contact Details: Your name, address, and delivery information
• Order Information: Details of your order, preferences, and any personalized messages included
• Payment Data: Payment method, transaction ID, and other payment-related details (note: card details are not stored by us and are processed by secure third-party payment providers)
• Communication Records: Correspondence between you and Flowers Lambeth, including emails or online contact forms
• Usage Data: Information about how you interact with our website, including IP address, device type, and browsing activity (mainly collected via cookies or analytics tools)

Lawful Basis for Data Processing

Under the GDPR, we must have a lawful basis for processing your personal data. The grounds on which Flowers Lambeth relies include:

• Contractual Necessity: Processing your data is required to fulfil your order and provide the requested services
• Legitimate Interests: We process certain data to improve our services, ensure website security, and address customer queries
• Legal Obligations: Some information may be processed to comply with applicable laws and regulations (e.g., tax or fraud prevention)
• Consent: Where required, particularly for marketing communications and use of non-essential cookies, we seek your explicit consent. You are free to withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is processed for the following purposes:

• Fulfilling and delivering your orders
• Processing payments via secure, accredited processors
• Responding to your inquiries and requests for information or support
• Improving our services, user experience, and website functionality
• Meeting legal and regulatory requirements
• Sending administrative and service-related information (e.g., confirmation of your orders)
• Sending marketing communications, where you have given explicit consent

How Long We Retain Your Information

We retain your personal data only as long as necessary for the purposes described above and to comply with our legal obligations. Typically:

• Order and delivery details: Retained for up to seven years after the transaction to comply with tax and accounting obligations
• Communication records: Retained for up to two years following your last interaction with us
• Marketing preferences: Retained until you withdraw your consent or unsubscribe
• Usage data: Retention periods set by our analytics providers, generally not exceeding two years

Once data is no longer required, it is securely deleted or anonymized.

Third-Party Processors

We use trusted third-party service providers to assist with payment processing, delivery logistics, IT infrastructure, and website analytics. These processors are carefully vetted with data protection agreements in place to ensure they handle your information securely and in compliance with GDPR. Your payment information, for example, is handled only by accredited payment processors and is not stored by Flowers Lambeth. No personal data is sold to or shared with third parties for their marketing purposes.

Data Security Measures

Flowers Lambeth implements appropriate technical and organizational measures to safeguard your personal data from accidental loss, unauthorized access, alteration, or disclosure. Measures include secure servers, regular security updates, restricted access controls, and encryption protocols for sensitive data where applicable.

Your Rights Under GDPR

As a Flowers Lambeth customer, you have several rights in relation to your personal data:

• Right of Access: Request access to personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Ask for your data to be deleted where there is no lawful reason for retention
• Right to Restrict Processing: Request limiting the way we use your data under specific circumstances
• Right to Data Portability: Receive your personal data in a commonly used format for use elsewhere
• Right to Object: Object to data processing in certain situations, including direct marketing
• Right to Withdraw Consent: Withdraw your consent to processing at any time where we rely on consent

To exercise any of these rights, please contact us via our official channels. We may need to verify your identity to process your request and will respond within the timeframes required by law.

Children’s Data

Our services are not intended for use by individuals under the age of 16. We do not knowingly collect or process the personal data of children under 16 years of age. If we become aware that we have inadvertently collected such data, it will be promptly deleted.

Policy Updates

We reserve the right to update this Privacy Policy to reflect changes in our practices or for legal or regulatory reasons. Significant changes will be notified in advance where appropriate. Please review this policy periodically to stay informed about how we protect your information.

Contact and Complaints

If you have any questions regarding how we handle your personal data, would like to exercise your rights, or wish to lodge a complaint, please use the contact details provided on our website. If your concern is not resolved, you have the right to contact the UK Information Commissioner’s Office (ICO).

This Privacy Policy is effective as of June 2024 and applies to all Flowers Lambeth customers placing orders in Lambeth and surrounding districts.