Flowers Dulwich Privacy Policy

Introduction

This Privacy Policy explains how Flowers Dulwich ('we', 'us', or 'our') collects, uses, stores, and protects your personal data when you place orders with us, either directly or via our website. This policy specifically applies to all customers placing orders for flowers in Dulwich and the surrounding districts. We value your privacy and are committed to complying with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws.

What Data We Collect

When you place an order or communicate with Flowers Dulwich, we may collect the following categories of personal data:

  • Identity Data: Your name, and, if you are placing an order for delivery, the recipient’s name.
  • Contact Data: Your delivery address, billing address, phone number and (if provided) email address.
  • Order Details: Information about the products you purchase, purchase dates, and delivery instructions.
  • Payment Data: Limited payment information, such as the last four digits of your payment card number (full card details are processed securely by our third-party payment service provider and are not stored by us).
  • Correspondence: Information from communications with you, including order queries and customer service interactions.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:

  • Contractual necessity: Most data processing is necessary for us to fulfill our contract with you — for instance, to process, confirm, and deliver your flower order.
  • Legal obligation: We may process data to comply with legal and regulatory requirements, such as accounting and tax laws.
  • Legitimate interests: We may use your data to manage and improve our services, prevent fraud, or respond to your queries. We always ensure that our legitimate interests are balanced against your rights and freedoms.
  • Consent: Where required, for example, if you opt in to receive marketing, we will process your data based on your consent. You are free to withdraw your consent at any time.

Purposes of Data Collection and Use

We use your data for the following purposes:

  • To receive and process your flower orders.
  • To deliver products to the specified address in Dulwich or surrounding districts.
  • To communicate with you about your order status and resolve queries.
  • For administrative purposes such as invoicing or record-keeping.
  • To comply with our legal and regulatory obligations.
  • To send you service-related communications or, where you have given consent, marketing material about new products, offers, or events.

Data Sharing and Processors

We sometimes use trusted third-party service providers (processors) to process your data on our behalf. These processors only have access to the data needed to perform the services we require, and they act only on our instructions. Examples include:

  • Payment Service Providers: To process customer payments securely.
  • Delivery and Courier Services: To deliver orders to customers and recipients in Dulwich and neighbouring areas.
  • IT Service Providers: For hosting, storage, and maintenance of our website and electronic systems.
  • Accountancy and Legal Advisors: For compliance with business and legal obligations.

We do not sell or share your data with third parties for their own marketing purposes. All processors are contractually obligated to protect your data in line with GDPR requirements.

Data Retention

We only keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally:

  • Order-related data is retained for up to seven years to comply with financial and tax regulations.
  • Correspondence and customer service data are retained for a maximum of two years after your last interaction with us, unless required longer for legal reasons.
  • Data used for marketing purposes (if applicable) is retained until you withdraw your consent or unsubscribe.

At the end of the retention period, your data will be securely deleted or anonymised.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data where it is no longer needed or if you withdraw consent, unless we are required by law to retain it.
  • Right to Restrict Processing: Ask us to pause processing your data in certain circumstances.
  • Right to Data Portability: Request to receive your data in a structured, commonly used format or have it transferred to another data controller.
  • Right to Object: Object to certain types of processing, such as direct marketing.
  • Right to Withdraw Consent: If you have consented to specific processing, you can revoke your consent at any time.
  • Right to Lodge a Complaint: If you believe your data rights have been infringed, you can lodge a complaint with the UK Information Commissioner’s Office.

If you wish to exercise your rights, please contact us using the contact information provided on our website or other official channels.

Data Security

Flowers Dulwich applies appropriate technical and organisational measures to safeguard your personal information from unauthorised access, loss, or misuse. These include secure electronic storage, restricted access to data, regular system updates, and staff training on data protection. While we do our best to protect your data, please note that no transmission over the internet can be guaranteed as 100% secure.

Updates to this Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated via our website or by direct communication, where appropriate. The date of the latest revision will always be posted at the end of this document.

Contact Us

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please get in touch with us through the official contact options published on our website. We are committed to ensuring your privacy and will address your queries promptly and transparently.

This Privacy Policy was last updated in June 2024.