Flowers Colney Hatch Customer Privacy Policy
Introduction
This Privacy Policy describes how Flowers Colney Hatch collects, uses, stores, and protects your personal data when you place an order as a customer from Colney Hatch or any surrounding districts. This policy ensures compliance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. By placing orders with Flowers Colney Hatch, you acknowledge and accept the practices described herein.
Scope of This Policy
This policy applies to all individuals who order flowers or related products and services from Flowers Colney Hatch, either online, over the phone, or in-store for delivery or pick-up from Colney Hatch and surrounding areas. It covers how we handle your data from the point of order to delivery and after-sales support.
Personal Data We Collect
Depending on your interactions with us, Flowers Colney Hatch may collect the following categories of personal data:
- Contact Information: Name, address, contact phone number, and, if applicable, recipient’s address and contact details.
- Email Information: Your email address, used for communication regarding orders, confirmations, and customer support.
- Order Details: Details of items ordered, payment method, delivery instructions, and any personalised message included with your order.
- Payment Information: We process payment card details via verified payment processors. We do not store credit or debit card information on our own servers.
- Website Usage Data: If you use our website, technical information such as IP address, browser type, device type, and usage statistics may be collected via cookies to enhance user experience and security.
Lawful Basis for Processing Personal Data
Flowers Colney Hatch processes personal data on the following lawful grounds, as defined under the GDPR:
- Contractual Necessity: We process your personal data as required to fulfill your order, arrange delivery, or provide after-sales support. Without this information, we would be unable to perform our contractual obligations to you.
- Legal Obligation: In certain circumstances, we are required to retain specific information to comply with legal, tax, or regulatory obligations.
- Legitimate Interests: We may process your data for our legitimate business interests, such as ensuring efficient delivery logistics, improving our services, responding to enquiries, or preventing fraud, so long as those interests do not override your fundamental rights and freedoms.
- Consent: When required, such as for marketing communications (where applicable), we will obtain your explicit consent. You may withdraw your consent at any time.
How We Use Your Information
Flowers Colney Hatch uses your personal data for the following purposes:
- Processing and fulfilling your flower orders, including delivery arrangements and order confirmations
- Communicating with you regarding your orders or enquiries
- Providing after-sales customer service and support
- Complying with mandatory legal obligations, including record-keeping and tax requirements
- Improving our products, services, and customer experience
- Detecting, preventing, and addressing technical issues or fraudulent activities
Retention of Personal Data
Your personal data will only be kept for as long as is necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Our standard retention periods are:
- Order and Transaction Records: Typically retained for up to 6 years to comply with HMRC and accounting regulations.
- Customer Correspondence: Retained for up to 2 years to facilitate after-care and resolve any disputes.
- Marketing Data: Retained until you withdraw your consent or unsubscribe, if applicable.
Once retention periods are met, your data will be securely deleted or anonymised to prevent identification.
Processors and Data Sharing
To provide our services and operate efficiently, we may engage third-party processors, who may process your personal data on our behalf and under strict contractual obligations. These include:
- Payment processors: To handle secure payment transactions
- IT service providers: To host our systems and ensure technical support
- Delivery partners: For delivering orders when required
We only select processors with robust data protection standards. Your data will not be shared outside the European Economic Area without adequate safeguards, and will never be sold to third parties for marketing purposes.
Your Rights Under GDPR
As a customer within the scope of this Privacy Policy, you have specific rights regarding your personal data, including:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of any inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data under certain circumstances, such as when data is no longer necessary or when consent is withdrawn.
- Right to Restrict Processing: Request the restriction or suppression of your personal data’s processing in certain situations.
- Right to Data Portability: Request a copy of your data in a machine-readable format for transfer to another provider, where applicable.
- Right to Object: Object to the processing of your personal data for certain purposes, including direct marketing.
- Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time, which will not affect the lawfulness of processing before withdrawal.
Security of Your Data
Flowers Colney Hatch implements appropriate technical and organisational security measures to protect your personal data from unlawful or unauthorised access, alteration, disclosure, or destruction. These measures are regularly reviewed in line with technological advances and industry best practices. Only personnel who require access to your data for business or regulatory reasons are permitted to do so.
Updates to This Policy
We may amend or update this Privacy Policy from time to time to reflect changes in our processes, technology, or statutory obligations. The latest version will always be available to customers when placing orders. Please review the policy periodically to stay informed of any updates.
Contact and Complaints
If you have any questions regarding this Privacy Policy, your data, or wish to exercise your rights, please contact us through our usual communication channels. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).