Flowers Petts Wood Privacy Policy

Introduction

At Flowers Petts Wood, we care deeply about the privacy and security of our customers' personal information. This Privacy Policy explains how we collect, use, store, and protect personal data when you place floral orders with us in Petts Wood and surrounding districts. Our practices are aligned with the UK General Data Protection Regulation (GDPR).

Who This Policy Applies To

This Privacy Policy applies to all customers who place orders with Flowers Petts Wood, whether in person, over the phone, or through our website, from Petts Wood or the surrounding localities. By engaging our services, you agree to the terms laid out in this policy.

What Data We Collect

We collect the following types of information:

  • Identity Data: Your name, and, if applicable, the recipient's name.
  • Contact Information: Billing and delivery addresses, phone number, postal code.
  • Order Details: Information about your order, flower preferences, messages for cards, delivery dates.
  • Payment Details: Information necessary to process payments (such as last four digits of your card account and confirmation of payment status). We do not store your complete credit/debit card numbers; all payments are handled by secure, compliant payment processors.
  • Correspondence: Records of communications (inquiries, complaints, feedback).
  • Technical Data: When using our website, we may collect your IP address, browser type, device information, and cookie data for security and performance.

Lawful Basis for Data Processing

We process your personal data on the following lawful bases, as permitted by the GDPR:

  • Contractual Necessity: To fulfil your order and deliver your flowers as requested.
  • Legal Obligation: To comply with laws and regulations (e.g., tax records).
  • Legitimate Interests: For communicating about your order, handling feedback, and improving our service. We only use this basis where your rights and interests are not overridden.
  • Consent: In rare cases, such as marketing communications, we will seek your explicit consent, which you may withdraw at any time.

How Your Data is Used

Your information is used to:

  • Process and deliver flower orders accurately and efficiently.
  • Receive and resolve any issues or queries related to your order.
  • Comply with accounting and legal obligations.
  • Improve our services and understand our customers' preferences.
  • Send marketing messages only with your prior consent.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, we keep order records for up to seven years in accordance with tax regulations. If you have given consent for marketing, your contact information will be retained until you withdraw this consent.

Third-Party Data Processors

We may share your data with select third-party processors to help us deliver your orders and operate our business. These include:

  • Payment Processors: Secure companies that handle payments on our behalf. They comply with PCI DSS and adhere to privacy laws.
  • Delivery Partners: Couriers or drivers who require delivery information to fulfil your order.
  • IT Service Providers: Providers who support our website and systems for security and reliability purposes.

All such third parties are required to protect your data in accordance with the GDPR and only use it for the specific purposes we have instructed.

Your Rights Under GDPR

As a data subject within the UK/EU, you have significant rights regarding your personal data:

  • The right to be informed – about how we collect and use your data.
  • The right of access – to request a copy of your personal data.
  • The right to rectification – to correct inaccurate or incomplete data.
  • The right to erasure (‘right to be forgotten’) – in certain circumstances, to have your data deleted.
  • The right to restrict processing – to request a pause or halt on using your data in certain scenarios.
  • The right to data portability – to receive your information in a portable format, where applicable.
  • The right to object – to processing based on legitimate interests or direct marketing.
  • Rights in relation to automated decision-making and profiling – although we do not carry out automated decision making or profiling.

To exercise your rights or if you have questions about this policy, please contact us using the details provided below in-store or on our official website.

Protecting Your Data

We have put in place suitable physical, electronic, and managerial procedures to safeguard and secure your information. This includes secure payment processing, encrypted data storage, and limited access to personal information on a need-to-know basis.

International Data Transfers

We do not routinely transfer your personal information outside the United Kingdom or European Economic Area. Should it ever become necessary, for example, if a third-party IT provider operates from outside this region, we will ensure adequate protections are in place as required by GDPR.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available for review in-store and on our website. Please review it periodically.

How to Raise Concerns

If you believe your data has been mishandled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory body. However, we invite you to first contact us so we can address your concern directly.

Conclusion

Flowers Petts Wood is committed to handling your personal data with transparency, security, and respect. Your trust is important to us, and we aim to answer any questions you may have about our privacy practices. Thank you for choosing Flowers Petts Wood for your floral needs in Petts Wood and surrounding areas.