Flowers Orpington Privacy Policy Overview

Introduction

This Privacy Policy explains how Flowers Orpington collects, uses, protects, and retains your personal information in accordance with the General Data Protection Regulation (GDPR). It applies to all customers placing Flowers Orpington orders from Orpington and the surrounding districts. We are committed to maintaining the privacy and security of your personal data and ensuring transparency concerning your rights and our responsibilities.

What Data We Collect

When you interact with Flowers Orpington—including when you visit our website, place an order, or contact us—we collect and process personal data necessary to provide our services, fulfil our contract with you, and improve your experience. The categories of personal data we may collect include:

• Contact Information: Your name, delivery address, billing address, and telephone number.
• Order Details: Information regarding your floral order, such as product selection, special instructions, and delivery date.
• Payment Information: Details required to process your payment for orders (such as payment card details). Note: Sensitive payment data is processed by secure third-party payment providers, and we do not retain full card numbers or security codes.
• Communication Records: Records of your correspondence with us (such as emails, messages, and any queries or complaints).
• Technical Data: Limited information about your device and usage of our website, including IP address, browser type, access times, and referring websites, where applicable.

Lawful Basis for Processing Personal Data

We process your personal data only when there is a valid legal basis under GDPR. The principal bases on which we rely are:

• Contractual Necessity: Processing is required to fulfil your order and provide you with our products and services.
• Legal Obligations: Retaining certain records or verifying identities where required by law.
• Legitimate Interests: Improving our services, communicating with customers, preventing fraud, and ensuring the security of our operations; we always balance these interests with your privacy rights.
• Consent: Where required, such as for direct marketing materials (you may withdraw consent at any time).

How We Use Your Data

Your personal information is used exclusively for purposes such as:

• Processing and fulfilling your flower orders, including delivery to the specified address.
• Communicating with you regarding your orders, queries, feedback, or any complaints.
• Managing payments and invoicing.
• Complying with applicable legal obligations and resolving disputes.
• Improving the security and functionality of our website and services.
• Sending direct marketing communications about new products or promotions, where permitted.

Data Retention

We retain your personal data only for as long as is necessary for the purposes set out above and in accordance with applicable laws and best practices. Typically, contact and order data are held for up to six years following your last interacting or purchase, in line with tax and accounting requirements, before secure deletion or anonymisation. Payment information provided to secure third-party processors is subject to their retention policies and legal requirements.

Processors and Data Sharing

To deliver our services efficiently, we may share necessary personal data with trusted third parties acting as data processors. These include:

• Payment Processing Providers: To handle payments securely and in compliance with industry standards.
• Delivery Partners: To arrange and fulfil the delivery of your orders to the provided address.
• IT and System Support Providers: To maintain our website and internal systems, some providers may access data under strict confidentiality agreements.

All third-party processors are selected carefully and required to process your data only for the agreed purposes, using appropriate security measures, and in line with GDPR requirements. We do not sell or rent your personal information to third parties. International transfers of data are avoided unless necessary and safeguarded by appropriate legal mechanisms.

Your Data Rights

Under GDPR, you have several important rights with respect to your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure: You can ask us to delete your data, where legally permissible.
• Right to Restriction: You can request that we restrict our use of your data in specific circumstances.
• Right to Data Portability: Where feasible, you may request to receive your data in a structured, commonly-used format or have it transferred to another provider.
• Right to Object: You may object to certain types of processing, such as direct marketing or processing based on legitimate interests.
• Right to Withdraw Consent: Where your data is being processed on the basis of consent, you may withdraw this at any time.

Requests to exercise your rights will be managed promptly, subject to verification of your identity and any applicable legal restrictions. We are committed to upholding your privacy rights transparently and fairly.

Security of Your Data

We take the security of your information seriously. Appropriate technical and organisational measures are implemented to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include secure computer systems, access controls, and staff training in data protection.

Children’s Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children under this age. If we become aware of having inadvertently collected such information, we will take reasonable steps to delete it.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or improvements in our services. We will indicate at the top of this document the date of the last revision. Customers are encouraged to review this Policy regularly to remain informed of how their data is handled.

Contact and Complaints

If you have questions about this Privacy Policy or how your personal information is processed, or wish to exercise any of your data rights, you may contact us using our published contact methods. If you believe your data protection rights have not been upheld, you also have the right to lodge a complaint with the relevant supervisory authority for data protection in the United Kingdom.

This Privacy Policy forms part of our commitment to protecting your privacy whenever you use Flowers Orpington or place orders from Orpington and surrounding districts.