Flowers Paddington Privacy Policy

Introduction

This Privacy Policy explains how Flowers Paddington collects, uses, stores, shares, and protects the personal data of our customers in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. It applies to all individuals placing orders with Flowers Paddington in Paddington and the surrounding districts. We are committed to ensuring that your privacy is protected and that your data is handled responsibly.

What Data We Collect

We collect personal data that you provide directly when you place an order, make an inquiry, or communicate with us. This may include:

Identity Data: Full name, title, and contact details (such as delivery address).
Contact Data: Telephone number and email address.
Transaction Data: Details of orders placed, including products purchased, delivery instructions, and order history.
Payment Data: Limited payment card details processed via our payment processor (we do not store full card numbers or security codes ourselves).
Technical Data: Information collected automatically, such as IP address, browser type, device information, and usage patterns if you use our website.
Correspondence: Records of communications with us, including queries and feedback.

We do not knowingly process special categories of personal data (such as health or biometric information) unless explicitly required and you provide your additional consent.

The Lawful Basis for Processing

We process your data under the following lawful bases as defined by Article 6 of the GDPR:

Contract: Processing is necessary for the performance of a contract with you, such as fulfilling your order and delivering items to you.
Legal Obligation: To comply with applicable legal and regulatory requirements, such as tax and accounting obligations.
Legitimate Interests: For the purpose of understanding your preferences, improving our service, or communicating important information relevant to your order that does not override your interests or fundamental rights.
Consent: Where you have provided consent, for example, to receive promotional communications. You have the right to withdraw this consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

Fulfilling and delivering your orders.
Processing payments and preventing fraudulent transactions.
Communicating with you regarding your orders, deliveries, or queries.
Recording and managing customer feedback and complaints.
Improving our services, offerings, and website user experience.
Meeting our legal and regulatory responsibilities.
Where permitted, sending you special offers and marketing communications.

Retention of Your Data

We retain your personal data only for as long as needed to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, or enforce agreements.

Order Information: Typically retained for up to 6 years for accounting and tax obligations.
Marketing Preferences: Retained until you withdraw consent or request deletion.
Technical Data: Retained for up to 2 years for analytical purposes.

Once your data is no longer required, it will be securely deleted or anonymized.

Processors and Data Security

To deliver our services, we may share your data with third-party processors who act on our behalf, including:

Payment service providers to securely process transactions.
Delivery and courier services to ensure timely delivery of your orders.
IT and cloud infrastructure providers that securely store data.

All such third-party processors are contractually obligated to protect your data and process it only according to our instructions and applicable laws. We never sell your data. Your data is stored within the European Economic Area (EEA) wherever possible. Should data be transferred outside the EEA, we ensure adequate safeguards in line with GDPR requirements.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request copies of your personal data.
Right to Rectification: You may correct incomplete or inaccurate data we hold about you.
Right to Erasure: You may request deletion of your data where legally possible.
Right to Restrict Processing: You can request that we limit how we process your data in certain circumstances.
Right to Data Portability: You may ask to transfer your data to another service provider.
Right to Object: You may object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw at any time.

If you wish to exercise any of these rights, please contact us using the details available on our website or in your order confirmation.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. Any changes will take effect when posted on our website. We encourage customers to review this policy regularly for the latest information on our privacy practices.

Contact and Complaints

If you have any questions about this Privacy Policy, your rights, or how we use your information, please contact us through the means provided on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority if you believe your data protection rights have been breached.

Conclusion

Flowers Paddington is committed to safeguarding your privacy and upholding your data protection rights. This policy applies to all customers placing orders within Paddington and the surrounding districts. Please refer to this policy for guidance on how your data is used, and do not hesitate to contact us if you require further information.