Flowers Purfleet Privacy Policy

Introduction

This Privacy Policy outlines how Flowers Purfleet ('we', 'us', or 'our') collects, uses, and safeguards your personal data when you place orders and interact with our services in Purfleet and its surrounding districts. Protecting your privacy and respecting your data rights are central to our values and legal obligations. By using our services, you acknowledge and agree to the practices described in this policy.

Who Does This Policy Apply To?

This policy applies to all customers who place flower orders with Flowers Purfleet, whether online, by phone, or in person, and who are located in Purfleet and the neighbouring districts. If you use our website, call us, or visit our outlet to purchase flowers, you are covered by this policy.

Categories of Personal Data We Collect

To provide our floral services, we collect and process the following categories of personal data:

• Identity Data: First name, last name, title, and sometimes date of birth (if provided for special offers or age verification).
• Contact Data: Billing address, delivery address, email address, and phone number.
• Order Data: Details about your orders, including flowers and gifts purchased, delivery instructions, and any card messages provided.
• Payment Data: Limited payment details such as transaction references. We do not store full card details, as payments are processed securely by third-party providers.
• Technical Data: IP address, device information, browser type, and information collected via cookies when you use our website.
• Correspondence Data: Information in any enquiries, complaints, or feedback you submit to us.

Lawful Basis for Processing

We process your personal data only where permitted by law, using the following lawful bases under the UK General Data Protection Regulation (GDPR):

• Contractual Necessity: To fulfill your orders and deliver flowers as requested, including confirming, updating, and tracking your order.
• Legal Obligations: To comply with accounting, tax, and other legal requirements.
• Legitimate Interests: To improve our services, manage administrative tasks, and prevent fraud, while ensuring these interests do not override your data rights.
• Consent: To send marketing communications or optional offers, only where you have explicitly opted in. You can withdraw your consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• To process and deliver your flower orders, including providing service-related communications.
• To manage customer relationships and respond to your enquiries or concerns.
• To process payments securely via trusted third-party payment providers.
• To improve our website, services, and customer experience (through anonymous analysis).
• To send you marketing material, only where you have agreed to receive such communications.
• To comply with legal, regulatory, and financial obligations.

How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, order-related data is retained for up to seven years for tax and accounting purposes. If you have subscribed to marketing, we will keep your contact data until you unsubscribe, withdraw your consent, or request erasure. After the retention period, personal data is securely deleted or anonymised.

Our Data Processors and Third Parties

To provide our services efficiently, we may share your personal data with trusted third-party service providers who act as data processors on our behalf. These may include:

• Payment service providers to facilitate secure transactions.
• Delivery companies ensuring prompt and safe flower delivery.
• IT and website hosting providers to manage our online platforms.
• Professional advisers, such as accountants or legal consultants, for compliance purposes only.

Each processor is contractually obliged to process your data with the highest security and only according to our instructions. We do not sell your data, nor do we permit our processors to use your data for their own purposes. If required by law, we might share your data with regulatory authorities.

Your Data Rights

Under the GDPR, you are entitled to exercise various rights concerning your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of incomplete or inaccurate data.
• Erasure: Request deletion of your data where there is no longer a lawful basis for retention (the 'right to be forgotten').
• Restriction: Request that we temporarily suspend processing of your data.
• Objection: Object to certain processing, such as direct marketing.
• Portability: Request your data in a structured, commonly used format to transfer to another provider.
• Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, please contact us using the details provided at the end of this policy. We may ask for identity verification before fulfilling requests. We aim to respond within one month, as required by law.

How We Protect Your Data

We have implemented appropriate technical and organisational measures to protect the confidentiality, integrity, and availability of your personal data. These include secure servers, access controls, encryption protocols for data in transit, and regular staff training. While no system is completely impenetrable, we regularly review and enhance our data protection processes to reduce risks.

Changes to This Privacy Policy

From time to time, we may update this policy to reflect changes in our practices or relevant laws. When we do, the latest version will be available on our website alongside the effective date. Significant updates will be clearly communicated where applicable.

Contact and Complaints

If you have any questions or concerns about this policy, or if you wish to exercise your data rights, please contact Flowers Purfleet using the contact options provided on our website or premises. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK's Information Commissioner's Office or your local supervisory authority.