Flowers Stratford Privacy Policy

Introduction to Our Privacy Policy

At Flowers Stratford, we are dedicated to safeguarding the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, store, and protect your information when you place orders with Flowers Stratford, whether you are located in Stratford or the surrounding districts. We comply with the General Data Protection Regulation (GDPR) and only process data as outlined here. By using our services, you acknowledge and agree to the terms specified within this policy.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Flowers Stratford for delivery in Stratford and the surrounding districts. It covers your interactions with us, the data we collect, and your rights concerning your personal data.

What Data We Collect

When you interact with Flowers Stratford, we collect and process several types of personal data for the purposes of fulfilling your order, providing customer service, and adhering to legal obligations. The types of information we may collect include:

• Contact Details: Such as your full name, delivery address, and billing address.
• Order Information: Details of the products ordered, delivery instructions, and recipient information.
• Payment Information: Limited payment data necessary for processing your order (such as card type, transaction reference) – we do not store full card numbers or CVV details.
• Communication Records: Any correspondence you may have with us regarding your orders or enquiries.
• Technical Data: Your IP address and browser information when you use our website, for the purpose of maintaining security and website functionality.

Lawful Basis for Processing Your Data

We only collect and process your personal data where we have a lawful basis to do so under GDPR. Depending on the context, our lawful bases include:

• Contractual Necessity: Processing your data is necessary to perform the contract of sale and delivery when you place an order with us.
• Legal Obligation: We may need to process some information to comply with accounting, tax, or regulatory requirements.
• Legitimate Interests: In some cases, we process data to pursue our legitimate business interests (for example, to improve our services or handle enquiries), provided your rights and interests do not override these.
• Consent: For direct marketing or promotional communications, where we are required to have your explicit consent, you have the right to withdraw your consent at any time.

How We Use Your Data

Your personal data is used strictly for limited, specified purposes, which may include the following:

• Fulfilling and managing your orders, including processing payments, delivery arrangements, and order confirmations.
• Communicating with you about your order or responding to your enquiries.
• Supporting customer service processes and resolving complaints.
• Meeting our legal and regulatory responsibilities.
• Improving our products and services through anonymised data analytics.

How Long We Retain Your Data

We will retain your personal data only for as long as is necessary for the purposes for which it was collected, including for the fulfillment of your order, ongoing customer service, and to meet any legal or regulatory requirements. In general:

• Order-Related Information: Retained for up to six years in accordance with standard accounting and tax practices.
• Customer Communications: Kept for up to two years after final correspondence to allow us to respond to enquiries and complaints.
• Technical Data: Typically retained for a short period to ensure security and performance, generally not exceeding twelve months.

Once your personal data is no longer required, it will be securely deleted or anonymised.

Data Processors and Third Parties

We may share your personal information with trusted third-party service providers (data processors) where necessary for order fulfillment, payment processing, delivery logistics, website hosting, or for professional legal and accounting services. All processors are contractually required to protect your data and only use it in accordance with our instructions, in compliance with GDPR requirements. We do not sell or share your data with any third parties for their own marketing purposes.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have a number of important rights in relation to your personal data processed by Flowers Stratford. These include:

• Right to Access: You can request a copy of the personal data we hold about you and information about how we use it.
• Right to Rectification: You may ask us to correct or complete inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data, particularly where it is no longer needed for its original purpose.
• Right to Restriction: You may request that we limit the processing of your data under certain circumstances.
• Right to Object: You may object to our processing of your data where we rely on legitimate interests or for direct marketing.
• Right to Data Portability: You have the right to receive your data in a usable format and to transmit it to another provider.

To exercise any of these rights, please contact us by your preferred means. We may require you to verify your identity before fulfilling your request to protect your privacy.

Security of Your Data

We take the security of your personal data seriously and have implemented appropriate security measures to prevent unauthorised access, loss, or misuse. This includes encrypted connections for payment processing, secure physical and digital storage, and staff training in data protection best practices.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make changes, we will update the effective date at the top of this document. We encourage you to review this policy periodically to remain informed about how we are protecting your data.

Contacting Flowers Stratford

If you have questions or concerns regarding this Privacy Policy or your personal data, please reach out to us using your preferred communication method. We are committed to addressing your questions promptly and transparently.