Privacy Policy for Customers of Flowers East Dulwich

General Information

This Privacy Policy describes how Flowers East Dulwich ('we', 'our', or 'us') collects, uses, processes, and safeguards personal information of customers who place orders with us from East Dulwich and the surrounding districts. We are committed to complying with the EU General Data Protection Regulation (GDPR) and to ensuring the protection and proper handling of all personal data we process. Understanding how we manage your information is important for every customer, so please read this document carefully.

What Data We Collect

When you order from Flowers East Dulwich, we collect only the personal data necessary to process your order and provide our services. This may include:

• Identity Information: Your name and, if specified, the recipient's name.
• Contact Details: Delivery address, billing address, and contact numbers where provided (e.g., mobile or landline number).
• Order Details: Floral products ordered, delivery instructions, date and time of delivery, and any messages to accompany your flowers.
• Payment Information: Transaction details processed securely through our third-party payment providers (we do not store card details ourselves).
• Communications: Correspondence with us regarding orders, feedback, or queries.

We do not intentionally collect sensitive personal data (such as health data or information about religious beliefs) unless it is directly relevant to process your order and you chose to provide it, for example, in a card message.

Lawful Basis for Processing Personal Data

The lawful bases upon which we process your personal information under GDPR are:

• Contract Performance: Processing your data is necessary for us to fulfil your flower order and deliver our services as requested.
• Legal Obligations: Retaining certain transaction data to meet statutory and tax reporting requirements.
• Legitimate Interests: Using customer information to maintain service quality, respond to enquiries, improve our offering, prevent fraud, and ensure security of our operations. We balance these legitimate interests with your privacy rights.

How We Use Your Information

Your personal data is used exclusively to deliver our products and services, including:

• Processing and fulfilling floral orders;
• Contacting you with order updates or questions about your request;
• Delivering flowers to designated recipients;
• Responding to your communications or customer service queries;
• Meeting record-keeping or legal requirements;
• Improving our products and services as part of ongoing business operations.

We do not use your information for unsolicited marketing unless you have separately provided consent to receive such communications.

Data Retention

Flowers East Dulwich keeps your personal data no longer than is necessary for the purposes stated. Typically, order and contact details are retained:

• For a period of up to 24 months after your last order to assist with repeat services and resolve any outstanding enquiries;
• Transaction and invoice information is retained for up to 7 years to comply with taxation and legal obligations.

Once your data is no longer required, it is securely anonymised or deleted from our systems.

Data Sharing and Processors

We do not sell or rent your data to any third parties. However, to process your order effectively, we may share certain personal data with trusted service providers acting as processors, such as:

• Payment Providers: Secure payment processors who handle your payment card details on our behalf.
• Delivery Services: Couriers and delivery agents responsible for fulfilling your floral deliveries.
• IT and System Providers: Cloud storage and order management systems that help us process and store your data safely.

All such partners are required to act in accordance with GDPR, process data only on our instructions, and protect your privacy at all times. We do not transfer your personal data outside the United Kingdom or European Economic Area, except where the level of protection meets GDPR standards.

Your Data Subject Rights

As a customer of Flowers East Dulwich, you have several important rights regarding your personal data under GDPR. These include the right to:

• Access: Request a copy of your personal data held by us.
• Rectification: Ask us to correct or update inaccurate or incomplete personal information.
• Erasure ('Right to be Forgotten'): Request that we delete your personal data when it is no longer required, subject to certain legal obligations.
• Restriction of Processing: Ask us to limit the way we use your personal data under certain circumstances.
• Data Portability: Receive your personal data in a commonly used, machine-readable format, and have it transferred to another provider if you wish and where feasible.
• Objection: Object to processing of your data where our processing is based on legitimate interests.

To exercise any of your rights, or if you have questions about how your data is handled, you can contact us using our published contact methods. If you believe your data is not being managed appropriately, you have the right to lodge a complaint with the Information Commissioner's Office or your local supervisory authority.

Protecting Your Information

Your personal information is kept confidential and protected by appropriate administrative, technical, and physical safeguards. These measures help prevent unauthorised access, loss, alteration, or disclosure of your information. Access to your data is restricted to staff and trusted service providers who require it to fulfil your order, and all those individuals receive training in data privacy and security obligations.

Policy Scope and Updates

This policy applies to all customers placing orders with Flowers East Dulwich from East Dulwich and surrounding districts. Our Privacy Policy is reviewed regularly and updated to reflect changes in law or business practices. Any changes will be communicated through our website, and the latest version will always be available for review prior to placing your order.

Thank you for trusting Flowers East Dulwich with your personal information. Your privacy is important to us, and we are committed to treating your data with respect and care.